Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WpdP8yZt3L9xNqDg9B_cgP2AQBc.roa
File: WpdP8yZt3L9xNqDg9B_cgP2AQBc.roa (raw, json)
Hash identifier: CCrl3dr1qcYEwWP9lKjspaCjfsjE43h7R3WFcnTrRnk=
Subject key identifier: 5A:97:4F:F3:26:6D:DC:BF:71:36:A0:E0:F4:1F:DC:80:FD:80:40:17
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252218644E88C944825FCF6D0E46FF95
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WpdP8yZt3L9xNqDg9B_cgP2AQBc.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204446
IP address blocks: 2a0e:b107:930::/44 maxlen: 48
2a0e:b107:934::/48 maxlen: 48
2a0e:b107:938::/48 maxlen: 48
2a0e:b107:93a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:18:64:4e:88:c9:44:82:5f:cf:6d:0e:46:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a974ff3266ddcbf7136a0e0f41fdc80fd804017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:ac:4d:c6:1e:60:24:c2:f4:17:74:47:c4:
17:55:e4:5f:90:0c:ab:4a:e1:0f:c2:d9:20:09:14:
93:4d:dc:cb:3b:ba:7a:ee:a5:ad:39:78:3e:fd:43:
d4:cd:36:50:b1:6f:78:bc:ab:79:c0:0b:dd:ac:47:
77:67:ed:d3:91:f5:d8:23:d3:a9:5a:9f:36:9f:6d:
ff:a1:7d:fb:d0:d9:ce:2a:a7:7d:5d:23:53:85:39:
6f:99:5a:d3:57:70:58:87:81:c2:c8:fa:10:85:b2:
8b:28:c3:70:c9:e5:6c:a7:a6:56:31:3e:30:1f:35:
75:18:1b:c5:bf:57:50:0d:0e:2f:74:82:75:80:da:
6c:a5:35:b7:c6:94:33:35:9d:29:10:e9:0e:3a:0f:
24:19:c6:b3:c3:d5:bd:0d:72:4e:99:98:68:0c:a9:
62:77:db:68:d6:13:5c:ce:8c:0e:cc:ae:67:cc:a5:
22:0c:ef:5c:6b:0c:de:56:69:45:61:8d:00:47:b8:
d9:a0:fe:72:d2:4e:bf:a7:fb:35:c3:03:7b:3f:92:
d5:8a:d9:c5:67:e6:fc:74:a1:3a:38:51:dd:51:df:
4e:2c:06:6a:e8:52:74:11:40:f4:83:ef:93:73:66:
28:53:1d:b7:22:6f:9b:3b:f8:dd:64:68:bf:a4:2f:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:4F:F3:26:6D:DC:BF:71:36:A0:E0:F4:1F:DC:80:FD:80:40:17
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WpdP8yZt3L9xNqDg9B_cgP2AQBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:930::/44
Signature Algorithm: sha256WithRSAEncryption
92:54:86:7e:ad:94:cb:00:b1:f4:f3:64:d2:9e:48:43:1b:df:
ad:5c:aa:29:08:db:58:d2:70:b3:ab:81:24:6c:df:4f:30:23:
12:97:cc:00:9d:dc:8f:a4:81:13:96:73:40:2a:0e:cf:dd:12:
0a:f6:e6:ff:b1:09:9f:90:83:82:64:fc:07:40:d9:8e:f0:6a:
aa:46:b4:e4:ba:55:fb:2d:1c:7a:73:8f:8c:af:6e:b1:da:7d:
a3:24:d3:6d:b6:7e:72:72:a4:3d:1e:47:a9:7e:16:cb:f1:5c:
7c:96:1c:cb:f6:b8:86:3c:db:6d:2d:57:33:5e:89:95:63:88:
b6:46:90:15:fe:65:e5:b7:ba:17:30:5b:f4:e3:bc:00:63:3f:
7d:b2:bc:99:e8:16:96:5f:66:89:b7:34:d8:ac:7b:82:27:82:
9a:34:68:83:30:24:4d:54:7c:c7:b2:19:db:b2:41:9c:54:9a:
49:bc:b2:9b:60:5f:64:45:94:fd:65:2c:03:fa:cf:ea:5e:3c:
90:5b:b8:7d:18:54:b2:57:78:36:ef:56:c9:d9:85:d1:6a:18:
20:b3:0e:53:8d:ff:d7:61:18:bd:42:d0:58:33:62:98:76:5c:
e9:7f:80:13:c3:93:9e:c9:a4:7c:41:7b:02:6f:8a:53:ea:77:
42:82:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:07 2025 by rpki-client