Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WyBY50_1Cq4uc-ZX3hm23jnxmZg.roa
File: WyBY50_1Cq4uc-ZX3hm23jnxmZg.roa (raw, json)
Hash identifier: mUd4+KjDh8KuKmhwM26mSaT58NFT11RWvzBbECzhgOY=
Subject key identifier: 5B:20:58:E7:4F:F5:0A:AE:2E:73:E6:57:DE:19:B6:DE:39:F1:99:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E5837A36D7EC44331F24370B7D3A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WyBY50_1Cq4uc-ZX3hm23jnxmZg.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140938
IP address blocks: 2a0e:b107:bf0::/48 maxlen: 48
2a0e:b107:bf1::/48 maxlen: 48
2a0e:b107:bf4::/48 maxlen: 48
2a0e:b107:bf6::/48 maxlen: 48
2a0e:b107:c90::/48 maxlen: 48
2a0e:b107:c91::/48 maxlen: 48
2a0e:b107:c92::/48 maxlen: 48
2a0e:b107:c93::/48 maxlen: 48
2a0e:b107:c94::/48 maxlen: 48
2a0e:b107:c96::/48 maxlen: 48
2a0e:b107:c9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e5:83:7a:36:d7:ec:44:33:1f:24:37:0b:7d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b2058e74ff50aae2e73e657de19b6de39f19998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:25:86:38:7f:2d:94:f1:a6:cf:17:99:b4:
a7:f1:7c:a3:1c:c0:8c:83:85:d7:c1:db:3a:7f:29:
ff:94:9c:db:36:23:11:d2:d7:ff:78:3f:1f:5e:09:
16:a1:44:03:3b:28:d0:e9:f1:93:65:3c:36:92:c7:
84:b9:25:89:be:b2:e5:4c:2c:33:92:db:06:77:e8:
d7:38:ca:67:ce:3d:36:41:cc:39:07:88:5c:1f:f4:
b9:79:9d:4c:68:60:c5:4f:3c:8a:ab:6a:89:db:04:
dc:33:0c:8d:1b:8a:95:db:df:24:91:1a:5b:96:12:
cd:de:c4:ff:44:88:ab:ba:64:99:3f:f9:09:43:dc:
44:3e:9e:45:97:c3:e6:ba:40:2c:4d:75:f7:57:16:
02:57:6c:94:b6:bb:42:d9:4c:38:9f:1a:a3:dd:ea:
53:6c:67:56:52:54:b3:c9:82:b8:7f:98:0f:9c:20:
cf:9b:40:8f:48:35:6f:9d:3f:7f:13:bf:85:03:66:
bd:fd:5a:f0:f2:6e:6b:06:46:04:01:8b:f1:9c:3a:
ca:32:7c:4b:19:56:2c:8d:9b:8f:c2:16:df:50:b9:
6f:bb:65:df:63:b1:0f:b9:4b:1c:3c:bb:d2:7f:ba:
57:4a:dc:79:7f:45:87:fa:5b:3d:dd:b5:18:fc:d9:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:58:E7:4F:F5:0A:AE:2E:73:E6:57:DE:19:B6:DE:39:F1:99:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WyBY50_1Cq4uc-ZX3hm23jnxmZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:bf0::/47
2a0e:b107:bf4::/48
2a0e:b107:bf6::/48
2a0e:b107:c90::-2a0e:b107:c94:ffff:ffff:ffff:ffff:ffff
2a0e:b107:c96::/48
2a0e:b107:c9f::/48
Signature Algorithm: sha256WithRSAEncryption
1b:15:99:d0:ed:ef:48:b6:3e:e3:cd:c3:79:40:7a:5d:bf:af:
25:e8:c2:c5:27:4a:11:2f:65:12:38:89:95:9e:32:b2:ec:6f:
05:05:0a:19:50:5c:e6:f5:9f:d3:16:91:97:dc:bd:8b:d0:ef:
e5:68:e5:c4:84:cd:15:7f:e0:6a:61:29:26:3b:d7:ae:df:d5:
f0:03:a1:e6:82:55:50:6d:2e:a8:4f:7d:70:ef:fa:69:63:e7:
f9:5d:aa:ad:59:4d:78:c4:78:6b:a1:ae:2c:a8:7c:39:ab:83:
e3:7a:e4:3c:b2:3e:83:b7:04:72:90:c4:ef:dc:7c:e1:8d:88:
d0:ae:bc:91:e4:e4:88:06:bb:f6:cb:8e:2e:f1:44:dc:5b:5c:
a7:45:46:db:b4:0a:d2:ee:14:d0:aa:e7:b5:6f:45:3f:85:ff:
31:00:97:54:96:5b:c8:01:34:9d:aa:11:5f:b5:51:ba:77:9b:
d2:18:c5:5e:a0:c3:6d:bb:c5:d7:b5:6d:ed:8c:1c:cc:f5:3a:
a5:db:da:53:ce:c8:3e:4d:00:e9:20:9e:53:0f:25:91:a4:73:
b7:f1:23:26:cc:6c:c7:a6:aa:67:8c:3c:d4:89:e4:0f:24:2b:
04:1d:7b:1a:7b:68:ee:77:06:b6:79:68:29:48:8a:f2:35:39:
b0:5e:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:49 2025 by rpki-client