Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa
File: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (raw, json)
Hash identifier: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=
Subject key identifier: 5B:32:41:78:41:10:CD:66:1C:97:BA:B9:4D:7E:A9:D0:5F:63:07:FF
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 019427482270B77CF18388952232325E67FE
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205956
IP address blocks: 2001:678:430::/46 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:22:70:b7:7c:f1:83:88:95:22:32:32:5e:67:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3241784110cd661c97bab94d7ea9d05f6307ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:f8:82:4e:52:55:5b:e8:9e:7a:f0:b4:71:
3e:eb:ee:a0:bf:0f:30:1c:41:f8:0c:0a:1d:c6:c8:
f8:cd:61:80:f4:59:37:0d:b1:26:32:88:3a:dd:9d:
c3:cd:5e:dd:28:80:f7:c5:8f:17:d6:d6:fa:02:8e:
65:08:89:be:9e:3a:bf:b1:cd:49:93:8c:f4:59:85:
4c:4a:f5:d6:42:06:59:da:7c:31:9a:54:8c:f2:94:
80:cf:3a:02:f5:63:ca:ea:8f:00:e9:0b:c3:aa:b4:
b3:df:f8:6e:ac:26:c6:7c:16:08:04:53:b1:f4:f9:
0e:37:70:ca:f7:51:5b:12:91:cd:40:f1:85:ce:a8:
d9:2f:2f:f4:ab:d7:37:02:61:bc:92:e8:43:ed:4e:
aa:20:48:e0:76:1b:e7:f6:da:c9:d8:b3:9e:65:e1:
30:2c:22:85:20:7c:b8:6e:c8:01:54:5a:fd:7c:eb:
39:dc:e5:85:80:35:bc:08:46:aa:8f:d5:83:7b:04:
dc:42:0c:a7:00:26:90:ea:3d:9a:bc:f1:bd:3c:e8:
10:65:b4:eb:d4:30:11:e1:f3:9e:ae:0b:85:7b:10:
45:d5:e9:71:2e:ed:81:dd:6d:54:be:7f:a2:f6:97:
52:be:64:0a:1f:75:e6:e3:50:c9:88:cd:5b:7a:02:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:41:78:41:10:CD:66:1C:97:BA:B9:4D:7E:A9:D0:5F:63:07:FF
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:430::/46
Signature Algorithm: sha256WithRSAEncryption
2b:d6:18:4f:3e:cd:b2:63:4f:2b:32:1a:cf:39:b2:77:0f:04:
db:fb:7c:8e:0e:df:0d:d9:1c:b0:bf:83:35:52:05:40:e2:24:
23:87:02:41:0d:6a:f9:c2:2d:55:c5:aa:c1:83:81:5e:d8:53:
f9:de:fb:6d:a5:5a:f6:95:94:75:31:f9:c4:a8:ee:a8:e4:6f:
c7:06:a3:57:b3:0b:90:aa:5a:32:38:94:b6:47:51:fd:fd:60:
32:fc:6d:4b:b2:f9:2e:01:b2:98:a1:35:06:05:13:df:5e:5d:
9f:f6:cd:99:2b:d5:f8:a6:9a:58:af:23:d7:cd:96:03:54:8d:
a2:55:f7:41:9f:93:38:a7:1c:d3:4d:54:4f:b2:69:71:e9:33:
56:59:f8:8d:1a:9d:d6:1d:fe:57:81:7b:93:b2:32:42:b2:fe:
ed:11:7e:08:9c:17:db:fb:3a:cb:b4:30:05:1d:43:9c:17:ae:
85:f1:8a:72:7d:a9:44:1b:22:7b:1f:3d:e3:db:e9:91:b5:82:
47:e3:6f:c1:c1:14:b9:58:1b:82:ae:15:5d:23:52:d5:a1:14:
7e:14:7d:db:bc:4d:76:6e:99:63:08:67:22:3b:d7:6b:5b:b3:
1e:52:7d:9d:17:8f:d5:7a:43:be:42:a6:8b:2a:9b:ad:e0:ae:
16:34:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:49:54 2025 by rpki-client