Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/WmCZReUuTXguPw2N1-pQDN4eY8Q.roa
File: WmCZReUuTXguPw2N1-pQDN4eY8Q.roa (raw, json)
Hash identifier: i9te18DkIFHxNIMWX6rLdU14e7SgKKN/t+MPDMCrVDI=
Subject key identifier: 5A:60:99:45:E5:2E:4D:78:2E:3F:0D:8D:D7:EA:50:0C:DE:1E:63:C4
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01930741EEDDF4C6F27E295C09C18336A0DF
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/WmCZReUuTXguPw2N1-pQDN4eY8Q.roa
Signing time: Thu 07 Nov 2024 15:33:01 +0000
ROA not before: Thu 07 Nov 2024 15:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208333
IP address blocks: 2a12:7a40:9905::/48 maxlen: 48
2a12:7a40:9915::/48 maxlen: 48
2a12:7a40:9925::/48 maxlen: 48
2a12:7a40:9935::/48 maxlen: 48
2a12:7a40:9945::/48 maxlen: 48
2a12:7a40:9955::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:41:ee:dd:f4:c6:f2:7e:29:5c:09:c1:83:36:a0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Nov 7 15:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a609945e52e4d782e3f0d8dd7ea500cde1e63c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:22:b8:6b:4d:15:e0:3a:b3:a9:30:b4:d8:
bf:88:6e:70:57:e0:ff:2c:84:e2:23:58:7a:f0:e4:
ba:b4:39:d7:83:8a:81:b1:ff:c2:a6:e1:4a:8c:e2:
d0:1e:f2:ba:ea:59:4d:e7:ec:3e:fe:a1:13:05:d3:
cb:d5:4e:16:89:bb:c3:33:7f:12:38:7f:c2:f3:e3:
17:dc:08:67:4f:2c:ca:ca:c3:0d:b5:f7:9e:eb:05:
26:8e:7d:b0:92:f8:01:d3:4d:35:4a:d5:10:8b:15:
46:46:c0:58:00:b8:62:73:e3:ab:3e:75:82:3d:bc:
be:6a:48:25:d8:fa:cd:48:58:dd:75:22:76:25:e0:
4c:c3:bf:a6:8a:58:e1:35:50:67:fa:a1:fb:b5:18:
54:0a:4f:f4:66:14:c1:94:23:09:68:e7:bf:c7:63:
80:7b:39:a2:de:b5:f4:4a:1e:97:d8:a3:ab:22:4c:
d5:b7:e1:ba:cc:14:fc:5f:93:47:c5:ff:a6:9a:8e:
c4:d9:0c:1f:47:9d:b5:b5:e2:ae:27:87:78:45:51:
78:e6:ee:6e:2e:c0:c3:d3:a7:a5:41:6a:5c:e5:f3:
b3:7e:43:e3:04:49:80:7c:b9:75:63:92:97:6f:0f:
79:ad:13:da:24:b1:89:38:64:bb:81:40:47:a9:23:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:99:45:E5:2E:4D:78:2E:3F:0D:8D:D7:EA:50:0C:DE:1E:63:C4
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/WmCZReUuTXguPw2N1-pQDN4eY8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:9905::/48
2a12:7a40:9915::/48
2a12:7a40:9925::/48
2a12:7a40:9935::/48
2a12:7a40:9945::/48
2a12:7a40:9955::/48
Signature Algorithm: sha256WithRSAEncryption
5f:06:88:55:ae:c5:85:56:b1:9a:ff:02:62:42:e6:f9:94:52:
ee:01:3b:cf:9a:72:ef:fb:39:81:f8:de:21:73:66:c1:1b:f4:
2d:51:e5:54:5f:5e:70:eb:7e:d9:7c:1f:0e:73:a5:bc:fb:e7:
4b:f5:10:f5:6d:19:19:be:24:32:ae:2e:80:62:fb:8e:70:d1:
ff:3e:42:de:7c:e9:35:71:e9:fc:30:e8:56:b0:15:ab:f9:1a:
28:fb:b4:bf:8c:59:d2:3f:2c:5f:e7:b0:10:fe:0f:6d:22:bb:
e6:3a:09:91:36:30:d6:8f:2b:b8:82:9b:f1:69:87:6f:77:59:
84:5a:49:bd:86:b7:26:5e:3f:2c:44:64:4a:79:43:c8:5c:2c:
e1:98:25:75:ae:20:8c:68:aa:90:83:73:79:3f:ae:21:c6:d9:
91:e6:e2:4f:80:ca:36:97:7e:67:a7:5c:b8:fa:ce:a3:04:af:
25:2a:6b:38:07:18:2d:f1:f0:e6:96:55:14:af:26:70:fa:33:
79:f6:30:5a:44:e8:df:9b:41:f5:1d:21:df:0b:f6:37:96:bb:
39:4e:1b:26:df:18:6c:bb:ef:e0:93:18:df:8f:f1:ae:3c:6d:
11:58:56:df:74:94:79:49:77:61:b3:40:f9:4d:08:16:22:d3:
f7:23:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:37:36 2024 by rpki-client on console-ams.rpki-client.org