Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/WzbbS-CvpAp-X59KDM_38Kb2Q90.roa
File: WzbbS-CvpAp-X59KDM_38Kb2Q90.roa (raw, json)
Hash identifier: nHcAVErDor/w6cF6rsBmTNyYVia/mJgseR3zdZens+w=
Subject key identifier: 5B:36:DB:4B:E0:AF:A4:0A:7E:5F:9F:4A:0C:CF:F7:F0:A6:F6:43:DD
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 01942068611D44EDA1E3C57D4C8818744E94
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/WzbbS-CvpAp-X59KDM_38Kb2Q90.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6279
IP address blocks: 2a03:5400:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:61:1d:44:ed:a1:e3:c5:7d:4c:88:18:74:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b36db4be0afa40a7e5f9f4a0ccff7f0a6f643dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:e3:4b:7a:d2:13:de:ad:f5:75:18:ed:bd:
80:d9:7d:d9:02:f7:05:cc:bd:e5:37:52:c7:2c:64:
d2:54:8e:71:d0:20:97:a4:ae:f8:69:b2:99:7e:8f:
44:52:65:1c:d1:e1:67:8e:23:66:89:12:d0:46:c2:
f1:61:7d:6f:b5:48:9c:22:fb:8b:b4:0f:0c:e7:44:
eb:b7:a1:a0:e4:45:5e:09:8f:ac:31:30:28:a0:46:
74:9c:92:e8:41:ed:99:08:fd:c5:bf:17:1b:11:da:
5d:1c:1e:6e:80:f3:b9:4e:d6:03:bf:b5:6e:81:0e:
71:22:13:11:51:27:29:93:a3:51:87:1f:4c:aa:9a:
aa:63:96:16:f3:0c:fd:60:35:eb:67:ee:aa:c7:4c:
f8:91:f3:b0:8e:20:9e:2e:93:be:56:56:3b:e6:4f:
4e:52:e3:8d:a9:1a:27:13:19:17:cd:51:69:65:f5:
61:a9:e9:b8:d4:cb:1f:9e:37:7c:94:22:c3:2d:50:
d9:a5:1c:bf:81:9d:5e:f2:bd:74:1e:8e:d3:75:b8:
d4:4b:ba:d0:e0:44:5b:df:59:94:26:a9:00:66:7a:
4b:5e:3d:4a:db:3b:8a:72:66:9d:43:0a:73:0c:b5:
7c:bd:fb:7f:0f:d7:62:28:93:20:95:ec:fc:34:1a:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:DB:4B:E0:AF:A4:0A:7E:5F:9F:4A:0C:CF:F7:F0:A6:F6:43:DD
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/WzbbS-CvpAp-X59KDM_38Kb2Q90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5400:100::/40
Signature Algorithm: sha256WithRSAEncryption
a1:3e:e0:f9:75:e2:03:d2:21:f7:6a:db:07:25:5a:f4:4a:b3:
ef:fd:59:9f:af:1e:2b:ba:30:ee:a3:99:3c:2c:9a:66:a3:e0:
d8:b9:71:37:20:94:74:25:a1:d9:5e:ec:b7:fe:ab:a6:f8:21:
dd:81:3f:02:16:f1:dc:32:25:21:88:1a:77:e9:63:01:2a:ce:
d0:e7:fe:20:29:b3:0a:b3:ae:a5:86:15:c3:4e:83:34:a1:da:
ed:37:9c:cf:aa:f3:29:75:31:df:43:52:5c:45:77:88:92:c4:
53:8e:ae:c2:0f:c0:6c:e4:ce:3a:20:35:03:6e:cf:52:20:9a:
38:f0:65:57:73:12:d9:6e:2a:94:c8:43:be:63:d4:7b:dd:f0:
d7:ce:2c:61:41:ce:df:3c:e0:f3:bf:d1:92:7e:47:bd:ac:c1:
dd:ae:36:da:f2:f8:87:52:f7:7c:98:00:ed:ab:80:2c:e9:1a:
cd:9c:43:34:f7:e3:86:d0:7b:bc:64:79:81:fd:b4:9a:4c:85:
66:f4:72:cf:e7:2d:da:31:76:27:6d:f2:67:bd:9a:97:2b:5e:
05:17:ac:8f:e6:bd:48:e5:6b:e2:46:b7:9c:6e:91:fc:40:6f:
f7:e2:d3:f8:c0:74:2a:e8:97:78:aa:8f:bb:81:71:f6:67:ea:
8b:2f:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:59 2025 by rpki-client