Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa
File: WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa (raw, json)
Hash identifier: JLVgefvD6m/xi9Px1GxKDSJNk6p918nr8nA8BYm/OiE=
Subject key identifier: 58:26:01:E5:98:D0:3C:6C:28:C1:AA:09:D3:A3:19:16:2D:17:B4:F1
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019218BE7941240A3E72E12C683E9BAA5E2E
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa
Signing time: Sun 22 Sep 2024 07:59:48 +0000
ROA not before: Sun 22 Sep 2024 07:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214341
IP address blocks: 2a01:e901:10::/48 maxlen: 48
2a01:e901:20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Nov 2024 15:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:18:be:79:41:24:0a:3e:72:e1:2c:68:3e:9b:aa:5e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Sep 22 07:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=582601e598d03c6c28c1aa09d3a319162d17b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:4f:5e:12:b9:ba:90:45:80:c9:5d:72:88:
d4:74:f5:d8:67:a2:dc:11:67:14:98:2c:3e:e7:98:
77:f8:15:ee:5d:8c:5d:ad:70:93:db:7a:71:b7:73:
99:9f:3d:51:c3:62:a2:de:78:24:cc:ae:07:69:ee:
4c:96:12:91:15:14:3a:70:e3:9f:f7:47:f9:31:bd:
34:42:9d:2f:1f:bc:89:51:b3:5c:c0:0c:8a:d4:73:
74:42:92:ab:e7:28:bc:fd:ce:d5:17:be:cf:8a:21:
25:43:96:a2:2a:b0:4b:ec:2c:c7:c9:59:e3:a9:c5:
1e:cf:2a:6e:34:04:ef:3c:a9:03:19:ad:26:48:54:
1a:23:69:27:0e:08:7e:65:08:2d:c6:6b:a4:2c:bd:
60:83:18:4a:38:c0:d4:52:cb:dc:be:89:d6:ae:e2:
15:0a:6b:f4:37:6e:6b:c3:13:da:4b:37:4b:c4:11:
33:9b:90:c3:ad:b1:cf:23:c8:d1:07:e5:62:0d:fe:
26:16:d8:db:c3:77:3a:04:cc:33:16:84:21:5e:d3:
db:77:41:f7:0d:9d:e8:a1:ea:cf:ae:66:08:4b:d4:
b3:f9:16:a7:fb:fb:db:8f:65:9e:00:3d:7e:aa:62:
78:83:75:b9:0f:97:7e:77:56:60:2e:d2:6a:79:71:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:01:E5:98:D0:3C:6C:28:C1:AA:09:D3:A3:19:16:2D:17:B4:F1
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:10::/48
2a01:e901:20::/44
Signature Algorithm: sha256WithRSAEncryption
69:51:6d:12:66:0d:78:92:df:92:28:66:0a:7a:10:90:08:87:
a7:3c:67:66:dc:ff:9c:2a:2a:8f:0b:44:13:8c:4e:4b:a9:54:
89:2b:d6:55:7c:e4:64:18:94:11:da:70:6f:71:a4:7f:b5:f3:
02:5a:08:b8:8b:2b:a8:e7:1b:e2:e3:d3:0a:d8:24:a1:4f:e9:
83:1d:8e:ad:6f:13:dd:3a:50:e0:11:fc:6b:c0:cd:52:e5:d6:
d3:47:31:17:c0:c8:a7:03:4c:a9:e9:e3:4e:09:08:3b:4c:b4:
f4:6c:5d:6d:a0:d3:a1:b6:d5:d7:60:44:6c:d9:18:44:fe:d4:
c8:ae:f7:ce:a9:5a:9b:78:80:56:9f:84:5a:82:c3:de:47:7e:
29:58:1a:5f:85:40:77:0c:d9:71:8c:a3:c2:7e:58:53:ab:fd:
aa:ba:8d:9d:32:fa:99:dc:e7:fb:7a:bf:e7:e2:96:a3:75:60:
3e:2c:ae:71:c3:a2:cf:84:cc:23:a5:81:8e:f9:7f:7d:46:49:
ee:31:1f:5f:e5:f9:cb:55:b3:44:1c:d8:8f:4e:d9:74:71:6e:
cf:9a:54:fb:f7:71:de:2d:55:e1:9b:9a:a0:c9:31:16:8b:7c:
22:15:ef:be:13:53:0d:e9:63:48:86:bd:aa:de:58:8d:6f:51:
3c:f5:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 23:29:42 2024 by rpki-client on console-ams.rpki-client.org