Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/0Hyzo0hnpiHBxDW04br4Ws6_FwM.roa
File: 0Hyzo0hnpiHBxDW04br4Ws6_FwM.roa (raw, json)
Hash identifier: TnF21hPVFwWeFBh7Z+3PzalMv9cO4yneAnDPRQJ2X9o=
Subject key identifier: D0:7C:B3:A3:48:67:A6:21:C1:C4:35:B4:E1:BA:F8:5A:CE:BF:17:03
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018E5D70EC75FCC3B6EB33FEB8EAD3C4D66B
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/0Hyzo0hnpiHBxDW04br4Ws6_FwM.roa
Signing time: Wed 20 Mar 2024 19:57:45 +0000
ROA not before: Wed 20 Mar 2024 19:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25098
IP address blocks: 45.94.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:70:ec:75:fc:c3:b6:eb:33:fe:b8:ea:d3:c4:d6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Mar 20 19:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d07cb3a34867a621c1c435b4e1baf85acebf1703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:f5:a8:66:7e:1d:38:ff:8f:0c:1b:af:37:
ee:56:bb:e2:41:88:80:9f:09:c8:01:bf:19:14:a7:
50:a5:28:93:48:c0:24:ef:6b:73:fd:7e:03:70:2d:
5d:51:db:2e:bc:b7:3f:8d:d9:bb:6d:43:97:88:69:
86:10:03:6f:bc:fa:bc:42:6a:4e:07:7b:58:68:b9:
c6:9f:c3:85:88:a2:ce:d0:13:6b:5e:ac:fc:d0:f4:
48:59:19:5b:e6:f8:ce:08:bb:33:4f:fc:93:27:3f:
2f:0c:3a:4a:db:23:b0:53:8c:51:c4:44:36:c1:cd:
4f:5c:d0:2f:15:64:cd:4d:14:66:95:6a:2d:9f:f0:
15:e8:c5:d1:75:92:24:8f:d6:33:23:07:9a:a8:e9:
b5:b4:fd:c5:b4:f3:be:3a:48:04:a6:4a:31:4e:5b:
6f:d2:0d:10:63:b9:d2:4a:f7:3c:96:e8:2e:ea:71:
db:df:75:cc:26:d6:a1:df:42:50:5f:37:a8:2e:c9:
4b:a9:93:c2:54:a6:6c:20:f7:a0:8d:39:4f:3b:0f:
d2:a5:a0:18:a2:04:5f:e7:b6:e2:98:80:47:71:dc:
bb:a3:09:56:4d:4a:6c:04:cd:b1:66:f9:41:3f:d4:
2b:0e:07:04:42:47:2b:8c:de:0a:50:bc:fd:6d:94:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:B3:A3:48:67:A6:21:C1:C4:35:B4:E1:BA:F8:5A:CE:BF:17:03
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/0Hyzo0hnpiHBxDW04br4Ws6_FwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/22
Signature Algorithm: sha256WithRSAEncryption
98:bc:0e:ea:02:f4:da:83:78:94:b2:7b:5c:1a:9d:06:3a:e7:
a1:97:74:90:65:ab:5f:b3:d8:28:dd:a3:d3:72:a6:d0:05:7c:
86:ca:2d:a6:92:5f:32:2c:55:69:48:43:0d:53:da:c8:73:1f:
d5:ec:75:50:c4:fd:db:60:0d:79:cf:01:7f:c2:c1:6e:a6:02:
78:13:e1:2f:06:41:74:b7:33:51:c1:eb:0c:07:42:7f:a4:3d:
a3:96:0f:8e:34:ca:8c:ea:b7:eb:86:65:ce:59:dc:90:05:b8:
50:10:59:c7:1a:e3:6c:b4:a0:19:5c:1a:62:bb:9b:1f:35:aa:
71:49:05:e4:b6:b3:ce:95:06:a7:72:55:2f:e6:de:f2:92:5b:
75:3c:9e:bb:21:df:f9:aa:f5:13:82:b4:21:f4:2e:18:6c:7a:
1a:05:db:b0:2a:eb:89:62:79:03:39:42:f7:3c:7a:bd:ea:ab:
08:6e:ed:ff:16:1b:d7:4e:5a:dc:44:f1:f6:82:a8:19:a5:67:
f7:49:ae:f5:72:b1:79:03:ff:8b:0a:11:a3:92:0c:50:f4:59:
cb:8c:48:61:31:ff:c7:00:f3:4d:e0:5f:51:a4:50:98:d0:57:
16:8f:f2:3f:40:49:6e:ba:76:88:4e:b5:20:84:62:92:3c:38:
3d:ee:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:47:51 2024 by rpki-client on console-ams.rpki-client.org