Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OvfOYmGHhVUFNg3UrhzTKLLUfRs.roa
File: OvfOYmGHhVUFNg3UrhzTKLLUfRs.roa (raw, json)
Hash identifier: 0gIjcz4SwWWMZMNuz4Az04K8OnuFXGpCkxq6RdkG/MY=
Subject key identifier: 3A:F7:CE:62:61:87:85:55:05:36:0D:D4:AE:1C:D3:28:B2:D4:7D:1B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F4D08CC8C9C9D3D86340EDFDFD68B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OvfOYmGHhVUFNg3UrhzTKLLUfRs.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400810
IP address blocks: 45.94.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4d:08:cc:8c:9c:9d:3d:86:34:0e:df:df:d6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3af7ce626187855505360dd4ae1cd328b2d47d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:0f:f1:2f:58:f7:f5:29:61:11:e2:6a:e5:
23:c0:f2:81:93:b9:0f:67:c3:a0:42:0f:c3:67:d7:
e0:07:a8:67:43:bb:11:e0:de:20:ea:d5:04:f0:22:
66:5d:3b:bb:2a:c3:0d:64:9b:e6:cd:a2:88:90:60:
70:66:6c:4f:4d:64:f9:ae:aa:a3:70:2f:83:84:29:
b1:a0:e7:19:b8:2d:72:f1:6d:1c:99:cb:d5:bd:3b:
56:09:b3:eb:90:36:9e:3c:51:3b:6f:bb:eb:a6:d6:
8d:82:ab:8d:7e:52:81:4b:4f:b3:ce:a0:0b:62:f5:
7f:67:f3:df:5b:ce:d7:96:76:25:f2:42:42:7b:ba:
6d:06:87:91:14:c3:cb:09:f3:d4:4e:81:1c:a1:f1:
c3:5a:ae:21:84:23:b2:28:1a:40:fd:65:a8:01:bf:
1d:d5:ef:e7:87:99:7c:0a:22:9a:d6:e6:dd:cb:ed:
57:db:4b:36:3a:6e:ce:f6:85:1a:15:3e:f5:ad:bf:
a9:5d:ae:51:ae:a3:a0:70:9c:95:13:5a:7a:4d:14:
0c:e3:21:47:a1:53:e9:4e:42:8f:10:4d:dc:82:5f:
c0:bd:f8:3a:46:d4:e9:17:16:15:b4:bf:e4:a7:4b:
f8:fe:c8:a8:42:1d:20:00:f5:32:14:87:11:61:b8:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:CE:62:61:87:85:55:05:36:0D:D4:AE:1C:D3:28:B2:D4:7D:1B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OvfOYmGHhVUFNg3UrhzTKLLUfRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.168.0/24
Signature Algorithm: sha256WithRSAEncryption
34:47:fc:8f:c2:79:73:0a:a6:6f:be:0f:12:15:4b:73:97:94:
1f:0e:e6:b6:e9:e9:76:68:14:b9:aa:68:24:86:a1:19:e1:4e:
30:55:f9:d6:b2:69:6a:d5:fe:0a:ce:f6:01:c0:15:09:ce:ee:
fe:ee:fe:5e:1d:62:9d:c4:5a:89:b5:e1:1e:ea:c4:9d:2a:95:
f7:f4:c5:7c:d2:0a:7d:9c:43:c8:79:1a:a5:ff:aa:b6:c2:c6:
b5:77:61:bd:4d:f6:52:e0:86:2f:8f:23:7f:d7:de:62:50:87:
d9:e8:6b:e1:a5:15:df:b7:7e:0e:54:d0:7e:ed:3c:67:5c:90:
5d:09:d7:a2:98:ea:f7:3c:56:67:2a:a6:53:a6:dd:88:29:3c:
a5:80:f7:d6:8d:e8:e3:68:00:cf:70:02:de:60:6d:5c:91:8c:
1f:5e:3b:e8:6a:80:25:c5:04:13:ea:38:17:88:e4:11:96:6f:
d1:8a:15:b9:60:33:f9:0c:0e:66:39:81:07:ca:12:af:8a:e3:
5b:83:83:ed:25:d0:9b:8d:4b:ec:2b:7c:0d:39:78:ba:48:4b:
41:0e:53:f2:d7:02:eb:55:b6:9b:80:67:23:66:f9:a4:fa:06:
d4:27:7d:79:27:71:6f:bc:ef:20:12:84:db:f3:38:6b:fc:97:
9d:d3:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:12 2024 by rpki-client on console-ams.rpki-client.org