Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tz-hVQmOWmibMQG8OZz-Wijeki4.roa
File: tz-hVQmOWmibMQG8OZz-Wijeki4.roa (raw, json)
Hash identifier: s8ORULSvUCrIJKVsQmefyvkUuFaBPr9jGQeMFdwFw2E=
Subject key identifier: B7:3F:A1:55:09:8E:5A:68:9B:31:01:BC:39:9C:FE:5A:28:DE:92:2E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBBCBD5A272D17841D9180B8D59FA3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tz-hVQmOWmibMQG8OZz-Wijeki4.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205733
IP address blocks: 45.94.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bc:bd:5a:27:2d:17:84:1d:91:80:b8:d5:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b73fa155098e5a689b3101bc399cfe5a28de922e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:4a:bc:b6:ac:78:eb:5e:c1:ac:13:57:71:
61:ff:c6:38:57:fc:d6:b0:46:44:04:01:c4:ce:5b:
f3:48:af:10:96:d8:d7:09:5f:8e:64:f5:dd:9b:eb:
71:d5:9b:16:91:be:11:51:45:0b:33:f7:a5:20:73:
15:ce:6b:16:7c:6c:ce:cc:dd:93:68:47:b6:80:e9:
09:40:2a:2a:37:42:b3:ea:82:09:9d:c4:23:6e:a6:
37:1d:ba:68:7d:e0:33:8d:8e:e0:43:dd:27:d6:6a:
2f:95:8b:bc:16:03:7a:1c:9d:8e:45:d2:e5:c2:00:
44:7c:ae:1a:2f:2c:b0:00:ec:ec:d5:3d:e2:e1:1e:
8a:5d:85:a4:ab:d1:4a:9c:db:22:a5:ce:85:79:dc:
eb:5b:e6:83:38:c8:47:ef:17:9f:5d:92:cf:b4:7d:
65:88:27:64:73:59:ab:3b:48:8c:29:1f:73:04:80:
59:9e:00:8e:95:9e:f2:9f:4c:51:63:23:d9:50:86:
58:71:bb:ac:ca:9c:8f:07:88:d0:e8:ee:a1:12:20:
04:89:98:90:a2:2c:30:5b:5d:a7:f7:e2:18:2d:e4:
b9:ac:24:ad:94:b2:ea:96:02:17:4d:46:0c:3c:59:
d3:d5:d6:b7:ac:14:fb:49:9f:69:6d:e4:31:0c:54:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3F:A1:55:09:8E:5A:68:9B:31:01:BC:39:9C:FE:5A:28:DE:92:2E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tz-hVQmOWmibMQG8OZz-Wijeki4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0c:8a:37:33:e3:a0:c0:5c:21:d4:dc:b4:b1:79:cf:a0:44:
c6:b7:7c:60:f0:d4:2c:a2:62:10:c0:36:68:51:d2:8f:ff:b0:
25:92:c7:61:03:49:a0:ad:e8:b6:fe:6d:36:77:29:2c:5d:96:
44:82:d8:63:59:10:f0:69:4d:13:95:d9:bf:d2:54:ae:86:6b:
35:ca:d2:17:73:c8:aa:78:bb:f2:4d:a0:53:b7:ea:35:ca:e5:
63:8d:f4:35:71:d1:d6:79:8f:d5:af:89:b7:dc:78:c3:3c:d2:
ba:e4:70:72:51:d0:b9:b7:db:34:08:25:8a:48:81:82:31:56:
cf:7e:52:e0:ca:ab:86:5c:0b:1b:9b:41:78:4f:89:59:6a:f9:
21:90:1f:11:53:ff:61:59:53:74:8b:3b:eb:24:06:e8:20:c4:
a5:11:de:0b:8d:99:2b:b3:9a:de:02:88:2a:d5:5d:51:f9:8f:
2b:eb:56:09:5c:f9:99:e4:88:24:eb:ce:61:86:ef:94:4d:a3:
4e:81:6f:9f:27:68:13:58:ea:bd:c1:12:27:43:ce:af:62:9f:
f4:50:0d:b3:9f:38:30:01:54:8d:ff:9c:18:07:3b:6f:76:40:
e4:f9:a1:72:b3:cd:d6:f5:0e:9f:02:ad:9b:bf:ae:a4:d7:9d:
f1:a5:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:59:23 2025 by rpki-client