Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JwXawAVo_enXYTTA5JpSqkV1sqg.roa
File: JwXawAVo_enXYTTA5JpSqkV1sqg.roa (raw, json)
Hash identifier: YW01MGRtw4NrCjPOPzbERJND2qqNy82GEo+MxwJ4rn0=
Subject key identifier: 27:05:DA:C0:05:68:FD:E9:D7:61:34:C0:E4:9A:52:AA:45:75:B2:A8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB2A2454F514497C05F20D53E823C9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JwXawAVo_enXYTTA5JpSqkV1sqg.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43818
IP address blocks: 45.67.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2a:24:54:f5:14:49:7c:05:f2:0d:53:e8:23:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2705dac00568fde9d76134c0e49a52aa4575b2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:c5:eb:8f:26:ce:45:16:4e:d4:51:f8:c5:
d8:f1:71:91:a1:d6:8f:12:ec:aa:16:39:41:f0:12:
33:9b:d0:f6:ba:6a:49:db:20:8a:bb:72:c9:b4:fa:
86:3d:0c:7f:b7:d7:06:7d:27:0a:d7:ca:62:a0:be:
6f:69:dc:41:e5:10:89:18:fd:52:30:8f:fd:ad:6f:
d7:74:eb:b9:e7:a4:ce:b7:97:a4:1e:8e:91:80:b1:
37:45:59:de:d8:29:67:62:dd:51:3d:c4:1a:4e:ef:
73:df:ad:a0:94:dd:6a:68:07:6f:b1:a2:50:65:00:
7f:8d:56:13:fc:75:fa:b7:72:df:63:e5:4d:4c:50:
2b:d6:ba:4d:fe:0d:75:ff:3e:d5:3f:b1:30:eb:97:
77:57:e6:0c:f1:aa:15:17:2b:f9:f9:ef:fa:da:f8:
15:da:58:d5:25:5e:6c:92:a5:da:1c:91:c5:12:f8:
f7:9a:da:7e:42:af:ef:38:19:6a:be:74:f9:d5:98:
d2:a7:dc:dd:f2:ad:57:06:5c:0b:3e:93:5b:eb:5c:
76:dd:2a:c2:54:ce:4b:2e:81:c2:d3:5c:21:d7:3c:
82:c7:a2:72:17:b0:01:c5:b2:6a:8b:06:14:f9:46:
2a:7f:82:d3:56:98:3f:23:82:34:0b:bb:6f:8f:1f:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:DA:C0:05:68:FD:E9:D7:61:34:C0:E4:9A:52:AA:45:75:B2:A8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JwXawAVo_enXYTTA5JpSqkV1sqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5a:0a:3f:a2:55:a1:69:9f:7e:fa:6b:9f:37:16:78:42:73:
f9:99:b9:91:e7:7b:1f:7c:b9:d3:3b:3e:1a:e7:f1:c3:5c:bc:
b8:68:73:b3:5f:8e:57:f2:05:ac:e1:33:12:8b:7d:c7:da:cc:
a5:f6:a0:8f:46:eb:11:a0:9a:2f:33:1f:17:92:45:6e:25:12:
73:04:5d:a6:8e:0a:48:ae:e0:38:48:e9:0c:60:3f:a9:1f:52:
af:9a:8d:d7:ed:9a:a7:6b:43:4e:75:cd:66:a4:2a:70:31:a2:
79:a6:10:37:0e:a8:6a:77:f2:ae:38:cc:50:6d:c0:41:6e:df:
a3:62:9d:03:0d:f7:9c:f1:65:5d:01:79:26:d3:6e:00:d1:42:
22:e3:f4:a0:64:c4:33:c5:ed:7d:36:16:d7:f6:a5:60:a4:24:
6b:8d:d9:64:d2:11:07:e3:64:1f:52:3d:9d:34:62:6b:04:b7:
15:6c:2c:49:b8:dd:b9:d7:49:aa:3e:47:d2:3b:dc:a6:f0:48:
c8:2b:19:8a:1f:f9:0c:d8:e8:87:4a:0d:2a:94:48:f3:11:27:
62:55:0a:ff:c0:fc:fb:a7:a7:f5:4f:85:e9:6b:5c:3f:35:54:
14:e2:0a:6b:c6:91:c1:3f:15:ea:1b:a6:34:b2:4b:a3:dc:58:
69:77:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:57 2024 by rpki-client on console-ams.rpki-client.org