Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/0JiiC16GZGLF20US6Wu0KyHjjQA.roa
File: 0JiiC16GZGLF20US6Wu0KyHjjQA.roa (raw, json)
Hash identifier: tfqFl5LcVajhy2ntJAlfGzIMCfqWcn9u3/CI9b65Ol0=
Subject key identifier: D0:98:A2:0B:5E:86:64:62:C5:DB:45:12:E9:6B:B4:2B:21:E3:8D:00
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 018CC348C4EDEAAE302D971557DD26D8DC33
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/0JiiC16GZGLF20US6Wu0KyHjjQA.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.95.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c4:ed:ea:ae:30:2d:97:15:57:dd:26:d8:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d098a20b5e866462c5db4512e96bb42b21e38d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:a7:d7:08:6a:3b:bd:95:90:10:5d:f0:91:
8d:95:87:e7:15:b2:b0:b2:f5:b5:5a:70:f8:51:f2:
cc:2b:9a:86:0c:4c:3d:19:88:90:10:7a:8e:ff:9c:
02:d7:d4:b7:e9:77:0d:63:43:06:2b:86:57:9b:d3:
05:6c:88:df:1f:27:ae:cf:72:e3:d5:4b:f9:ad:c2:
2a:51:2a:6f:46:07:96:fb:1b:cc:3b:fa:4b:a5:50:
9a:3a:59:ac:b8:a0:77:fa:78:34:d8:5c:96:7e:65:
2b:00:42:c8:65:b9:b2:c5:56:8f:bb:46:4a:37:3c:
2f:8f:b8:df:81:a6:15:b4:8c:b9:a1:a1:86:38:f6:
1a:16:14:e5:6c:e4:0c:90:23:6c:93:da:2a:f6:50:
63:eb:35:13:39:16:82:b2:ea:22:9f:fb:1b:67:87:
4d:70:50:47:1f:b4:40:0e:05:f3:ad:6f:44:29:d8:
39:cd:46:e5:9b:ff:5f:eb:ed:84:cb:5e:c7:73:b6:
11:69:3c:66:b7:f2:b2:c5:7f:59:b6:4a:ae:29:4a:
c1:06:c2:09:56:05:93:8c:4c:f6:7f:4a:53:f2:d8:
53:c5:3a:bc:4b:60:c2:b5:18:fb:4c:6d:b9:0e:f9:
98:bf:bd:4e:0c:4a:b0:27:46:16:7d:68:7e:30:d9:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:A2:0B:5E:86:64:62:C5:DB:45:12:E9:6B:B4:2B:21:E3:8D:00
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/0JiiC16GZGLF20US6Wu0KyHjjQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fe:2c:87:41:47:87:b4:09:f2:f1:02:15:6e:83:ef:11:12:
93:d0:0f:11:45:f8:56:3c:ee:57:11:d8:c6:5d:72:46:29:fa:
52:92:87:9c:e0:c4:f9:bc:96:ed:20:53:92:56:b2:7d:8f:82:
f1:6d:44:f7:36:e6:3b:f0:ce:11:f3:04:42:b3:44:2d:d3:8c:
0f:96:9d:b8:54:b2:40:61:09:b1:17:d1:10:a9:a2:89:15:5b:
ba:10:c3:9a:20:7d:96:8d:a8:65:1e:d0:28:f9:00:2e:7f:04:
4f:fc:00:4c:fb:4f:41:a0:40:1b:c7:b7:58:d6:83:cd:a8:ce:
55:67:11:67:07:a2:e2:b4:b2:ba:9b:50:de:3e:24:15:b9:64:
b3:c7:d0:1d:15:d5:df:56:2b:88:b7:db:11:e5:19:36:7e:65:
92:6c:d6:16:b1:09:78:4d:74:f5:9e:40:d7:f4:7c:cb:cf:41:
52:56:46:80:73:de:3f:62:0a:be:33:3d:6f:be:5f:bd:9e:7f:
0b:42:ba:6e:8f:7c:dc:40:b0:fa:31:42:cc:4b:2b:3e:85:35:
75:28:44:4d:03:dc:92:c3:40:96:51:01:b2:c4:8a:ce:4d:22:
4e:58:57:3f:65:bb:79:88:20:e4:10:c9:a0:07:19:36:49:63:
3f:62:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:12:28 2024 by rpki-client on console-ams.rpki-client.org