Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/cij7W2iI6HP-gownSQ8PPT8Mc5A.roa
File: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (raw, json)
Hash identifier: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=
Subject key identifier: 72:28:FB:5B:68:88:E8:73:FE:82:8C:27:49:0F:0F:3D:3F:0C:73:90
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 0194236A345796BE5F1DB340A41084E922B5
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/cij7W2iI6HP-gownSQ8PPT8Mc5A.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19198
IP address blocks: 45.95.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:34:57:96:be:5f:1d:b3:40:a4:10:84:e9:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7228fb5b6888e873fe828c27490f0f3d3f0c7390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:d1:ea:28:e9:31:52:07:34:0d:96:e5:41:
d2:00:08:a2:5f:8f:c8:31:ae:36:68:37:bb:56:33:
a4:05:85:c5:81:c7:df:96:ad:2b:8d:11:84:02:f7:
eb:50:47:f1:6d:af:2f:6c:40:47:b2:52:64:19:d7:
1b:e9:b0:66:6f:1a:d8:0e:4a:8e:21:88:4e:b6:b0:
10:83:89:87:07:c0:e5:78:d8:c7:c0:34:ca:be:3f:
6b:91:02:94:c3:1a:d4:e3:a9:44:b3:ed:53:90:4e:
41:1d:22:bd:c1:9b:f1:b5:09:64:0c:29:8b:58:21:
33:55:7f:3e:d0:46:c2:26:69:cc:3d:eb:2c:af:3b:
c1:e8:4e:3d:25:9f:76:6e:2f:45:86:ed:63:5c:82:
ec:ed:21:1a:65:ac:27:32:24:1c:28:5c:d3:d0:01:
be:7c:5b:ed:56:d3:ba:b0:26:93:45:c6:ab:24:a2:
1d:58:d4:bc:a3:0b:e7:d0:b5:bc:a6:e8:03:78:47:
05:45:85:03:fe:73:75:35:19:85:0f:71:56:c6:c4:
a7:e1:d6:7f:4b:1d:9e:ee:ae:d9:b9:91:3f:b5:80:
b9:a5:63:76:e6:47:44:88:23:04:bf:cf:fb:0d:4a:
a5:f3:4f:a3:6a:bc:8f:9f:c6:d8:68:86:10:9b:1b:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:FB:5B:68:88:E8:73:FE:82:8C:27:49:0F:0F:3D:3F:0C:73:90
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/cij7W2iI6HP-gownSQ8PPT8Mc5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:31:5b:e3:1d:69:64:85:d6:81:5d:8a:f7:e0:5f:af:83:50:
27:32:d5:6c:37:06:df:e1:12:d3:4c:89:4e:3a:24:80:80:7a:
84:5a:8b:e2:7d:b0:e8:75:50:a6:92:de:a3:c4:27:d6:83:3b:
68:70:e9:8c:a4:e1:e2:61:8a:0f:fa:0c:5e:11:23:57:a7:c9:
b3:eb:f3:a2:65:89:96:6a:80:3d:7f:b8:47:5d:d4:8d:b6:7a:
7d:0a:64:d7:04:ae:21:7a:b5:e4:c1:8a:01:85:d7:27:f9:54:
65:24:06:0a:4f:dc:45:65:8d:74:6e:59:f1:c0:6c:4d:12:25:
9d:59:c3:3d:23:d7:7e:e6:0c:cf:8e:d7:73:df:a6:ad:fa:c9:
a3:0b:35:05:e0:b9:04:80:6b:8d:10:cf:4a:ee:e9:02:c5:1e:
54:e6:f2:fb:f1:24:bc:40:c6:ae:f2:3e:f6:d7:75:3a:6c:d1:
94:8b:28:3a:05:51:99:70:3f:e3:43:d6:a6:59:00:70:1d:7d:
ee:61:cf:70:57:8c:04:32:9a:b2:fc:ba:db:2d:e2:44:d9:f0:
84:4b:63:ce:91:a5:25:0d:24:6e:b8:cc:03:a9:7c:23:b2:9f:
c6:c9:ef:b2:d0:2a:f2:e6:90:5b:63:29:9d:f3:76:b1:4e:85:
55:e0:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:28:38 2025 by rpki-client