Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/9KxQR6j2axabNDMZ1-8dgcNiaM8.roa
File: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (raw, json)
Hash identifier: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=
Subject key identifier: F4:AC:50:47:A8:F6:6B:16:9B:34:33:19:D7:EF:1D:81:C3:62:68:CF
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 019425FD686665430A5664DA53839D61E6CB
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/9KxQR6j2axabNDMZ1-8dgcNiaM8.roa
Signing time: Thu 02 Jan 2025 07:49:11 +0000
ROA not before: Thu 02 Jan 2025 07:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62099
IP address blocks: 185.47.220.0/22 maxlen: 22
185.91.168.0/22 maxlen: 22
2a01:9420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:68:66:65:43:0a:56:64:da:53:83:9d:61:e6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Jan 2 07:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ac5047a8f66b169b343319d7ef1d81c36268cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:c7:b6:e5:35:e4:3b:55:14:bf:df:95:3c:
d5:4e:df:6f:f3:5a:9c:f3:d7:7a:32:cf:aa:e8:94:
28:13:54:0b:18:44:8a:79:fe:72:10:d3:fc:2b:6a:
3f:e9:26:8e:ba:fb:41:46:70:d4:8a:08:6f:36:bf:
08:68:d1:b3:9c:a3:6a:14:ec:42:3c:d8:ed:19:6b:
d3:81:ec:6f:f7:cd:94:35:e3:dc:c7:ef:f4:a2:a8:
a2:9a:03:1b:36:94:c3:07:96:b0:e9:43:78:ca:ba:
b3:64:89:58:61:03:2f:cb:9b:47:34:12:cd:4b:58:
46:53:f4:b0:ff:e2:fd:79:59:cd:e8:48:69:18:bd:
62:36:5c:67:3e:0d:4f:5f:9b:12:eb:df:07:6d:37:
2c:95:46:2b:00:8b:b1:fc:ce:79:74:84:36:bd:2c:
06:e9:35:0b:9e:de:17:aa:a1:d6:1e:69:70:3e:5c:
80:20:3d:88:b1:07:f8:d8:27:18:ae:30:bd:32:f8:
35:a3:76:11:32:17:40:7f:fd:5e:46:f0:b6:d7:ed:
c5:2c:13:49:cd:b8:93:b0:90:10:23:fa:b6:f3:c4:
5c:41:a7:d0:71:c1:8c:64:19:31:55:d1:d7:7c:aa:
c3:85:b8:1a:8a:90:d8:e1:b0:8c:64:f2:98:dc:9f:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:50:47:A8:F6:6B:16:9B:34:33:19:D7:EF:1D:81:C3:62:68:CF
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/9KxQR6j2axabNDMZ1-8dgcNiaM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.220.0/22
185.91.168.0/22
IPv6:
2a01:9420::/32
Signature Algorithm: sha256WithRSAEncryption
9d:c7:2e:63:aa:af:a1:3d:1b:ff:d9:19:5d:b2:c8:a4:e3:8f:
ca:b1:88:a7:3a:3c:2a:55:62:d1:66:55:1a:1a:17:56:c2:d9:
74:84:53:d0:9f:9b:4d:87:c5:fd:b7:ab:f0:56:73:ab:52:3c:
b1:29:3a:74:2c:7c:53:5d:55:cd:f3:92:ac:ab:fc:d2:d4:91:
16:5a:77:d1:40:59:32:01:d5:a2:55:7a:ae:b8:90:d2:d6:2d:
9b:ab:ee:20:9b:2f:ac:be:59:df:1e:5e:1f:9a:af:56:ad:4e:
96:a6:9b:e9:8a:d6:ce:51:b6:34:95:4d:b8:ec:82:b5:cb:8a:
32:14:6e:d1:5b:51:56:77:67:ad:ef:fd:a3:73:9c:45:61:a3:
43:4f:9e:62:72:61:04:0e:25:19:42:b3:5d:e7:4a:37:73:8c:
05:ef:bf:a6:4d:64:ea:c6:1d:a2:11:7f:f8:5a:e8:80:8d:52:
3a:a3:57:48:ec:63:8b:c1:99:22:2a:fa:d0:ca:5f:a8:c5:d0:
14:c5:28:14:60:80:60:59:30:17:59:9d:77:68:0c:e1:96:1e:
b2:6e:c1:e3:06:1b:14:88:85:f6:c6:a2:7a:b0:26:3f:51:0c:
41:8c:15:03:67:d0:fc:22:41:23:45:1f:db:42:74:7c:d8:0b:
75:98:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:19:26 2025 by rpki-client