Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/9CKQGKCQI-bIMlSOn18EkSByP_c.roa
File: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (raw, json)
Hash identifier: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=
Subject key identifier: F4:22:90:18:A0:90:23:E6:C8:32:54:8E:9F:5F:04:91:20:72:3F:F7
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019420D64E71039459103A9A6CCDF6840D21
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/9CKQGKCQI-bIMlSOn18EkSByP_c.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210574
IP address blocks: 2.59.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4e:71:03:94:59:10:3a:9a:6c:cd:f6:84:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4229018a09023e6c832548e9f5f049120723ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:dc:3a:42:7b:be:40:6b:53:8f:40:15:29:
bc:43:b0:f7:b6:03:5c:99:ac:11:a2:e8:64:25:e4:
6b:3d:cc:dd:3a:42:fb:f1:35:58:74:95:d2:c8:78:
af:d0:13:94:15:59:77:c2:95:c1:c5:35:05:d8:a3:
61:64:6e:da:4b:74:89:b4:d4:ee:5d:ca:07:f8:ee:
7e:de:b6:a7:c5:28:a4:39:b8:f4:60:34:99:63:0c:
47:03:91:72:c0:2b:f9:eb:40:11:d1:64:38:c8:28:
68:ad:e1:28:64:8b:03:31:88:bf:41:e8:d8:ae:2a:
55:18:64:e8:ba:e6:4d:dd:87:22:29:77:c4:5b:3a:
d4:60:24:98:45:f9:2b:4c:d2:b0:d7:b5:5e:0d:af:
87:ca:3a:9f:f2:4b:ef:05:98:b4:a2:36:8d:46:28:
e1:00:41:14:1c:6c:90:a7:62:23:af:f2:ff:9a:c0:
75:91:5d:87:e8:ff:3e:5a:d9:75:b3:cd:f0:9c:4a:
00:2d:70:95:c1:b5:9b:64:9b:6c:de:91:e4:f1:b7:
4a:8f:03:99:35:1d:56:34:87:b5:81:d8:33:51:3d:
47:dc:c8:4a:4f:de:57:64:0c:fa:20:78:17:54:72:
bc:6d:7a:7c:af:a1:f1:0f:41:21:fc:e6:74:f1:99:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:90:18:A0:90:23:E6:C8:32:54:8E:9F:5F:04:91:20:72:3F:F7
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/9CKQGKCQI-bIMlSOn18EkSByP_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:de:54:08:5f:66:fb:58:7e:d9:f9:35:98:ee:41:33:09:cf:
9e:dc:1f:14:47:af:91:9c:a1:f2:87:7b:ba:ac:7b:cf:cd:68:
8c:fd:77:3d:83:c4:5f:ae:67:24:26:18:c9:ae:31:a6:09:0a:
ff:cb:58:6e:b2:46:7e:b5:20:7b:5f:d9:f4:da:80:81:af:b7:
f8:85:e7:f0:37:56:79:39:db:9a:1c:48:42:be:96:2d:03:9b:
6b:d8:54:13:ce:92:45:94:e9:44:6f:34:1b:9b:10:75:82:4c:
5e:4a:c1:a9:51:e3:7e:8a:fa:10:06:fe:87:a0:f6:38:06:2b:
45:a9:7d:64:12:0f:11:25:26:46:0c:c7:d3:08:ee:7d:31:21:
4b:19:24:e4:13:0d:1a:5d:23:87:8c:67:aa:73:11:e5:fb:9e:
12:15:3b:56:33:26:3b:bc:c1:88:c2:ef:3e:83:a3:50:5f:43:
14:e2:66:41:28:19:de:ff:51:de:93:fe:c8:15:cc:1b:3d:e1:
13:e5:a6:78:0c:1b:94:e6:f6:db:4f:df:52:7f:3c:c6:10:5d:
f3:a1:b0:61:ac:a5:c8:8f:7b:18:3a:37:02:30:53:e7:20:5e:
89:62:63:ae:01:24:02:c2:2d:ae:64:69:33:04:1e:1f:05:4a:
d7:5d:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:12 2025 by rpki-client