Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/9FnOB-XBygoB-RgBBWEsPTbvFTc.roa
File: 9FnOB-XBygoB-RgBBWEsPTbvFTc.roa (raw, json)
Hash identifier: faK52ZKxn8mhj7q+v4KziaARqXuKQdUnupgh7Jp3IVk=
Subject key identifier: F4:59:CE:07:E5:C1:CA:0A:01:F9:18:01:05:61:2C:3D:36:EF:15:37
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 019420D604BFCC4E871CBE23F5A3AD5E9E60
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/9FnOB-XBygoB-RgBBWEsPTbvFTc.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197639
IP address blocks: 91.223.204.0/24 maxlen: 24
2001:67c:620::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:bf:cc:4e:87:1c:be:23:f5:a3:ad:5e:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f459ce07e5c1ca0a01f9180105612c3d36ef1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:00:0c:df:08:65:c3:d5:3f:41:41:19:71:
6e:2c:da:0d:67:1b:4c:95:ea:bf:ad:ac:bb:20:bd:
0e:aa:00:04:1a:f9:a7:2c:aa:05:12:82:c8:65:6d:
bf:f5:e2:6e:87:c0:bc:3a:97:ea:93:26:ee:ae:b1:
cd:d4:aa:36:1b:f8:7c:c5:3c:2f:e0:26:79:21:14:
bc:19:1e:1f:7d:70:6a:db:25:fb:ee:4c:56:b8:ad:
01:ff:9c:94:37:de:58:50:13:e6:b9:e7:10:14:08:
c6:c6:d9:de:1b:54:fb:18:6c:83:99:e3:cc:df:d3:
7b:69:c6:75:cb:9f:2f:68:ff:74:d8:34:b9:9e:98:
ca:79:dc:d3:ce:f7:33:67:5a:62:a8:ab:89:36:4d:
99:57:34:7f:4d:97:14:0d:7a:b7:13:a1:e5:7d:de:
52:58:ae:d5:f9:e7:38:d3:8c:96:d2:02:5b:5e:44:
20:37:6e:6d:bb:0c:a6:16:90:46:a4:17:c0:db:7f:
dd:93:83:b4:fa:a1:fc:dc:e5:3c:91:68:d5:51:17:
d8:79:e9:b6:24:52:6a:ec:da:27:08:cd:ed:44:7c:
dd:62:6f:bb:01:e4:fe:06:29:c5:66:39:a7:41:06:
9c:74:f4:b1:21:ee:9f:02:98:2b:97:aa:80:44:db:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:59:CE:07:E5:C1:CA:0A:01:F9:18:01:05:61:2C:3D:36:EF:15:37
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/9FnOB-XBygoB-RgBBWEsPTbvFTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.204.0/24
IPv6:
2001:67c:620::/48
Signature Algorithm: sha256WithRSAEncryption
a2:fb:42:ce:ad:15:35:79:13:08:48:70:e5:bc:f5:af:32:2d:
75:ac:b3:23:dc:61:68:51:42:de:85:92:59:4e:b3:15:af:6b:
2d:71:98:5b:b3:7c:f4:aa:47:15:ab:93:ae:22:46:9e:85:41:
3e:d8:4c:e8:39:5d:14:df:d0:b2:34:12:b5:dd:11:7c:2b:31:
ad:38:d2:5b:1b:2c:b4:d6:51:da:c4:e8:8a:96:c3:10:d8:a9:
ac:b0:01:12:b2:31:e7:67:26:06:cf:89:4d:8e:de:59:46:cb:
35:b9:7c:9e:1b:94:ce:94:7d:29:3b:6d:0e:af:5f:be:2b:60:
20:59:68:d3:3c:29:d4:48:42:47:e3:99:67:f5:64:f5:31:b7:
9b:7c:f8:7e:8f:b9:64:5d:8e:64:91:df:48:73:d2:7c:55:02:
c4:ed:ed:f4:9c:56:dc:ae:63:a9:be:c9:b2:02:83:bc:91:e8:
c4:8a:c1:64:16:5f:a7:1a:b2:2b:da:d3:73:f8:2c:d9:47:30:
f6:81:d3:37:5c:a9:26:41:94:0f:47:ec:ef:f1:9f:f8:f7:b8:
72:09:a5:d0:85:21:25:e8:40:83:6d:76:3d:27:ec:5f:7e:85:
a5:50:6d:15:df:41:61:a3:a8:83:20:fd:6e:6c:28:f5:2f:88:
85:15:20:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:11 2025 by rpki-client