Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/9f1wfLMKGBE8v9MkOS4m3itL3mw.roa
File: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (raw, json)
Hash identifier: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=
Subject key identifier: F5:FD:70:7C:B3:0A:18:11:3C:BF:D3:24:39:2E:26:DE:2B:4B:DE:6C
Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial: 0194228D423DF6E7107DBD0D63D3DEAC0662
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/9f1wfLMKGBE8v9MkOS4m3itL3mw.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209491
IP address blocks: 171.22.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:42:3d:f6:e7:10:7d:bd:0d:63:d3:de:ac:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fd707cb30a18113cbfd324392e26de2b4bde6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:47:60:5a:15:07:fd:db:b2:e3:ae:3d:59:
89:90:51:bd:d7:17:35:6b:ab:b1:06:46:34:73:9b:
e1:d0:d0:73:eb:75:f2:82:f8:5c:ea:92:88:77:eb:
ba:80:09:2b:73:e4:9f:33:19:65:8c:64:31:81:51:
9a:73:cb:78:b0:e3:2e:27:54:01:ad:ab:dc:5e:fe:
3b:14:9d:2d:e6:17:99:b7:dd:92:c4:63:0c:82:d7:
ce:72:98:89:00:f7:5f:c5:34:9a:2f:8a:58:a8:b0:
33:c0:80:44:66:cd:80:c2:45:e6:34:ec:19:bf:53:
a4:86:73:1f:c4:b7:07:1e:41:24:16:e6:f0:7b:46:
0e:55:94:40:d8:f0:be:9f:b4:22:e2:f8:d3:94:6d:
1a:b1:d2:d6:f8:ca:1e:7e:ac:96:23:09:a3:59:42:
c6:4a:c3:22:1d:da:15:a6:96:73:c8:83:03:ca:3b:
12:06:c1:df:59:f3:20:1c:9a:3b:98:84:91:c3:1a:
05:50:fd:c4:32:6c:c7:56:ac:63:a3:f0:d2:5c:5c:
8f:4b:d0:a6:ff:52:1b:b3:bb:31:b5:d9:a6:91:ea:
a1:d5:2a:07:3e:62:d6:6d:38:88:23:5c:88:4d:47:
ad:bc:98:4f:06:c8:42:bd:1e:1a:db:7d:bf:3c:ef:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:70:7C:B3:0A:18:11:3C:BF:D3:24:39:2E:26:DE:2B:4B:DE:6C
X509v3 Authority Key Identifier:
keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/9f1wfLMKGBE8v9MkOS4m3itL3mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.20.0/22
Signature Algorithm: sha256WithRSAEncryption
36:7f:22:9a:1d:4c:51:71:78:56:f7:81:82:a6:33:d9:c3:3f:
45:a1:3d:33:5a:41:5f:e9:8b:f4:a6:57:4b:8d:2d:12:d9:09:
93:09:56:93:ec:6f:aa:f0:75:15:f7:22:87:d0:17:88:1a:e9:
27:2c:2f:72:9c:65:ae:00:99:c1:03:10:38:c2:36:6a:64:0b:
cc:a4:a9:75:73:27:98:ba:10:e2:02:ba:1e:94:78:2b:ed:a8:
0f:08:ef:9b:51:e2:c7:55:df:41:d7:62:47:8d:66:ea:2f:37:
fb:94:b9:64:22:3c:d1:af:24:5a:57:c5:f4:e5:58:d4:8b:21:
2b:37:7b:6d:1d:3d:9e:7f:d2:ed:05:92:2b:89:cf:ed:51:86:
78:37:e5:08:28:4f:a3:0c:d7:1f:40:b6:4f:67:73:ef:ff:7b:
ca:a4:44:e9:7d:b7:39:28:6a:1b:56:bf:5e:19:95:59:dd:60:
7c:69:b4:7b:d8:a6:93:02:3c:51:a6:39:a5:85:f7:be:35:87:
ce:28:9b:20:17:c4:35:d5:14:fe:99:ca:cc:af:f5:76:91:11:
c3:5b:20:06:b6:0d:85:52:45:c3:14:71:10:52:91:1e:82:48:
59:e2:84:64:c8:91:cc:c2:bf:9d:dc:3b:47:ab:db:2a:39:a7:
5e:76:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:33 2025 by rpki-client