Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-QTLxmnsLg2ledOugWI8SU-imG8.roa
File: 1-QTLxmnsLg2ledOugWI8SU-imG8.roa (raw, json)
Hash identifier: K5tt7J2vFQzucVR4GOySrcVvpxyphtRRxXB40owSAhs=
Subject key identifier: F9:04:CB:C6:69:EC:2E:0D:A5:79:D3:AE:81:62:3C:49:4F:A2:98:6F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019740682C1F5EC1938D9C87DEB602C1997C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-QTLxmnsLg2ledOugWI8SU-imG8.roa
Signing time: Thu 05 Jun 2025 14:04:18 +0000
ROA not before: Thu 05 Jun 2025 14:04:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 151.240.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:68:2c:1f:5e:c1:93:8d:9c:87:de:b6:02:c1:99:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 5 14:04:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f904cbc669ec2e0da579d3ae81623c494fa2986f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:65:a2:60:1b:54:aa:17:d5:e2:46:21:73:
f5:f2:3c:33:ad:88:59:33:a6:16:43:e7:47:1b:78:
93:86:e4:7b:1e:2e:62:f7:53:43:aa:a2:d0:93:4d:
6c:00:40:99:5c:39:f7:59:83:ee:d2:25:60:15:75:
4c:d2:8a:49:fd:57:51:3c:93:8b:ad:8e:2b:42:e6:
16:e0:c3:7e:42:40:2d:8e:ca:14:c3:9f:13:ed:e8:
1e:0a:fc:55:92:a7:be:58:e0:59:04:98:2b:af:d4:
ba:fa:04:86:44:57:61:1b:59:25:0e:7f:d9:b4:24:
d1:54:76:5c:2d:06:04:d1:21:b4:aa:ad:90:86:2a:
74:eb:6c:2c:e4:07:be:92:91:78:61:92:03:71:7a:
6d:a6:4a:2a:c3:98:a3:15:68:dd:84:1c:d2:d8:a4:
cb:c0:cc:00:3b:da:1a:f8:79:75:62:50:91:e3:15:
e5:71:51:31:a8:68:19:c8:1f:98:be:b9:90:85:15:
84:ff:b9:81:89:8a:45:dc:ca:82:a5:ef:d7:fd:c5:
05:2a:85:16:e5:5f:cd:e5:cb:a7:36:ed:7b:57:6e:
f5:b9:d5:3b:22:f7:4b:b6:53:59:e4:0f:e7:57:36:
b7:15:b8:ae:12:1c:6a:9f:10:ae:5f:90:70:8c:bf:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:CB:C6:69:EC:2E:0D:A5:79:D3:AE:81:62:3C:49:4F:A2:98:6F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-QTLxmnsLg2ledOugWI8SU-imG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f9:fd:9f:33:3b:66:e9:7c:10:5e:bd:2f:8e:12:59:45:ec:
81:7a:00:e5:9d:c1:9b:e1:eb:68:5b:9c:49:eb:bd:b2:49:9f:
fe:2c:b8:87:da:13:87:6d:b2:0e:1d:c2:24:24:67:b6:64:36:
06:0c:c4:a2:6a:12:da:a3:e5:ba:1c:60:e1:c7:c5:a8:09:95:
4e:6c:51:7d:91:bb:15:17:0a:72:88:af:dd:9c:3b:17:73:d9:
a2:bf:a5:19:01:d7:65:c4:2e:06:c3:7c:87:ed:71:3e:81:34:
53:87:13:9b:5b:52:d6:f1:fd:63:ff:b6:80:a6:db:3e:d2:f5:
03:30:bf:0c:4c:c1:43:a7:5b:9a:79:77:87:af:d6:c7:b7:f9:
ac:bb:87:dc:e7:60:8f:00:8b:94:12:25:05:b4:77:d6:f3:c3:
ab:e4:bf:06:41:9c:de:2f:35:2a:b4:88:26:eb:2b:ce:18:74:
c6:19:dd:d5:ff:9b:af:1c:15:4a:ca:d0:a9:10:73:6f:30:b6:
46:40:6a:ac:40:5b:5d:b5:cc:38:77:70:47:a8:35:d7:a6:c0:
a9:72:1f:bd:a1:b3:07:78:ad:9d:12:23:0f:23:35:98:ff:46:
84:51:15:ed:fc:af:b0:c5:36:ee:d8:b4:e9:e3:90:7e:4d:2a:
8a:8e:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:09:06 2025 by rpki-client