Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1kz-wAJ_oFxg-mqS9J1NlPQdHXo.roa
File: 1kz-wAJ_oFxg-mqS9J1NlPQdHXo.roa (raw, json)
Hash identifier: mQ3qNOlK2lQlMNcjoea26FjZxtV9vHDaaOZXsx04SSM=
Subject key identifier: D6:4C:FE:C0:02:7F:A0:5C:60:FA:6A:92:F4:9D:4D:94:F4:1D:1D:7A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196684196C7C907DB8104E505A7DFD4A88D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1kz-wAJ_oFxg-mqS9J1NlPQdHXo.roa
Signing time: Thu 24 Apr 2025 14:44:10 +0000
ROA not before: Thu 24 Apr 2025 14:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 151.243.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:41:96:c7:c9:07:db:81:04:e5:05:a7:df:d4:a8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 24 14:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d64cfec0027fa05c60fa6a92f49d4d94f41d1d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:e3:30:72:1a:b4:ea:ae:43:c5:30:77:99:
3e:2a:ec:20:1a:64:ef:4f:ea:a6:11:46:c1:da:a3:
34:5e:29:74:00:f8:4b:2a:97:50:c7:9d:2c:63:a9:
ed:2e:06:37:23:c7:e5:58:37:94:fc:84:99:e0:e5:
fd:d6:96:3e:d5:c2:e8:51:3a:a8:87:8a:49:61:6f:
80:d6:b1:bc:60:37:c8:bd:f9:bc:81:cc:84:0e:1a:
02:98:84:1b:78:c5:8b:10:fd:9c:43:fa:7d:18:c5:
1a:11:ea:60:ce:b6:41:93:3f:52:00:66:1b:c1:e3:
5f:66:e6:3a:78:09:d0:17:3b:29:b4:56:88:56:87:
ba:b3:dd:7a:f9:40:08:0b:35:14:96:4a:65:5e:ad:
c1:ba:8e:ce:dd:c5:38:9d:30:5f:6b:fd:bf:eb:35:
a4:48:57:4a:e9:00:a3:f7:15:e9:73:91:78:32:8e:
5d:40:f2:2c:7b:0d:0c:fd:8c:01:30:65:46:b0:bd:
99:95:e5:d3:d8:72:16:1f:ef:97:c2:28:b9:b9:73:
4c:2e:69:eb:90:e8:46:a6:28:80:cf:8e:45:e3:17:
81:4a:56:46:71:ab:f7:ff:77:83:d8:7f:a7:cf:e2:
3f:07:f8:75:be:93:fb:f6:95:3b:ae:ce:07:75:36:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:FE:C0:02:7F:A0:5C:60:FA:6A:92:F4:9D:4D:94:F4:1D:1D:7A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1kz-wAJ_oFxg-mqS9J1NlPQdHXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:82:7b:7a:db:f3:f4:ca:a3:93:37:da:98:e8:dc:5c:76:6d:
5c:d7:31:84:9b:36:77:1b:77:b4:9a:80:71:4e:59:60:c2:98:
0c:82:c6:5d:62:1c:19:80:2d:b7:48:46:86:d6:2f:44:79:d3:
c0:27:a7:ce:e1:bd:d0:d7:e8:8d:9f:a9:0b:62:14:39:76:83:
51:0f:77:e1:69:b5:64:b0:f7:c3:0f:f4:58:c8:56:3c:51:93:
ef:8f:d4:8b:09:4d:4d:f6:20:86:ee:91:d8:f3:4f:4f:65:35:
d5:c9:28:a9:11:c1:f0:ce:8a:26:21:81:14:43:66:24:e6:06:
cd:e0:e3:c4:f4:1f:5e:76:d4:b5:24:79:64:15:b4:0a:97:19:
cb:d0:ff:08:94:ce:5d:91:8f:b2:a8:7e:57:19:8f:ab:56:ff:
69:09:91:6a:ab:14:f0:3a:0b:bd:b6:3a:d9:c9:63:bd:06:b5:
e6:de:86:7a:67:02:1e:e8:59:bb:a8:47:4f:34:0a:72:5c:7a:
53:ba:90:f8:b3:5d:0f:77:1b:04:81:d8:0c:9f:98:d3:6f:31:
26:0e:15:0f:15:ef:3b:c3:7e:d1:4b:aa:5e:a9:6e:3c:0d:29:
2d:f6:91:81:fc:2d:16:48:65:c3:1d:79:9b:cf:af:20:11:27:
d3:89:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:24:25 2025 by rpki-client