Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/30vpXTuTsEiElcF0B90o7ohzG0E.roa
File: 30vpXTuTsEiElcF0B90o7ohzG0E.roa (raw, json)
Hash identifier: X9PrCs7A8I949mf9bXC3hggalAyzQ2aGYJh7VSBtr/g=
Subject key identifier: DF:4B:E9:5D:3B:93:B0:48:84:95:C1:74:07:DD:28:EE:88:73:1B:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019752DFF92E7DC1E3B2639CD815378FCA2C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/30vpXTuTsEiElcF0B90o7ohzG0E.roa
Signing time: Mon 09 Jun 2025 04:08:19 +0000
ROA not before: Mon 09 Jun 2025 04:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141383
IP address blocks: 151.242.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:df:f9:2e:7d:c1:e3:b2:63:9c:d8:15:37:8f:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 04:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4be95d3b93b0488495c17407dd28ee88731b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:3e:35:02:0a:7c:21:08:be:8e:11:ec:8c:
54:bd:79:b1:43:32:26:f4:7b:27:78:7f:4e:73:44:
55:6e:8f:11:a9:ac:93:e4:a6:0b:3f:8a:d0:3f:99:
46:85:50:8c:52:dc:be:29:92:52:41:be:67:48:03:
2c:18:2e:eb:7e:69:ce:37:97:19:e6:cc:5f:e2:1b:
81:91:f7:52:cb:a4:74:3c:c8:06:ad:e6:1a:70:b5:
db:c7:04:ad:a0:fb:88:49:7d:f9:20:cf:ed:92:38:
4d:ef:3b:c9:cd:c7:bc:b7:28:cc:8b:54:c9:00:9d:
45:30:1f:c3:6f:97:79:4c:ab:df:7c:27:e2:80:ac:
c8:35:10:1d:73:25:29:ff:53:08:3d:1f:ae:ea:39:
da:bf:cb:b6:71:86:13:50:06:e2:d6:b7:40:99:b3:
62:21:10:22:ba:19:73:4c:18:1a:85:32:6d:1b:df:
7c:23:84:9f:23:53:e8:2c:e9:5b:03:eb:12:bb:31:
52:c9:53:cc:55:0b:0a:d8:90:0e:23:fa:87:6c:dc:
ef:d2:d9:ea:47:25:a0:04:72:7f:fd:1c:1e:b3:b8:
f8:16:7b:a2:83:fb:f3:a3:fa:4b:71:f2:c2:65:a7:
9d:fa:d1:bb:dd:8e:2a:ee:7a:40:88:43:5c:e7:f9:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:E9:5D:3B:93:B0:48:84:95:C1:74:07:DD:28:EE:88:73:1B:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/30vpXTuTsEiElcF0B90o7ohzG0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:81:8a:19:1a:f6:f4:e8:7e:3f:75:22:70:ab:36:88:92:e7:
56:7e:64:eb:bd:b0:0a:01:3f:9b:36:e1:82:bb:30:8b:f3:c3:
59:7b:83:d3:3b:be:d2:5f:db:72:34:53:10:f7:bf:8a:bd:4a:
0b:04:e1:98:0d:ad:a8:6b:bf:85:27:95:60:0b:f5:f1:bb:b9:
af:75:b1:cf:f6:29:06:d4:72:ff:06:7c:43:fa:00:4f:83:96:
81:8e:49:a8:d7:a5:f4:7b:1e:4b:72:99:6d:e0:02:df:87:7b:
a2:d9:4e:21:ad:12:4e:ed:1c:4a:ae:51:14:c9:d5:e7:4a:79:
8d:95:1a:cd:cd:c2:97:dc:6b:2d:8b:0b:2f:0f:48:75:07:0b:
03:5d:63:f1:1a:3f:9a:b5:b7:40:1e:55:5a:23:35:6f:a2:69:
0d:b1:ba:8c:1f:f5:2d:7f:75:7a:83:e4:d6:50:b9:e5:8b:17:
51:af:aa:6c:76:a9:36:01:bf:2c:b5:9f:27:f8:b4:96:02:91:
da:9b:ba:90:31:68:ff:55:6a:13:c0:f0:5d:58:f8:d8:a7:31:
c2:13:97:4f:cd:92:25:b5:66:41:c8:5d:8c:73:32:eb:67:48:
88:a9:e7:1a:32:c7:02:62:5a:75:6e:fa:7e:3e:b3:17:ff:c4:
2a:ef:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:15:51 2025 by rpki-client