Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3KNqe2xRJspvK83Zh1BkOldVbZA.roa
File: 3KNqe2xRJspvK83Zh1BkOldVbZA.roa (raw, json)
Hash identifier: zJiz8s3gsBLKDWXDAbVbByFPyrmFi1L10v76+lExIZI=
Subject key identifier: DC:A3:6A:7B:6C:51:26:CA:6F:2B:CD:D9:87:50:64:3A:57:55:6D:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019768BBDD32C4ED6836855B8621A225741A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3KNqe2xRJspvK83Zh1BkOldVbZA.roa
Signing time: Fri 13 Jun 2025 10:00:31 +0000
ROA not before: Fri 13 Jun 2025 10:00:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 151.243.126.0/24 maxlen: 24
151.243.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:dd:32:c4:ed:68:36:85:5b:86:21:a2:25:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 13 10:00:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca36a7b6c5126ca6f2bcdd98750643a57556d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:a3:f0:97:41:24:18:b9:1c:6e:18:58:4c:
fc:11:d1:f0:38:b0:b6:ca:9f:7c:98:dd:4d:14:0c:
59:0a:10:e4:f4:0f:f9:22:76:cc:ed:ff:4a:17:f1:
c5:e0:1c:f3:2e:1d:a1:13:4e:22:19:34:1b:a1:84:
5a:da:42:14:a0:51:82:a0:89:f8:32:a2:e0:7c:ec:
92:d9:09:0f:02:ec:3b:74:fc:d6:02:95:6c:9b:6f:
e4:a1:30:e0:22:bd:44:c5:23:c9:cb:59:e5:24:b6:
80:b3:a8:e3:f3:9c:09:c8:c8:45:0f:59:5f:89:08:
29:ec:f4:40:ef:56:e7:39:02:f5:94:44:42:2a:a0:
86:80:ed:39:c7:2d:14:ca:14:63:d8:16:e2:d3:25:
c3:f7:7a:2f:8f:5a:2f:91:56:51:24:ed:06:5d:24:
62:ab:5a:89:f8:e4:46:45:2f:77:4d:1f:fc:7e:f5:
6b:1b:e6:a6:9e:23:58:e2:a2:c3:15:1e:56:83:57:
36:9e:54:b5:a5:b1:d4:91:b0:92:94:6b:52:1c:a2:
e5:0e:49:48:f9:e1:4b:aa:58:15:ae:f4:28:0a:f5:
0c:de:9a:ee:e1:9a:b7:f0:a0:04:f7:19:9d:97:d7:
7a:c2:6b:90:32:0d:8e:32:52:5a:3f:ae:d1:51:e3:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:6A:7B:6C:51:26:CA:6F:2B:CD:D9:87:50:64:3A:57:55:6D:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3KNqe2xRJspvK83Zh1BkOldVbZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.126.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:59:cd:e7:2b:bd:7f:f6:37:35:fb:34:0d:e9:0a:08:3f:a2:
82:e9:e1:cc:9e:86:47:bc:d8:5b:c2:88:ed:40:ce:95:c3:86:
97:81:9c:34:75:12:68:41:0d:2d:d3:15:f6:32:d0:29:bf:4c:
b9:1d:ce:36:8f:3f:b1:4d:ab:04:9b:43:7c:28:fd:44:05:38:
b2:a3:ba:19:42:c6:c8:54:51:36:b6:a0:e8:4b:79:6c:e1:c9:
3f:2f:f2:7e:c6:9c:97:8b:59:79:ae:cb:55:08:be:34:b2:e4:
e6:b3:07:a8:cb:12:d7:8b:a2:d0:23:98:9d:b5:d6:27:09:ae:
e8:58:86:b9:20:61:08:64:5b:49:f2:ec:fa:1a:6e:a5:eb:f9:
07:9b:02:b8:c3:b5:26:57:a6:a8:d4:94:ec:03:36:94:0e:34:
66:af:2d:c2:21:be:69:14:14:89:e5:a1:3d:9b:58:82:55:d0:
68:fd:39:25:cf:e1:a2:20:e8:c9:33:3d:63:01:ac:b2:78:83:
ec:8a:09:87:4e:06:a8:c1:09:e3:fb:21:90:79:e6:6f:cb:41:
60:4a:18:52:de:a3:ea:5f:ad:11:11:b9:06:63:a5:fb:c7:57:
c1:77:d1:82:12:e4:e2:ad:cf:2c:5b:dc:7f:4d:1f:3d:3b:35:
91:89:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:37:40 2025 by rpki-client