Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5d6aL6Mw3cq-bgb2S-UXuQvDDPE.roa
File: 5d6aL6Mw3cq-bgb2S-UXuQvDDPE.roa (raw, json)
Hash identifier: p8iJYgksI2i/EtQEx5XKPyv2MS4/srwFRoHnpmP/hz0=
Subject key identifier: E5:DE:9A:2F:A3:30:DD:CA:BE:6E:06:F6:4B:E5:17:B9:0B:C3:0C:F1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01965BC1D1BE7048C4404FFEDF09B5010D8C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5d6aL6Mw3cq-bgb2S-UXuQvDDPE.roa
Signing time: Tue 22 Apr 2025 04:29:10 +0000
ROA not before: Tue 22 Apr 2025 04:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 151.242.11.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:c1:d1:be:70:48:c4:40:4f:fe:df:09:b5:01:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 22 04:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5de9a2fa330ddcabe6e06f64be517b90bc30cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:ef:9e:46:bf:a8:67:55:32:fa:05:61:0d:
c7:a2:9f:f4:c2:0e:33:9b:83:bd:1a:a5:7e:e2:c1:
36:0e:4d:aa:29:14:b3:0d:bf:ec:ee:34:7f:dc:4d:
da:2a:c5:a2:ec:93:18:1e:33:c7:ee:e0:bc:14:14:
a0:02:cc:ea:47:85:74:e4:57:dc:40:48:53:72:af:
53:af:f3:b9:ce:bb:1d:c4:22:de:c6:ca:0c:f2:81:
e6:71:d5:19:7e:e6:23:ba:20:b0:e6:b1:5d:9a:31:
51:38:49:16:cd:29:36:c2:2b:02:c4:fa:a0:f9:ef:
28:f1:ff:5a:3f:25:5f:21:9c:74:ad:95:c5:bd:68:
d7:f9:72:4d:53:18:29:2c:8b:a5:92:b3:9b:a6:36:
fd:55:98:ee:15:9f:99:45:98:36:d7:fb:2f:5b:69:
1b:f2:96:68:69:01:a8:03:ac:05:42:8e:b3:82:3c:
97:f3:43:91:10:2c:4a:ec:dc:cd:c5:bc:be:67:52:
fd:63:e4:04:64:84:a5:03:e3:6a:02:76:b7:24:fd:
00:4b:b3:aa:ba:2d:43:a2:9a:26:26:49:9d:9d:2e:
fd:7a:62:f4:aa:b4:da:11:6a:39:72:0a:ed:2f:e8:
8a:c0:a1:fe:eb:2d:8e:57:e1:a3:a5:de:bb:7b:31:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DE:9A:2F:A3:30:DD:CA:BE:6E:06:F6:4B:E5:17:B9:0B:C3:0C:F1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5d6aL6Mw3cq-bgb2S-UXuQvDDPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.11.0/24
151.242.14.0/24
151.242.27.0/24
Signature Algorithm: sha256WithRSAEncryption
06:94:de:ff:21:29:f9:35:65:fc:aa:c3:24:de:ea:1b:e0:9d:
6d:28:05:d4:44:d9:f8:93:6b:3f:40:16:93:88:bb:99:2b:4c:
b0:e4:9b:70:ba:ab:57:d4:61:6e:9f:00:81:49:c8:7f:08:5a:
c9:e7:a1:d8:d3:51:90:d1:1a:bc:de:79:be:bc:38:ed:a7:35:
e8:9c:cf:9c:fc:f7:3d:c8:ce:11:c4:f0:ae:98:a3:ef:07:f2:
20:2e:c6:4f:68:bf:8c:d9:61:32:0e:d7:26:5f:33:c5:84:94:
a9:4c:43:77:4d:64:d4:0f:e4:1b:85:28:60:ca:bf:82:4f:ee:
d0:da:8a:28:66:6b:e6:db:bb:f5:d2:95:ea:01:ec:f9:81:fb:
88:99:69:c1:94:a3:8c:26:53:82:1a:bd:10:34:ca:6b:f1:c6:
2f:94:f2:ca:05:54:b6:68:83:8e:b6:e4:63:b4:de:4e:16:ba:
dc:5e:90:44:e2:93:a2:40:39:08:69:0a:32:a3:dc:18:d9:18:
58:74:a8:48:27:e9:4b:f1:34:fe:c0:c0:89:0f:62:5d:31:83:
de:ac:fd:b7:bd:2d:06:c4:76:11:52:de:f4:c2:32:d9:c9:8c:
8a:62:21:3a:86:4c:b0:59:3a:c0:2a:06:6a:f0:67:3c:7a:f0:
34:60:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:47:38 2025 by rpki-client