Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BOu9ARcmR6coeMpZXhCBzqy_Af8.roa
File: BOu9ARcmR6coeMpZXhCBzqy_Af8.roa (raw, json)
Hash identifier: /sl3RiKjYu6bUooxvkDFhduD2QfAIKvZu0lHULwyzT0=
Subject key identifier: 04:EB:BD:01:17:26:47:A7:28:78:CA:59:5E:10:81:CE:AC:BF:01:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198693976F82B758002342FF5B1B689FAD3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BOu9ARcmR6coeMpZXhCBzqy_Af8.roa
Signing time: Sat 02 Aug 2025 05:20:30 +0000
ROA not before: Sat 02 Aug 2025 05:20:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 151.242.154.0/24 maxlen: 24
151.242.253.0/24 maxlen: 24
151.244.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:39:76:f8:2b:75:80:02:34:2f:f5:b1:b6:89:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 05:20:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04ebbd01172647a72878ca595e1081ceacbf01ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:1a:8d:d2:1a:f4:8f:52:20:a3:eb:b9:57:
28:f8:ce:34:62:75:45:ca:c8:2d:c5:d3:c6:09:7a:
58:1e:07:a2:68:a1:ca:ae:ba:2c:58:c2:db:51:87:
da:e5:06:3b:c8:8b:e3:38:79:94:c0:e0:0b:2a:85:
7e:05:73:35:0e:ea:1d:cc:5f:42:73:24:ea:66:97:
e1:e1:61:db:0a:db:72:44:d9:e8:dc:9e:64:c2:44:
cd:36:df:a3:ec:7e:60:40:e7:9f:b1:b7:52:a1:ef:
8a:c3:7e:c6:8d:fe:30:04:e3:2f:61:d1:f1:53:4f:
08:3c:a2:d3:c6:a8:c8:da:bc:8c:5e:a5:d7:84:97:
3d:04:83:2a:87:b9:94:be:7e:d2:85:f6:7d:3e:b0:
4d:98:d5:d3:5b:09:67:d1:3b:7e:3f:f5:58:74:b5:
b8:f7:ff:45:3a:4d:25:ea:12:16:43:33:eb:37:3b:
5e:7d:ff:0a:0e:30:32:f1:c3:81:46:ad:0c:85:17:
73:de:f9:ed:1d:f0:52:81:88:61:22:24:ca:f1:dc:
33:03:d8:16:c1:d3:0e:d4:18:c9:f9:e4:85:a3:cf:
9d:a5:1f:8a:41:72:a9:08:bc:21:f1:04:e0:41:1a:
73:f9:14:5d:a7:74:41:02:a8:27:6b:2b:8c:30:87:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EB:BD:01:17:26:47:A7:28:78:CA:59:5E:10:81:CE:AC:BF:01:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BOu9ARcmR6coeMpZXhCBzqy_Af8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.154.0/24
151.242.253.0/24
151.244.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bf:44:55:79:4d:88:51:0e:85:13:2b:29:98:14:26:00:ea:
0f:65:aa:2f:27:ad:57:a4:1f:57:9c:33:22:66:3c:36:b5:91:
f3:57:b2:c8:da:89:f6:d4:c4:5d:29:7a:66:ef:97:d8:dc:19:
f3:10:e5:9b:d4:b1:a2:1a:11:a2:2d:9c:22:d4:51:66:ff:95:
f5:bf:6c:2e:53:97:98:e8:7c:4f:4c:25:22:f9:2a:01:6c:58:
0a:ee:ef:c6:d5:2a:2b:c4:b8:7e:de:3e:49:57:d0:e6:7b:a2:
02:2f:41:f4:b5:6f:26:d8:31:2b:29:46:2c:dd:a8:60:06:21:
2e:50:43:52:db:87:b3:7f:82:25:80:98:55:21:18:18:ff:51:
34:96:b2:24:80:69:36:70:63:6f:7f:68:8a:5d:4d:5e:7c:e1:
f1:78:90:ad:7a:56:27:6f:3a:f7:71:77:d8:4f:94:c4:5d:3e:
be:fd:8e:79:d8:b0:84:9f:04:9e:c8:7b:63:7d:0c:30:01:e6:
6c:39:fd:66:5e:1b:3e:ee:1e:e9:fe:ac:8e:a8:97:ee:96:d6:
9b:89:1c:e2:b2:64:63:89:79:49:82:6c:bd:f5:3f:7b:88:fb:
3c:99:48:b6:69:39:bd:4b:f5:52:95:b4:74:ec:2f:a6:78:47:
f7:46:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:15 2025 by rpki-client