Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S42p3e1UVqUV-Pi1JJenOUHiNo0.roa
File: S42p3e1UVqUV-Pi1JJenOUHiNo0.roa (raw, json)
Hash identifier: iTcJ+g2K2PA9gr5LN3VAiCdf8KGtnvNbJqfZtg72q1o=
Subject key identifier: 4B:8D:A9:DD:ED:54:56:A5:15:F8:F8:B5:24:97:A7:39:41:E2:36:8D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019660DE1AE3844A7312B8EB3A7D902FB8DD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S42p3e1UVqUV-Pi1JJenOUHiNo0.roa
Signing time: Wed 23 Apr 2025 04:18:10 +0000
ROA not before: Wed 23 Apr 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 151.242.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:de:1a:e3:84:4a:73:12:b8:eb:3a:7d:90:2f:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 23 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8da9dded5456a515f8f8b52497a73941e2368d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:a4:24:4d:eb:8d:ad:4c:ae:9c:bb:a4:39:
62:bc:a4:49:bf:b1:0d:63:ea:34:34:3d:71:b5:a6:
ab:54:64:cd:f3:44:6f:4f:ce:35:92:70:b9:12:15:
79:a9:d0:a2:7b:b4:d3:e1:dc:90:7b:70:53:63:09:
6e:39:04:ac:b3:bf:1c:37:ee:02:95:fd:9e:d7:81:
13:d6:4e:dd:0b:20:51:1b:f8:78:40:87:9f:ee:6c:
37:1f:3e:a3:bb:f8:d7:c4:50:43:88:c3:72:eb:d5:
e3:00:76:7e:f9:97:19:9f:67:4b:cd:de:ec:89:4e:
0b:8c:9f:03:a7:f6:1c:4d:1a:33:f3:ef:66:13:dd:
0c:a9:03:4d:0e:6d:21:3a:60:aa:91:45:8b:e5:e3:
a0:92:b7:17:ef:62:72:ea:d3:41:94:2a:b0:45:0e:
29:0b:0f:13:74:02:35:55:ce:71:e2:94:b4:ca:c9:
2c:c3:5e:85:c9:c0:2f:14:d5:cb:56:42:a5:67:31:
d6:f7:41:26:ea:10:39:ca:ff:a5:24:ac:8b:4a:72:
0e:fe:d4:72:2d:96:01:bf:f8:c0:8b:fc:2c:a0:f5:
4e:1e:5a:de:0a:53:4d:3b:04:63:be:d1:71:ea:ed:
cc:7d:98:f5:8e:96:0d:db:eb:60:78:a5:a2:da:59:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:A9:DD:ED:54:56:A5:15:F8:F8:B5:24:97:A7:39:41:E2:36:8D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S42p3e1UVqUV-Pi1JJenOUHiNo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.164.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:f5:b6:3f:ec:9d:54:a6:86:93:25:b8:12:ac:37:70:6f:92:
88:09:b8:25:fc:a7:72:8f:13:54:e3:a4:a8:da:bf:ed:11:3d:
75:3c:b9:e8:6a:5d:da:1f:43:33:84:e8:32:fa:5a:9a:30:1c:
54:86:91:b4:eb:9d:f9:a6:c7:23:38:ef:d9:df:ea:16:2d:28:
ce:23:ae:23:3f:ce:00:80:ce:63:74:5e:91:aa:a2:f9:f2:7b:
f1:c4:af:9d:4c:8c:60:a5:15:da:cc:4b:9f:24:84:41:8f:a8:
5e:cd:18:2f:e0:57:5e:ed:71:47:95:3b:9b:be:53:3b:25:93:
3c:f4:a3:64:fc:98:f6:f8:d6:13:c7:c1:58:d7:9b:e1:b5:be:
c6:5a:4c:df:05:37:d9:88:ab:92:a4:38:d5:8f:c9:a7:26:1f:
82:b2:dc:2b:69:2a:ea:17:b6:07:b1:b6:c1:60:6a:6b:18:42:
22:95:19:3c:d9:89:a4:2a:89:e6:91:97:6c:c9:41:05:f8:2e:
69:27:f7:99:0b:d1:4d:88:96:1f:29:a7:5b:b7:e4:dc:72:7e:
f5:78:d1:9d:78:3d:ab:12:3c:6f:5e:06:c1:9c:25:72:b7:1f:
d2:b8:c6:f9:7c:9b:b8:57:d8:55:98:fb:dc:96:d2:2a:38:4e:
03:99:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:44 2025 by rpki-client