Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VB0267nupf_uWKhlaE0winhztN4.roa
File: VB0267nupf_uWKhlaE0winhztN4.roa (raw, json)
Hash identifier: 1w27hwCI5DDhiAkb/JUkOVbi/fsy7121ek9kIYW1yfo=
Subject key identifier: 54:1D:36:EB:B9:EE:A5:FF:EE:58:A8:65:68:4D:30:8A:78:73:B4:DE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019748DB905A13202E85224548F0ABCEDC6E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VB0267nupf_uWKhlaE0winhztN4.roa
Signing time: Sat 07 Jun 2025 05:27:18 +0000
ROA not before: Sat 07 Jun 2025 05:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 151.242.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:db:90:5a:13:20:2e:85:22:45:48:f0:ab:ce:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 05:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=541d36ebb9eea5ffee58a865684d308a7873b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:dd:b9:5f:5a:31:d9:9a:00:04:b2:41:92:
f3:d2:a8:ce:6b:94:f4:f8:92:57:24:67:5a:ed:9d:
da:cc:c3:2e:da:4d:6c:07:7b:f2:c9:38:15:6c:bf:
d7:20:6f:c8:e5:84:30:70:d0:99:80:68:d6:41:0f:
35:4e:ef:4c:1f:cb:04:6e:1e:89:7e:fb:ce:63:fc:
a9:a9:52:4a:5b:86:25:57:0c:36:e5:5a:8c:53:2c:
57:5f:13:0d:37:3c:f4:0f:fa:cb:17:6c:ed:0b:75:
46:f9:6c:3f:c6:94:6e:ba:c8:5e:1c:22:d2:6a:ff:
c5:96:a6:60:a4:c4:ec:05:93:0e:2c:32:be:dc:9a:
11:6e:24:f2:5e:27:78:1f:61:46:e9:bd:ba:18:fa:
e5:52:b6:6d:8b:a3:79:3e:cd:70:dd:ae:08:a0:22:
58:8d:48:c6:6e:62:a3:bb:c0:66:f1:e8:b5:35:79:
6c:1a:3a:be:fa:18:5c:2a:98:29:16:6c:88:cd:a9:
b6:b7:9a:9d:d3:c5:82:89:cb:0c:a5:d0:1f:f7:f8:
e4:be:2a:12:35:c6:39:ca:a9:e6:4c:74:f8:68:06:
b0:82:ed:d5:6e:52:92:d0:f6:2a:41:7a:a0:0b:97:
e3:65:54:5d:6c:bf:ba:56:58:d6:6e:c2:16:3e:9f:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:36:EB:B9:EE:A5:FF:EE:58:A8:65:68:4D:30:8A:78:73:B4:DE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VB0267nupf_uWKhlaE0winhztN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d5:5f:fd:7e:30:74:fb:a2:f0:d6:04:16:73:95:b0:31:de:
f1:66:4e:9c:9a:04:cb:9f:59:2e:ec:be:95:37:f9:1c:46:7a:
5b:bb:3a:16:35:24:cd:23:63:14:81:e5:d3:7f:75:56:20:4b:
57:37:4b:67:8b:a5:06:24:7d:bf:90:b7:04:83:dc:25:ca:90:
03:b0:16:ea:80:35:42:70:4e:00:be:24:f7:56:64:c0:4a:90:
09:38:18:c2:24:d3:6f:7f:80:40:ab:01:66:01:51:e9:bb:f7:
0a:9b:5f:5c:85:4a:42:e7:8c:78:c3:1e:e6:05:b1:91:17:b9:
e6:54:f7:e7:61:29:c4:b5:4e:d2:a1:8b:b7:b8:77:7a:ae:d5:
91:29:52:96:a9:19:83:a0:d1:62:b8:9a:e1:9d:4e:2a:b0:ab:
ba:f7:35:e8:f8:3c:20:4b:fd:6b:ea:be:03:87:48:a5:3b:33:
e3:21:3e:0c:3b:e1:9d:51:41:e0:7c:8c:61:74:8b:57:9a:fa:
d1:40:68:c6:e5:c7:38:c8:94:0c:b8:39:46:7f:7a:fe:8a:6f:
19:c7:bc:ff:dc:8f:81:a3:b3:bd:b4:82:5e:c7:4b:cd:01:b1:
43:ba:e2:92:4e:ab:cb:21:be:75:d4:66:49:88:c3:cd:fe:06:
15:82:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:48:43 2025 by rpki-client