Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQqRVRvv6Gs5Bj5y64ayAfbkxpk.roa
File: VQqRVRvv6Gs5Bj5y64ayAfbkxpk.roa (raw, json)
Hash identifier: 4JdwfMYS8kGDxQ6/VuFkOM2+CQmlxfafuoEHTOzDqvk=
Subject key identifier: 55:0A:91:55:1B:EF:E8:6B:39:06:3E:72:EB:86:B2:01:F6:E4:C6:99
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01966843A7B1350600B39474992AC7EA4D52
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQqRVRvv6Gs5Bj5y64ayAfbkxpk.roa
Signing time: Thu 24 Apr 2025 14:46:26 +0000
ROA not before: Thu 24 Apr 2025 14:46:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 151.242.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:43:a7:b1:35:06:00:b3:94:74:99:2a:c7:ea:4d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 24 14:46:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=550a91551befe86b39063e72eb86b201f6e4c699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:a8:50:09:e7:13:e9:c2:36:35:88:7f:52:
8c:59:33:f5:a9:b9:13:ee:dd:f2:1d:17:6f:a7:33:
be:0a:3f:41:3b:46:0a:2a:96:36:04:dd:ef:8e:4f:
3e:4b:87:54:29:8d:a1:27:e4:39:6a:80:bf:b7:68:
d3:f0:7b:39:1f:ce:57:6c:9d:93:70:ba:9c:c6:44:
62:cf:bb:62:eb:6e:d2:51:40:11:c6:b0:a4:ae:48:
80:b1:f6:ad:de:a5:9f:92:48:e8:ba:93:45:51:9e:
45:88:15:bf:18:42:3f:54:79:a6:5e:f3:0e:3b:a2:
3a:f1:dd:b1:de:c1:44:22:18:68:63:5c:71:4c:3f:
9b:90:d3:42:89:20:18:d8:a1:c6:27:34:87:7e:60:
a2:50:00:c1:da:d3:7f:90:6f:7b:34:5c:1f:ba:2f:
6d:ce:97:eb:2b:50:ef:f8:a9:9b:88:41:5f:58:2f:
06:59:1d:9b:61:d5:61:48:d7:e3:0c:82:9e:98:fb:
6f:2b:42:4d:f1:66:9a:2b:ec:10:31:e0:4f:13:f9:
c8:83:33:0d:7a:31:bd:c3:d8:d2:41:5c:c9:88:3c:
27:f2:69:15:6b:d6:56:82:02:ff:11:7f:f4:72:f0:
bb:18:e3:a2:fd:13:c0:10:36:6b:57:61:26:06:59:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:91:55:1B:EF:E8:6B:39:06:3E:72:EB:86:B2:01:F6:E4:C6:99
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQqRVRvv6Gs5Bj5y64ayAfbkxpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3c:fc:b6:77:72:32:b4:e2:35:69:40:cf:19:7f:6f:5c:21:
ce:22:5c:81:bf:ac:19:6d:44:c8:23:62:8a:7b:af:47:73:ee:
88:73:70:19:55:f2:6d:50:a3:04:09:70:84:31:3f:8d:a0:e4:
06:d1:a4:75:91:2f:6a:c2:1c:5f:cb:c0:a9:96:b6:58:62:ff:
66:60:6a:4b:0b:96:8b:23:57:78:c5:2f:2a:a5:83:2a:e2:12:
41:6e:8b:6c:06:47:6b:d8:67:9a:8b:b0:13:97:54:8e:e1:f4:
55:dd:98:74:63:db:5a:49:11:f1:fa:81:fa:7a:32:2a:a8:08:
2d:78:00:99:af:e3:bf:c9:87:4e:72:ea:ad:1e:41:df:0e:61:
cf:28:87:86:fb:73:b4:fb:e0:b6:dd:37:a7:a0:ec:a9:dd:6c:
e3:14:a7:c1:37:11:75:b7:9c:1d:6b:d9:3f:7f:06:c3:05:56:
d4:89:fb:e5:cb:56:a9:75:ce:80:4b:43:4e:8d:77:34:10:36:
9e:f1:17:0d:82:bb:11:2d:5f:22:47:03:45:b4:47:9a:03:98:
73:26:f1:20:ff:3a:4a:3d:cc:61:17:4b:bf:db:db:ce:49:2e:
ed:c4:82:63:b0:79:bc:d1:23:a6:ab:fb:c4:8b:fa:4d:75:75:
2c:87:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:55 2025 by rpki-client