Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WnInjFkFAZICnjL88OPuGGfWIM0.roa
File: WnInjFkFAZICnjL88OPuGGfWIM0.roa (raw, json)
Hash identifier: hiZwhKtS3aPpwxnipd91V6IQNugPNWMeauZ5rhmcJEU=
Subject key identifier: 5A:72:27:8C:59:05:01:92:02:9E:32:FC:F0:E3:EE:18:67:D6:20:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198692E0410EB6B5541656D6D7F0C5D1186
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WnInjFkFAZICnjL88OPuGGfWIM0.roa
Signing time: Sat 02 Aug 2025 05:08:00 +0000
ROA not before: Sat 02 Aug 2025 05:08:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208686
IP address blocks: 151.240.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:2e:04:10:eb:6b:55:41:65:6d:6d:7f:0c:5d:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 05:08:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a72278c59050192029e32fcf0e3ee1867d620cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:dc:cc:b6:0a:74:6e:a3:19:b2:c1:81:d9:
6e:13:e6:ff:2d:c4:5e:83:eb:17:7b:ad:5f:3c:9c:
64:ec:e2:99:32:8c:e6:b5:31:68:25:d3:36:6c:f2:
71:c8:91:dd:5a:14:03:0f:fc:bc:36:af:da:3c:d2:
0b:28:08:c1:60:8e:07:73:11:06:42:2c:0f:78:17:
30:ef:e8:5e:cd:e7:ea:6a:87:03:de:bb:44:93:38:
08:58:96:9e:78:4c:28:e8:d8:93:bb:9f:c4:7a:82:
1a:ec:92:ee:7f:47:43:80:9b:29:61:a8:ba:42:84:
db:4a:75:eb:9a:5f:07:aa:3c:2c:a9:ac:56:79:8b:
2d:f2:47:30:30:62:b2:c4:20:30:92:a3:48:6e:4d:
de:cc:6f:3f:d3:fe:5f:4b:08:a5:0a:a8:1d:d5:4a:
13:56:75:2b:24:87:f7:3e:05:26:43:9b:73:7f:92:
23:a0:2c:49:f3:56:cb:fc:d7:be:c7:18:45:b6:49:
bd:c2:98:62:bd:ea:e2:35:7c:b5:70:1b:4d:05:ad:
ad:b8:79:45:84:f5:81:c4:f8:ef:8e:4a:27:d4:ea:
d1:a0:3d:32:4d:7b:00:9f:82:fc:b2:32:76:07:7e:
00:4f:fe:1d:59:2a:71:16:6b:12:36:e5:35:26:81:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:27:8C:59:05:01:92:02:9E:32:FC:F0:E3:EE:18:67:D6:20:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WnInjFkFAZICnjL88OPuGGfWIM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.121.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b6:0e:b8:0a:37:fa:11:7b:a4:8a:ec:13:31:68:28:02:63:
cf:48:9e:c8:7d:94:4c:54:50:4f:f5:12:f1:df:e2:51:6f:80:
68:c3:9a:3e:43:f8:33:94:d0:ff:2f:92:7e:08:b4:87:b4:a0:
c9:06:b8:ed:cf:5c:fb:ab:78:22:ce:94:62:37:ab:c7:3d:9a:
46:5e:c1:a9:7e:85:3d:d1:19:41:dc:8a:3c:04:d9:8e:99:a5:
6b:35:88:80:09:d7:be:ff:31:57:12:6b:1f:ef:c4:40:be:fb:
1b:7f:1d:af:86:af:33:63:48:68:04:71:5e:a1:6e:2e:62:59:
9a:89:cd:be:d8:62:8d:4b:92:0e:87:62:bc:0e:b1:c3:0c:ec:
30:9f:bf:8c:e1:33:cd:84:05:a4:9a:bc:63:fc:ce:3f:57:e0:
17:d7:65:b9:d3:91:14:aa:a3:cd:32:a5:0f:74:93:7f:14:12:
9a:4c:d5:9e:eb:1d:3a:a3:7f:67:dc:1a:40:3c:ac:df:f9:1d:
3a:ba:78:f4:b9:12:1a:62:29:e7:b4:1d:e5:3b:54:8f:9d:42:
ad:9f:93:64:ec:c4:97:be:52:b8:e5:9d:05:14:83:a7:01:f4:
8d:a8:cf:0d:58:4f:89:3c:15:81:d2:ce:4b:76:a2:10:19:1d:
b8:2d:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:48 2025 by rpki-client