Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aPgKkpsKmvgJzNuU0H0Gnw-7OFQ.roa
File: aPgKkpsKmvgJzNuU0H0Gnw-7OFQ.roa (raw, json)
Hash identifier: OFBIFb7PKcyQSR9k1u2jQhd1r6nFOzCDxQUc1zB6wp8=
Subject key identifier: 68:F8:0A:92:9B:0A:9A:F8:09:CC:DB:94:D0:7D:06:9F:0F:BB:38:54
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019859931FBAB2ADCB206CA7E5695B5708B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aPgKkpsKmvgJzNuU0H0Gnw-7OFQ.roa
Signing time: Wed 30 Jul 2025 04:24:30 +0000
ROA not before: Wed 30 Jul 2025 04:24:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49592
IP address blocks: 151.241.17.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 06:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:93:1f:ba:b2:ad:cb:20:6c:a7:e5:69:5b:57:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 30 04:24:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f80a929b0a9af809ccdb94d07d069f0fbb3854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:9d:5d:23:89:22:e8:96:8d:f7:62:73:17:
df:27:19:be:76:da:fb:7e:40:30:20:41:de:ff:ef:
b0:84:4f:93:c6:0d:0e:a5:48:1d:c7:74:e7:ce:c2:
95:65:35:e7:bd:14:fb:c6:79:4f:0a:24:b9:4c:80:
e0:38:59:d2:6e:72:ff:5a:04:de:d2:16:92:b5:23:
0d:f8:17:81:0e:67:39:f3:b9:7b:da:d2:38:f9:88:
2b:7b:05:0a:57:0b:83:4f:d2:30:80:bb:2a:83:9f:
3b:41:54:2c:48:56:43:1d:99:6c:69:e7:c3:62:02:
ea:a0:7c:8b:96:ee:9d:2f:f3:fd:3f:9d:7f:d7:9a:
13:d8:5b:13:d5:e1:8a:fe:e7:22:80:b5:66:99:64:
e2:4f:6e:f1:57:66:5f:a5:dd:54:92:12:63:48:a5:
df:27:a2:37:24:15:c1:9d:ae:ac:42:3f:7c:d4:a0:
f2:6e:e7:8d:03:52:27:ca:cb:0c:3d:90:16:1c:cc:
4a:e5:cc:d2:f6:26:9a:10:3b:49:db:c4:db:05:d2:
9f:1b:c3:43:b9:80:4e:b6:49:66:91:3f:c5:f9:40:
b6:64:22:fd:5c:0c:b3:ca:03:e9:92:8f:94:78:64:
f4:30:ad:94:a0:f2:e0:c3:ff:48:52:12:99:6b:38:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:0A:92:9B:0A:9A:F8:09:CC:DB:94:D0:7D:06:9F:0F:BB:38:54
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aPgKkpsKmvgJzNuU0H0Gnw-7OFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.17.0/24
151.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:15:7d:74:73:80:32:18:17:09:2c:f6:9b:39:31:62:47:18:
99:41:a2:9c:c4:d4:10:74:2d:22:4e:fd:69:76:98:7d:f3:7e:
66:c6:05:79:d2:dd:25:cc:03:a9:a7:00:9b:4a:51:72:83:c7:
3e:8d:d2:d9:46:b5:ce:e2:ea:f4:59:c9:10:30:61:00:1d:3b:
b3:14:ff:55:c1:9a:b4:56:ed:5b:02:6f:9e:c3:f2:11:ba:46:
24:c5:2f:ae:51:ce:87:0b:bc:f4:f0:a4:56:a0:5f:ca:5c:5d:
96:b2:93:cb:9b:52:a4:ce:d6:41:8b:91:ec:2e:05:de:d8:eb:
cc:bf:28:50:ff:fc:fb:aa:69:9a:8f:4a:ff:85:26:72:8e:9f:
f0:cb:25:25:de:a1:e4:5e:c6:b7:fb:c1:78:f5:61:54:6a:8a:
b6:55:47:00:ef:66:73:d9:a6:2e:2f:18:26:4f:c1:fd:b2:d4:
f3:2d:00:7f:5b:93:55:af:35:34:2b:74:df:75:1c:9d:e2:d2:
4a:61:a3:bf:16:aa:55:a3:38:b4:4a:76:49:8a:19:5c:ba:51:
18:de:e9:9b:0f:71:ce:11:13:1d:89:95:b4:92:19:74:02:8c:
b5:d6:b2:fb:2f:6c:19:5b:0d:2d:82:a9:7f:19:aa:e8:c4:ea:
c0:1e:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:39:39 2025 by rpki-client