Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bF4A60F5cUc7RuIda9k19w_4uVQ.roa
File: bF4A60F5cUc7RuIda9k19w_4uVQ.roa (raw, json)
Hash identifier: Q06C5RcoQVIUs8zLG/xd7/D2DjAF6CbUeI3tRl4GLfU=
Subject key identifier: 6C:5E:00:EB:41:79:71:47:3B:46:E2:1D:6B:D9:35:F7:0F:F8:B9:54
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198451204CBB8F60176AB78638462091BE7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bF4A60F5cUc7RuIda9k19w_4uVQ.roa
Signing time: Sat 26 Jul 2025 04:51:05 +0000
ROA not before: Sat 26 Jul 2025 04:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274099
IP address blocks: 151.241.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:12:04:cb:b8:f6:01:76:ab:78:63:84:62:09:1b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 26 04:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c5e00eb417971473b46e21d6bd935f70ff8b954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:2e:d1:17:76:c9:ac:ca:39:c6:43:0a:2d:
e6:04:e7:9e:a8:ad:93:21:e2:50:6b:e0:5d:43:ea:
76:33:19:f7:48:dc:7d:d1:28:67:eb:19:bf:9d:0f:
8c:0b:ab:82:06:21:ed:74:67:00:2a:27:68:1b:82:
d6:ad:ba:10:8e:87:09:08:24:37:7f:30:93:db:38:
27:b6:99:62:4c:f6:85:93:87:35:c4:74:75:42:d8:
f5:74:67:20:40:d8:94:02:67:30:57:62:64:0d:5b:
46:5d:30:98:86:b3:4b:16:58:ec:50:b8:dd:d5:6c:
6d:0c:e3:23:ff:09:7c:07:8f:07:63:35:a2:2a:0c:
e2:03:da:ad:63:af:55:a6:50:1e:92:08:a2:21:c5:
9b:98:32:e3:9e:56:52:f9:0e:9d:e2:6a:f4:e7:d6:
2f:d1:f3:d2:89:a0:19:70:8f:31:81:6e:f2:fa:19:
ca:8e:56:f9:20:48:d5:4f:e9:d6:ae:c0:ce:68:fc:
0c:3b:1f:e8:9d:db:fc:bc:1e:87:04:76:71:5c:08:
ea:8c:47:d9:17:54:a2:ec:dd:a9:0e:8f:d5:76:cb:
78:93:b8:2e:83:6e:6e:09:c1:9c:52:ec:7f:b2:6c:
e4:1c:35:df:69:9c:03:c8:c8:1e:b9:bf:fa:f7:92:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:00:EB:41:79:71:47:3B:46:E2:1D:6B:D9:35:F7:0F:F8:B9:54
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bF4A60F5cUc7RuIda9k19w_4uVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:6d:fe:d5:1b:03:ae:dd:52:97:c0:08:41:96:ce:2f:93:16:
b6:a3:0b:f0:b3:30:99:34:c5:d9:1f:ee:85:23:0f:21:5a:a8:
6f:74:57:09:0c:db:cf:7b:41:7a:48:aa:90:10:80:5c:49:1a:
a2:96:af:7b:60:9e:87:7f:69:1d:a2:21:37:13:bf:57:e2:b4:
dd:9e:69:74:d8:97:77:e4:e5:51:af:4e:ec:43:23:54:97:af:
99:38:ca:d4:69:fd:6f:4d:9c:0a:d1:8a:47:ce:b4:99:46:30:
ec:1b:2a:af:84:48:83:f4:42:53:db:4b:97:60:3c:3a:e8:5b:
48:60:65:91:5b:9f:69:a0:ea:19:bc:d3:45:33:af:3f:87:5a:
6f:e3:1f:ae:81:7a:da:f9:dd:c5:f0:88:2f:5a:6d:9f:ee:cf:
81:fd:2a:d5:40:ed:fd:e0:04:76:b2:31:2e:bd:d8:63:72:5a:
52:7b:c5:ba:d5:b3:d1:02:27:b0:7f:24:7d:60:5f:e8:d4:c7:
1a:b2:36:93:fc:a8:0c:bc:2a:75:c7:8f:7e:a2:c7:46:fe:ea:
5a:80:01:b5:a4:ef:c5:27:37:f9:e2:0c:19:c8:71:20:a1:82:
09:2c:32:26:0f:6f:42:ef:3d:d0:f4:5e:95:15:35:ee:a3:e1:
4c:0a:21:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:34 2025 by rpki-client