Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c7mR5dIfAU9-VBu_AVkshEZTRQo.roa
File: c7mR5dIfAU9-VBu_AVkshEZTRQo.roa (raw, json)
Hash identifier: swMJPzK6HG5qwRJBhtEKvvd0UhV0ADTVgHmYp5YU+Ys=
Subject key identifier: 73:B9:91:E5:D2:1F:01:4F:7E:54:1B:BF:01:59:2C:84:46:53:45:0A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019748B34B8540C34A8D5C13BFE91DFA7641
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c7mR5dIfAU9-VBu_AVkshEZTRQo.roa
Signing time: Sat 07 Jun 2025 04:43:19 +0000
ROA not before: Sat 07 Jun 2025 04:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 151.242.111.0/24 maxlen: 24
151.242.146.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:b3:4b:85:40:c3:4a:8d:5c:13:bf:e9:1d:fa:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 04:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73b991e5d21f014f7e541bbf01592c844653450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:09:1d:f5:18:44:4d:22:98:72:1e:9c:81:
a2:60:b5:35:6e:b8:48:45:2b:23:8f:6b:3a:bf:42:
82:b8:24:5d:7c:8e:29:3a:2f:4a:2f:67:a0:11:90:
76:2f:c4:6b:dd:79:25:08:9c:69:1b:1e:e8:0e:d2:
58:aa:2f:4a:69:86:16:fc:5a:3d:dc:a4:10:56:85:
2b:ef:c9:11:8a:39:22:c2:d8:e0:3c:aa:a3:1a:9d:
04:e4:30:c1:a0:6d:06:aa:f4:61:f4:fd:3a:05:5f:
6c:fa:93:69:61:ae:42:08:75:a4:e3:7a:09:89:aa:
b5:7f:73:99:05:01:04:9b:69:6a:8f:24:28:27:5c:
da:1e:71:b8:7a:93:90:21:65:b4:b4:32:7d:8e:d6:
45:bb:73:3a:cc:16:19:4b:4a:b1:94:e7:a4:65:6b:
c5:2b:b0:6d:57:bd:cb:17:65:eb:b9:02:d3:90:ea:
61:80:6d:8b:25:59:de:95:83:b3:6c:bd:40:60:fe:
60:89:77:be:26:a9:59:a4:e1:9d:a4:fa:1c:5d:7f:
00:81:d6:07:69:52:31:cc:15:f3:80:43:85:1a:5e:
72:dc:7b:a7:f5:03:a5:91:a7:a7:01:51:58:32:48:
01:ca:61:48:bc:79:6d:e8:8d:f8:0c:25:de:67:d8:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B9:91:E5:D2:1F:01:4F:7E:54:1B:BF:01:59:2C:84:46:53:45:0A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c7mR5dIfAU9-VBu_AVkshEZTRQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.111.0/24
151.242.146.0/24
151.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ca:1c:f1:44:a3:f1:f7:6a:1e:53:81:31:78:65:1d:9c:72:
5a:cc:76:95:74:cd:ab:d6:39:b3:bf:ea:7b:97:13:d5:47:55:
5a:35:a3:05:bd:0c:a6:7a:6a:ef:9f:60:02:ce:60:bb:11:07:
d5:94:4a:42:60:de:77:4d:6c:d4:3d:1a:27:84:1f:82:f1:92:
52:e1:91:b1:47:67:af:55:3c:4d:c9:8f:e4:68:e2:8a:87:33:
3d:75:9b:32:aa:94:6a:21:a5:d1:a7:8e:b1:b4:e7:fc:ba:b6:
0e:4e:50:4a:8c:51:33:ba:d2:67:45:12:47:94:55:34:93:98:
e9:58:49:53:3c:4b:82:10:6b:64:a0:f2:17:8e:9c:a8:7c:ef:
f4:47:3d:fe:e0:ab:b2:e9:27:21:41:10:1d:18:b1:d5:63:72:
ef:21:f2:1a:f8:ba:a1:50:99:fb:87:42:f5:34:23:a7:40:ea:
a2:94:59:7b:1e:df:65:42:aa:00:6e:b8:d6:d9:45:b0:04:b4:
ee:42:dd:a4:43:37:66:b5:8d:f8:a6:14:cd:a9:ff:6a:42:25:
7a:48:b6:4b:33:47:3b:76:1d:7b:de:92:73:53:95:97:69:58:
6c:b0:bc:80:78:44:23:73:57:6c:35:82:ac:7d:ad:26:2c:ae:
f7:80:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:13 2025 by rpki-client