Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eNwddRCSjPHaTMyyFkdPKIsKMPA.roa
File: eNwddRCSjPHaTMyyFkdPKIsKMPA.roa (raw, json)
Hash identifier: UITpEW6yIvHmIzYJw19hb2faUN84tTY4eT5bYncvb/4=
Subject key identifier: 78:DC:1D:75:10:92:8C:F1:DA:4C:CC:B2:16:47:4F:28:8B:0A:30:F0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019874A5A6D534F35FDACB03F3C65363C2C7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eNwddRCSjPHaTMyyFkdPKIsKMPA.roa
Signing time: Mon 04 Aug 2025 10:34:29 +0000
ROA not before: Mon 04 Aug 2025 10:34:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153656
IP address blocks: 151.242.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:a5:a6:d5:34:f3:5f:da:cb:03:f3:c6:53:63:c2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 4 10:34:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78dc1d7510928cf1da4cccb216474f288b0a30f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:39:10:98:6e:9a:99:7e:50:2b:39:24:78:
2a:db:71:3b:de:92:a2:b8:43:1b:01:c7:4a:02:26:
71:6e:24:2e:a2:81:52:f8:dd:19:67:3f:77:bd:41:
e7:05:b7:62:8a:9a:c6:77:d6:35:35:e7:55:3a:a2:
7e:0d:52:6e:e1:f4:a7:f7:de:42:aa:d6:22:b0:54:
6a:ca:1b:18:1e:14:18:95:f7:61:0e:36:2f:23:7d:
60:53:07:b8:11:9c:d5:05:f9:af:fc:50:2e:a2:f5:
c1:11:50:86:c3:04:23:72:27:22:31:44:71:e0:7b:
fd:58:50:0a:43:a7:07:e1:1e:8e:76:11:8c:57:d9:
1b:bf:6c:b3:a1:4e:b3:ab:34:c5:83:4e:7d:cb:b2:
0e:ea:e5:d3:cf:55:00:25:92:4a:f0:7a:05:84:3e:
1a:d2:df:c3:a0:3f:36:25:ac:63:51:d1:21:79:c7:
ce:4c:6c:5e:45:74:fd:c3:a7:d7:de:98:55:91:3a:
8e:82:83:ad:2b:4e:10:e8:7c:c9:6e:5c:12:af:cd:
d5:02:17:93:9e:47:a2:b3:d9:4d:db:ce:a2:26:dd:
8d:c7:e0:23:e8:6c:b9:de:a7:94:76:b6:16:2d:25:
87:01:77:af:64:1f:33:d4:5e:ea:82:1b:ef:b0:31:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:1D:75:10:92:8C:F1:DA:4C:CC:B2:16:47:4F:28:8B:0A:30:F0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eNwddRCSjPHaTMyyFkdPKIsKMPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e2:5c:be:6b:8b:9f:b7:57:93:13:2c:71:ed:8b:b8:47:c3:
a4:55:17:f9:68:c9:35:3f:81:77:d2:53:c6:63:55:fa:97:22:
07:8b:9b:7a:62:4c:f9:fa:a1:b6:34:f0:42:24:8a:49:da:07:
49:b1:50:23:27:c1:8d:13:81:65:c9:ba:23:99:ec:40:96:a2:
dd:1a:21:b3:ad:2f:c7:99:94:f5:9a:6f:98:d3:0a:14:6f:9c:
7c:b7:7b:23:7d:d8:a8:66:14:cf:4d:1c:fd:3b:5e:e4:c3:31:
21:a7:13:fe:ad:41:26:b4:af:a3:be:b1:ff:1f:51:a0:03:fd:
2d:75:4b:16:b0:3f:79:e9:2f:3d:70:da:54:bf:b8:54:5c:4b:
fa:94:b9:b0:54:4a:b3:af:58:83:db:69:51:84:14:de:80:b4:
0b:3f:ce:f8:e9:4d:88:4f:45:de:fa:b8:c0:b6:73:5a:eb:18:
9a:21:17:76:57:9c:12:86:39:e9:58:7b:75:b9:4e:d6:f2:a2:
99:f5:38:49:0f:ca:03:5c:14:9d:98:25:b4:7d:90:eb:6f:b4:
c5:de:2c:bd:7e:a4:aa:c0:b1:69:28:ee:93:fb:05:ef:93:b3:
bf:53:86:ca:2f:41:a9:90:72:cb:0d:87:df:8a:61:43:c9:46:
c1:87:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:19 2025 by rpki-client