Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eeV9SJErdNZ09rRuN5foGCBakfg.roa
File: eeV9SJErdNZ09rRuN5foGCBakfg.roa (raw, json)
Hash identifier: iCtJlEBUy0leKrrAag0qG/q0T73rXom+KHhQxd7Iyqc=
Subject key identifier: 79:E5:7D:48:91:2B:74:D6:74:F6:B4:6E:37:97:E8:18:20:5A:91:F8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198407F0F8A2F619F733E2843AF8BE4A4E0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eeV9SJErdNZ09rRuN5foGCBakfg.roa
Signing time: Fri 25 Jul 2025 07:32:05 +0000
ROA not before: Fri 25 Jul 2025 07:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135542
IP address blocks: 151.243.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:7f:0f:8a:2f:61:9f:73:3e:28:43:af:8b:e4:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 25 07:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79e57d48912b74d674f6b46e3797e818205a91f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:a9:4c:bc:da:60:4c:10:c7:7e:b6:6a:cf:
68:c6:f9:4e:8b:d6:59:65:75:5d:91:3c:f2:63:54:
7b:50:1b:12:c0:f8:be:81:35:94:3f:2c:14:4e:27:
a5:91:2f:37:39:d5:87:ca:3d:20:37:bf:d6:c9:2d:
7d:d7:9a:96:09:6d:81:de:33:c5:9a:7b:48:ef:52:
9f:52:36:94:13:65:4a:1c:0e:89:90:ac:6a:f6:63:
ed:26:da:83:40:a5:f0:f9:c2:64:b0:cf:88:aa:dc:
d7:44:e2:10:6b:d9:80:dd:bf:db:fa:53:be:37:30:
97:ac:a6:a7:0a:84:95:43:56:b1:ee:0a:d4:78:10:
36:1a:49:c2:a0:69:79:87:b1:b5:53:a7:1d:11:28:
ee:54:d0:3b:c3:bd:41:5e:e0:c2:36:d9:1c:c3:5d:
f3:82:b4:53:3d:a1:eb:dc:fc:64:7f:e1:fb:90:11:
13:ba:02:37:78:8c:a4:1c:09:df:16:30:39:4e:e4:
ae:3f:f2:fa:19:18:22:0f:ab:39:3c:c8:15:c7:81:
94:11:77:c3:3e:95:7e:b5:54:c6:5b:10:b0:6a:d4:
88:eb:cd:3e:6e:fb:ac:98:36:03:83:9c:66:5a:f5:
ab:b8:40:61:c1:3d:47:2d:20:0d:cf:32:1a:20:26:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E5:7D:48:91:2B:74:D6:74:F6:B4:6E:37:97:E8:18:20:5A:91:F8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eeV9SJErdNZ09rRuN5foGCBakfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.214.0/24
Signature Algorithm: sha256WithRSAEncryption
32:63:10:b0:2a:0b:46:1c:5c:8b:84:81:e4:a3:20:99:8d:ac:
a8:68:88:20:c3:62:a7:37:85:c8:5f:54:e4:c1:c4:e7:ce:4c:
db:1a:16:2c:13:8a:e9:6d:06:06:ce:d5:4f:43:5a:5e:a3:e1:
d3:4c:ff:45:43:5c:d0:23:ed:ab:12:c2:11:d3:d7:a5:0d:ce:
40:50:97:b0:c1:6b:cc:13:89:32:c8:55:e2:80:53:21:52:ce:
98:3b:9f:04:e2:65:fd:e8:d6:a3:06:0f:ac:a2:05:3a:b9:6e:
8c:26:5a:90:14:ec:8a:70:27:0e:10:21:84:a9:6d:93:b3:75:
66:57:c3:7d:dd:a5:9b:46:9d:fe:53:25:39:b9:b5:85:a4:b5:
64:25:f9:78:2e:f1:dc:9e:6c:c5:4c:ad:95:75:ca:1c:1e:12:
a8:8a:7b:a3:99:15:bf:8c:b5:d5:36:9f:21:6b:98:d8:3a:39:
b7:b8:66:70:77:05:fe:b9:f6:a5:35:08:10:8f:fc:40:5f:d0:
89:d3:1c:01:7a:d2:5c:a5:9d:8c:3f:83:6a:68:6b:98:76:db:
df:d5:70:2b:da:45:08:51:fa:a8:d6:03:e1:12:3f:03:55:e6:
72:13:29:fa:52:38:7a:29:74:d4:e5:c9:ea:bc:e2:2f:0a:93:
e8:6a:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:40 2025 by rpki-client