Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iZBrQTBYfsH9jw3dzs1Uw96cu90.roa
File: iZBrQTBYfsH9jw3dzs1Uw96cu90.roa (raw, json)
Hash identifier: 6H76pDi7KR9gDR9B27kYxcBgu/7JceEfqDxl6xj57jY=
Subject key identifier: 89:90:6B:41:30:58:7E:C1:FD:8F:0D:DD:CE:CD:54:C3:DE:9C:BB:DD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019850B5258890195A99F08087FE91B294AA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iZBrQTBYfsH9jw3dzs1Uw96cu90.roa
Signing time: Mon 28 Jul 2025 11:05:05 +0000
ROA not before: Mon 28 Jul 2025 11:05:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 151.242.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:b5:25:88:90:19:5a:99:f0:80:87:fe:91:b2:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 28 11:05:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89906b4130587ec1fd8f0dddcecd54c3de9cbbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:be:16:18:e2:9f:53:e6:e4:f2:2e:2a:02:
8e:f1:97:60:b4:b6:34:30:a0:48:59:ee:93:d9:f7:
00:fc:61:f0:ac:3a:5f:f3:70:ed:77:57:2b:1f:3d:
cf:ba:70:91:a4:6d:ee:9e:e7:bd:ef:2f:de:70:2c:
37:07:04:78:5f:4b:04:11:f9:9c:bc:db:a4:2d:1b:
51:41:c3:bf:7a:78:e0:cc:58:1c:13:81:48:ca:0e:
68:95:f9:aa:2a:bb:5e:8d:29:2c:fc:6b:1d:b5:c4:
74:9b:6f:78:e0:be:fd:91:96:65:84:80:2b:e1:06:
eb:25:a2:af:f4:3b:72:b0:f9:cb:29:e8:9c:a0:6c:
33:e5:f8:6e:f8:87:cf:b0:e9:f9:28:7f:7c:d8:e7:
d2:cc:a0:ca:f3:51:f3:9c:fc:32:81:0d:e9:07:d0:
9d:c1:35:c8:16:2a:e7:59:40:cd:a7:41:de:22:26:
4c:e0:0a:87:f0:1d:69:52:e7:58:fc:3f:cf:2a:61:
d7:68:01:5d:3a:52:c1:b5:f5:1c:74:6e:90:03:41:
a9:6b:75:7c:4a:30:53:95:de:58:11:8c:a8:70:ee:
b6:24:fa:43:d5:4b:bb:5f:5c:2d:70:6d:fb:c5:bd:
d7:de:bf:fc:0f:b8:68:dd:69:00:b9:4a:03:61:e3:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:90:6B:41:30:58:7E:C1:FD:8F:0D:DD:CE:CD:54:C3:DE:9C:BB:DD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iZBrQTBYfsH9jw3dzs1Uw96cu90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5d:81:41:70:17:ee:3a:b2:62:24:6b:c0:4b:2b:db:2d:8e:
1d:46:89:13:4b:91:cd:72:1e:52:38:58:cb:c7:27:88:f4:da:
3a:27:78:72:a8:ea:73:22:6f:60:ea:16:83:87:da:4a:36:90:
ea:08:3e:0b:2f:08:c5:06:9a:61:0c:b3:78:01:39:59:6d:b0:
c5:af:6d:d3:9f:4b:1d:14:60:d5:26:ce:41:a5:71:66:91:c6:
cc:6b:d7:67:39:93:bf:9d:ee:c5:dc:69:40:51:77:ab:b5:b3:
6b:12:15:ef:18:9b:e3:13:26:ea:a6:c5:bb:48:34:b2:a1:6a:
4e:33:55:aa:e4:02:64:cc:ab:7c:a3:5e:b9:86:57:97:b5:31:
a0:c0:ae:14:5c:b0:c6:a9:06:12:39:d9:30:2d:23:0a:40:b7:
c4:0e:69:48:83:a6:72:a3:57:d5:cb:de:89:1f:b4:db:a2:fb:
ea:2c:b7:0f:e7:ce:94:58:6d:12:0d:ea:70:a2:c9:a5:a4:37:
c4:35:c2:7a:da:61:bf:bb:d1:fb:c7:98:2f:c3:c1:e5:e9:f6:
88:0c:d1:5a:93:8b:36:02:af:9f:8c:d7:06:cd:d1:3b:7a:74:
46:7f:5d:44:9c:d0:1b:4b:a8:40:30:2a:b0:0c:b3:22:e9:5a:
26:80:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:31 2025 by rpki-client