Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mX8rB8EwgblLzH7xop18ace8Y5o.roa
File: mX8rB8EwgblLzH7xop18ace8Y5o.roa (raw, json)
Hash identifier: o9CD54M76FbCBup07Va/MvghtheKwAQzeJO2U65NKEk=
Subject key identifier: 99:7F:2B:07:C1:30:81:B9:4B:CC:7E:F1:A2:9D:7C:69:C7:BC:63:9A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019633240165316DB1E830262A3D2AFAA221
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mX8rB8EwgblLzH7xop18ace8Y5o.roa
Signing time: Mon 14 Apr 2025 07:11:59 +0000
ROA not before: Mon 14 Apr 2025 07:11:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152460
IP address blocks: 151.242.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:24:01:65:31:6d:b1:e8:30:26:2a:3d:2a:fa:a2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 14 07:11:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997f2b07c13081b94bcc7ef1a29d7c69c7bc639a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:93:0a:3e:6b:3f:b0:59:91:9e:fc:0a:ca:
14:5e:d6:d4:3a:3a:0c:7f:6d:fb:32:a8:36:93:d4:
12:2d:4a:35:fc:ca:21:55:5a:fe:ac:76:de:23:eb:
0f:9e:bb:1b:a2:23:85:cc:42:5a:fa:39:fc:8e:be:
44:a4:5d:4e:2d:88:89:f9:34:27:63:84:18:48:be:
c0:91:f1:28:12:5f:70:50:df:34:47:7b:35:66:4f:
5d:4a:0e:61:00:a5:83:0a:2e:a0:b9:92:1b:99:50:
4e:24:76:dd:3a:0d:b3:98:6c:ba:57:99:df:8b:e1:
4a:d7:15:17:32:f8:82:f3:66:ab:af:01:aa:93:fe:
3e:7d:a9:69:da:39:2f:ff:9d:ab:6f:0d:a9:35:7f:
92:dc:d9:c9:eb:9c:79:69:85:f3:c4:e8:93:bd:83:
df:c6:1e:58:9b:b9:08:fd:84:cd:f4:1f:c4:84:46:
52:10:f3:c3:a3:ef:22:99:47:c8:15:19:36:47:10:
15:68:db:d6:c6:12:27:3e:6a:c0:7b:9e:4b:b5:a3:
22:04:48:ef:3f:1f:e0:6d:cb:29:3f:9d:aa:ca:d5:
7a:80:a7:70:d2:6a:0c:28:5d:9e:c2:44:d1:f9:d9:
0b:1a:97:c9:10:81:fc:a2:af:98:a6:9c:41:3d:88:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7F:2B:07:C1:30:81:B9:4B:CC:7E:F1:A2:9D:7C:69:C7:BC:63:9A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mX8rB8EwgblLzH7xop18ace8Y5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.251.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d5:ba:e6:6d:28:93:5e:75:f4:c1:57:c6:98:db:cb:23:db:
12:5c:07:01:8a:75:76:ba:d5:10:30:42:c8:03:20:af:33:c8:
b1:a4:1b:2e:f7:8c:16:fe:69:a8:5b:c0:b0:c7:f8:60:21:07:
2f:12:ff:91:d4:f9:c0:8d:2b:07:20:b1:84:76:f1:69:02:f9:
7d:71:a0:ef:a8:48:b3:9b:25:e6:18:d9:7a:c7:bc:70:b3:55:
5c:6a:b4:98:36:9e:d4:2c:91:f6:34:6c:3d:10:91:9a:c6:e8:
78:14:86:da:f9:fc:aa:d9:bd:89:5e:f4:05:43:5f:d5:bf:da:
9f:8b:45:62:17:43:91:3f:eb:7e:cb:55:fc:8c:24:83:38:6e:
d8:58:29:fd:3e:5b:a3:9f:f5:40:5b:ea:83:0d:de:6a:c9:1a:
25:bd:f1:92:a9:72:6c:4a:df:8b:43:6a:36:73:f9:aa:b4:6a:
34:14:84:01:69:a2:b8:fd:19:60:c9:46:95:93:2d:d3:4a:f8:
d1:86:f3:de:ed:2d:06:96:88:53:22:36:c7:f2:84:f3:83:66:
d4:27:71:4a:77:43:5c:3b:ee:4f:1d:2d:e3:6b:59:cd:72:67:
af:9a:87:bf:18:03:4e:08:fc:f4:6a:c5:30:94:44:a1:80:82:
a9:ac:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:25:10 2025 by rpki-client