Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/trn1aE8BMtDJEkC5Agfq5HhXCd0.roa
File: trn1aE8BMtDJEkC5Agfq5HhXCd0.roa (raw, json)
Hash identifier: ZkI/ud0BLJc3YNafNo5dhI6jYz5C0sXxqsLCTSIWCtA=
Subject key identifier: B6:B9:F5:68:4F:01:32:D0:C9:12:40:B9:02:07:EA:E4:78:57:09:DD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019648A713DD45D4C24598041316ADC1EDE4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/trn1aE8BMtDJEkC5Agfq5HhXCd0.roa
Signing time: Fri 18 Apr 2025 11:27:11 +0000
ROA not before: Fri 18 Apr 2025 11:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 05:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:a7:13:dd:45:d4:c2:45:98:04:13:16:ad:c1:ed:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 18 11:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6b9f5684f0132d0c91240b90207eae4785709dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:51:72:4d:46:06:ab:42:1e:b3:2c:fa:99:
e3:15:55:6a:fe:1d:6e:39:e8:54:9c:51:27:a1:45:
37:13:e6:c2:cd:49:d4:98:2b:e8:42:da:d2:77:b1:
fc:39:59:ef:4f:62:7e:44:55:2a:df:18:fd:d3:ff:
d8:f8:75:9e:15:69:a9:ae:91:54:37:8c:97:67:05:
1b:63:5e:13:39:42:96:9e:95:73:e2:c3:6a:e8:8b:
0e:0a:33:23:a1:27:07:7e:c2:3c:99:3e:ad:a1:39:
42:3c:95:78:b2:43:90:d1:82:3f:45:f6:d4:c0:d6:
eb:e3:50:9e:0d:fb:74:6a:88:f3:92:0c:41:82:53:
0c:97:e6:29:97:55:6c:b6:8e:70:f7:4d:b0:7e:dc:
67:76:c5:a3:5c:e5:90:ab:42:8b:06:5e:84:99:df:
0b:ed:13:d4:13:d9:16:3c:ee:6c:5f:8a:7c:3a:4d:
c3:61:ed:28:bd:9f:84:a1:2b:57:cd:79:ea:4f:df:
2a:b3:0e:22:18:5c:1c:58:0a:c0:9f:99:59:03:e5:
7e:66:e5:4d:d3:06:04:01:d1:f9:2b:a8:7b:a4:bf:
be:ae:2c:86:86:3d:f3:b4:c3:69:c4:73:0e:60:66:
ac:09:a9:35:da:ee:b6:c7:83:7f:d0:3c:95:f4:1b:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:F5:68:4F:01:32:D0:C9:12:40:B9:02:07:EA:E4:78:57:09:DD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/trn1aE8BMtDJEkC5Agfq5HhXCd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.132.0/22
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:1b:0f:f0:c6:ab:15:f2:73:53:3f:d4:53:31:31:d6:6b:21:
06:ef:92:a9:3d:da:bd:6d:05:f2:65:20:a5:6a:e2:02:6b:4a:
33:59:9b:f1:28:69:ba:5a:27:bb:8b:37:8b:b5:66:a9:22:65:
10:2d:6e:9c:f5:a3:2b:3c:2e:8a:fa:b1:3e:71:60:e3:3a:1a:
b5:71:98:58:ca:a8:28:99:23:37:6b:30:23:b5:2b:89:05:65:
25:8d:41:b3:08:2d:50:fd:0d:a6:be:5f:c1:05:9a:60:c0:94:
e6:31:b2:19:90:ed:ec:2a:1f:53:ff:48:cd:e0:e2:76:ad:dd:
ab:ff:9c:71:0d:f2:33:1f:42:23:84:28:f3:e3:e3:04:35:00:
be:a5:a7:86:e4:3f:14:29:42:19:31:56:44:ce:88:0d:6e:9a:
19:df:e0:ac:d5:9f:b5:23:0a:54:56:89:7b:f6:0b:b7:ea:df:
06:ff:a4:3f:36:40:d8:c1:97:ae:65:5b:f6:d4:5e:ff:0f:e0:
16:3a:da:6b:57:89:19:5a:52:b8:8b:42:3a:4b:3d:31:6d:82:
33:75:50:09:77:9b:84:d2:6e:ad:2f:2d:66:fc:57:a9:85:8a:
90:3b:6d:97:ab:4e:5c:03:cc:d0:e7:20:e2:5f:7c:80:23:2a:
72:44:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:30:04 2025 by rpki-client