Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wJMFGswlyoayVTqh4IyfcKJ6p10.roa
File: wJMFGswlyoayVTqh4IyfcKJ6p10.roa (raw, json)
Hash identifier: yhrNxb8DOkPPSq4w/0ZiHoPszcTly+fXkQ1PxT8+5XY=
Subject key identifier: C0:93:05:1A:CC:25:CA:86:B2:55:3A:A1:E0:8C:9F:70:A2:7A:A7:5D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019854CAAE1D250EBF24CE24208EEF6560CB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wJMFGswlyoayVTqh4IyfcKJ6p10.roa
Signing time: Tue 29 Jul 2025 06:07:05 +0000
ROA not before: Tue 29 Jul 2025 06:07:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210476
IP address blocks: 151.243.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:ca:ae:1d:25:0e:bf:24:ce:24:20:8e:ef:65:60:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 29 06:07:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c093051acc25ca86b2553aa1e08c9f70a27aa75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:e0:6b:ec:02:a6:16:54:10:e1:5f:13:1b:
3a:1f:2c:24:8c:0d:31:aa:a5:c3:72:e1:f4:c7:2b:
99:27:02:49:0d:e0:25:a3:74:a0:d8:87:4a:4c:0c:
e8:3c:56:4f:8b:f2:d6:f3:23:e6:7e:e3:08:10:8f:
8a:5d:8f:f4:ea:76:bc:6c:c9:63:b9:5c:f2:34:90:
66:01:43:ef:ce:b3:db:50:e6:4f:d9:05:b5:70:62:
02:19:3d:f8:cb:bf:81:0a:63:f9:de:55:69:f7:56:
c4:a7:b8:63:d1:73:cd:87:6f:27:6b:d4:d8:61:fd:
b4:2d:20:11:de:14:02:d6:be:81:d2:04:9d:cc:13:
79:49:e7:d7:e0:62:50:f5:bb:8a:52:83:0c:b0:c3:
49:2c:c6:fd:d4:ad:04:46:20:df:80:e0:e8:f3:1b:
ed:2a:ad:0f:1b:e7:96:c6:a6:14:c3:51:b4:34:75:
e7:c4:d0:2a:56:82:3e:65:24:37:f7:ef:01:44:17:
ad:ac:6c:a3:b3:43:62:de:76:31:c6:42:4b:4d:d3:
04:ff:25:01:66:06:5b:b0:93:d2:e9:ae:73:f9:41:
2f:94:d5:81:da:dc:35:89:d4:b4:98:05:12:68:e7:
06:db:92:8e:b5:9a:fe:22:50:5b:3b:e3:2f:f8:a9:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:05:1A:CC:25:CA:86:B2:55:3A:A1:E0:8C:9F:70:A2:7A:A7:5D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wJMFGswlyoayVTqh4IyfcKJ6p10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:10:8b:29:f2:ab:b3:de:a9:e2:0d:82:3e:af:85:f6:bb:83:
b1:1d:8d:0b:03:9f:62:d4:f2:b1:66:63:ee:f3:7d:61:da:c6:
2b:c1:e7:dc:e4:80:bf:76:50:53:cd:0d:d4:75:4d:0e:9a:08:
f7:55:af:69:3f:e4:1c:e3:16:cb:c9:68:4a:40:81:c3:3b:44:
75:6b:3a:a8:0a:ad:ab:70:00:a3:2a:77:d2:a2:cb:b1:e9:56:
61:5a:29:e4:1b:16:69:17:43:d5:50:ea:8f:69:2c:24:29:f7:
d1:1b:5e:b8:81:94:d0:b9:63:6a:a2:16:78:03:27:c9:f6:75:
42:56:da:3a:a8:32:11:2b:61:90:d4:90:19:b8:fc:a4:3f:d4:
49:0e:ff:89:d1:87:91:58:53:fa:58:aa:03:c3:df:40:ac:ca:
df:24:e9:8c:17:c3:dd:c2:c1:41:a1:fd:dc:67:bd:13:34:a0:
98:91:7f:b0:dd:e7:f9:ca:bc:f6:63:b8:c6:6e:27:02:56:a9:
61:22:7d:38:98:ee:02:2c:a2:4a:73:cc:96:3e:17:46:7b:30:
73:d3:c7:0d:eb:4c:d1:4c:40:e8:be:97:9d:0e:eb:91:cf:d5:
b5:2f:3a:73:a7:2c:05:e2:7a:67:e4:9c:97:42:e0:9a:73:66:
81:20:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:27 2025 by rpki-client