Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgqDhAPbUPYP4flDD3V_K3seG2k.roa
File: wgqDhAPbUPYP4flDD3V_K3seG2k.roa (raw, json)
Hash identifier: Yii9FNu8aZlvGsC7P4Voq/I0DcpM8ie4fdPiaTXBO1c=
Subject key identifier: C2:0A:83:84:03:DB:50:F6:0F:E1:F9:43:0F:75:7F:2B:7B:1E:1B:69
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196EC4AE2552E4D0092A6BCA09CDBE209DB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgqDhAPbUPYP4flDD3V_K3seG2k.roa
Signing time: Tue 20 May 2025 06:04:12 +0000
ROA not before: Tue 20 May 2025 06:04:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4637
IP address blocks: 151.242.1.0/24 maxlen: 24
151.242.7.0/24 maxlen: 24
151.242.12.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.29.0/24 maxlen: 24
151.243.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:4a:e2:55:2e:4d:00:92:a6:bc:a0:9c:db:e2:09:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 06:04:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c20a838403db50f60fe1f9430f757f2b7b1e1b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:69:0d:c3:97:66:c1:38:38:fa:8e:7e:e6:
3f:f7:3b:56:97:80:05:cd:f6:a0:ed:74:06:d2:2a:
a3:ad:5e:45:d4:96:c3:09:e4:0d:ef:29:60:28:5f:
c8:7c:72:97:18:48:d8:68:ef:23:e8:6f:7a:c2:86:
0a:39:8c:ca:da:68:96:9a:a0:4b:d3:0a:55:e9:6f:
57:b8:c5:b6:a1:2e:60:00:7e:da:58:c5:46:5f:db:
fc:99:65:fb:4e:37:8f:92:63:c1:d5:f3:a8:e8:b3:
f3:e6:e0:44:0b:1b:87:dd:ba:81:36:04:14:ed:01:
ea:c4:df:9e:d7:f2:1d:11:b5:04:18:72:4d:b8:bc:
79:c3:42:65:97:29:ea:5a:bc:c1:07:a4:45:18:11:
6a:80:d5:3b:d1:c0:7b:69:d0:b9:04:19:ba:d4:83:
8a:2e:db:2e:98:45:8b:35:6c:2e:6b:aa:be:49:6f:
63:ed:86:58:7c:33:ff:45:f5:a8:ae:ce:09:7c:f5:
a2:ff:51:15:10:2c:05:a5:e2:92:0d:7a:b9:af:2e:
a8:14:a0:0a:4d:82:b0:8e:82:df:b7:4a:d9:a3:79:
3d:63:ef:86:8a:43:e6:73:0c:36:32:fb:e1:3c:6d:
5f:b7:71:8e:0e:a1:5f:95:84:17:70:10:c8:41:05:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0A:83:84:03:DB:50:F6:0F:E1:F9:43:0F:75:7F:2B:7B:1E:1B:69
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgqDhAPbUPYP4flDD3V_K3seG2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.1.0/24
151.242.7.0/24
151.242.12.0/24
151.242.20.0/24
151.242.29.0/24
151.243.202.0/23
Signature Algorithm: sha256WithRSAEncryption
86:25:be:d8:24:d8:01:e8:ed:ce:af:76:45:59:ff:5a:49:e7:
56:bd:6e:d3:88:57:c4:73:f6:91:c8:6d:86:54:47:9e:8b:04:
40:06:13:c0:9d:f2:bf:4a:3f:be:ee:a7:1e:e2:0e:28:39:8e:
e4:bf:0d:e3:74:ae:eb:5d:9a:4c:7d:18:cf:1b:c5:af:17:82:
b7:ef:fa:1e:b8:ad:2c:77:ee:cc:35:51:b8:c6:e9:a7:a9:64:
c5:5e:69:02:ed:e6:4e:75:78:71:af:ce:e7:5d:f5:c6:fa:c9:
13:cc:55:e0:24:ae:91:51:3f:ac:11:1a:3c:48:d7:0b:19:2f:
28:66:2d:7e:36:7d:2f:6d:67:6b:91:90:60:0b:95:6f:60:94:
08:99:ec:b4:44:0d:85:46:6d:4b:2c:26:51:b1:c7:0f:98:07:
cd:47:1f:02:71:28:24:89:6b:93:08:be:e2:34:ae:bb:c6:5f:
1e:e0:f0:1b:b5:60:3f:b9:ea:0b:12:76:cd:50:95:c5:06:b9:
78:9d:59:83:85:ab:b4:27:fe:0d:ee:30:12:b8:4f:19:07:70:
e9:ab:11:61:40:fc:2f:31:35:64:16:15:1c:c6:76:84:bd:04:
d6:16:68:60:7d:25:f4:72:cd:dc:8a:b4:01:db:25:58:cb:f7:
86:3d:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:24:56 2025 by rpki-client