Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-RqcJg7CPQczzJC7-mE1vu0E0ws.roa
File: 1-RqcJg7CPQczzJC7-mE1vu0E0ws.roa (raw, json)
Hash identifier: vVDau3v79o+7mIPVc4wScjWLo5vL4wzUqL7sDyxEHcY=
Subject key identifier: F9:1A:9C:26:0E:C2:3D:07:33:CC:90:BB:FA:61:35:BE:ED:04:D3:0B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D4A7E861314BB47960545CC79B2E2E39
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-RqcJg7CPQczzJC7-mE1vu0E0ws.roa
Signing time: Fri 04 Jul 2025 08:57:43 +0000
ROA not before: Fri 04 Jul 2025 08:57:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 151.242.106.0/24 maxlen: 24
151.244.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:a7:e8:61:31:4b:b4:79:60:54:5c:c7:9b:2e:2e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 4 08:57:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f91a9c260ec23d0733cc90bbfa6135beed04d30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:c6:2a:a3:5c:2b:a8:88:74:f7:7c:4e:a2:
f3:80:07:46:dd:10:a9:7f:ea:a2:d4:20:55:d7:18:
bd:bd:be:5d:43:f1:64:fd:8a:31:e1:10:0d:4a:dd:
77:5a:d1:34:43:b7:25:b9:19:79:24:99:78:ee:0a:
8b:bd:ef:df:31:ea:2d:bb:c1:bb:58:fe:f0:fd:ce:
0a:2f:9d:1f:e5:b0:75:0d:a7:8d:46:b6:8d:db:f7:
6b:39:08:ad:97:24:fb:28:82:0f:aa:13:f0:39:9e:
cc:8b:33:ae:31:6c:33:29:92:5c:5c:26:12:2a:21:
94:bf:ff:43:94:75:1e:09:db:dd:1a:fd:03:99:5f:
d9:29:13:7b:ce:58:21:e8:89:e9:32:df:a0:92:26:
a4:2b:3a:be:7b:6e:79:71:7c:f1:7e:5b:dc:03:07:
35:d2:0e:e6:17:f9:99:ce:ca:f4:02:4f:1a:40:6c:
0c:d6:67:dc:15:65:64:96:11:d5:13:8c:bb:5b:6a:
44:d0:f9:a7:9c:72:dd:14:31:9f:3c:b0:a3:73:3a:
1d:b6:f3:48:98:fa:d7:8d:70:e3:ee:3c:2f:67:7e:
b0:49:cc:3e:e3:c0:30:fe:10:1f:43:e2:9c:13:e7:
33:30:93:3c:cb:6f:33:c4:ae:02:ba:ff:44:db:4b:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:9C:26:0E:C2:3D:07:33:CC:90:BB:FA:61:35:BE:ED:04:D3:0B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-RqcJg7CPQczzJC7-mE1vu0E0ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.106.0/24
151.244.225.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4e:89:00:44:d0:d0:d4:c3:60:6a:73:5d:3e:41:fc:bc:5c:
66:76:dd:ff:65:6d:38:77:85:9c:3c:95:26:4a:2d:ef:5b:71:
10:cd:0c:0f:ea:7d:ec:e5:01:19:84:c6:0a:45:c1:58:d6:0b:
8c:03:60:5f:ac:ff:ba:bd:cb:c2:89:d2:ef:77:75:23:af:6e:
b4:dd:8f:fe:80:42:3d:61:d7:50:df:ec:44:79:87:d0:90:8d:
fb:56:c4:41:d2:9a:15:46:c4:2f:d4:e6:22:84:17:c6:61:f2:
64:31:fe:83:92:12:1e:5d:1c:40:54:8e:0c:ba:da:bf:4b:b9:
03:d6:01:e7:b5:9d:12:2a:95:5d:be:46:e2:12:16:c0:61:c0:
cc:9a:37:36:2b:3c:99:b7:de:8c:60:d0:7e:31:b5:61:03:e5:
60:10:52:ab:53:67:27:ba:5f:f7:7a:2a:2b:2c:e1:cd:bc:97:
3b:46:f6:c7:66:4f:01:05:67:8f:f1:1b:19:78:25:f2:da:5e:
24:9b:09:4e:4f:ab:29:db:28:6a:56:fa:61:1d:68:7b:0d:4c:
e0:52:f4:20:63:d2:51:e1:06:95:f7:04:b9:e8:6b:5d:9b:fe:
b4:e7:b4:45:68:15:38:95:91:c0:2b:b9:4d:5c:44:ae:38:dc:
3a:16:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:28 2025 by rpki-client