Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7lEl4vEwcCJ-O2_biGdraeeNwMM.roa
File: 7lEl4vEwcCJ-O2_biGdraeeNwMM.roa (raw, json)
Hash identifier: N4E6/JFNQzY7r7UvZdPVLa8+BJIDKZci5+PWkMzqNAM=
Subject key identifier: EE:51:25:E2:F1:30:70:22:7E:3B:6F:DB:88:67:6B:69:E7:8D:C0:C3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198267BD57DF20BD63FF97443B64D993B82
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7lEl4vEwcCJ-O2_biGdraeeNwMM.roa
Signing time: Sun 20 Jul 2025 06:18:26 +0000
ROA not before: Sun 20 Jul 2025 06:18:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 151.242.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:7b:d5:7d:f2:0b:d6:3f:f9:74:43:b6:4d:99:3b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 20 06:18:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee5125e2f13070227e3b6fdb88676b69e78dc0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:ad:b5:11:20:cf:9d:a4:a4:78:6f:27:e9:
5c:0e:f0:0d:32:fb:ac:53:86:21:18:bd:48:ec:69:
e4:d8:e5:b9:e7:0f:2b:0d:59:10:02:eb:d4:93:6a:
cf:66:44:ee:49:d4:42:d6:d2:36:f2:4b:fb:31:21:
e9:b1:bb:b5:4e:27:cc:d5:8f:f4:f3:bc:ea:79:b1:
73:f3:f9:55:b9:b3:fa:6b:e4:09:55:9d:b7:e5:56:
b9:80:2b:18:f3:ff:91:fc:cf:e1:43:b3:45:ea:a5:
4b:33:27:9a:04:06:69:c2:65:d2:88:5c:02:aa:68:
17:7e:3d:3f:43:af:e5:75:16:d8:3e:15:26:95:4d:
97:eb:4c:d4:63:63:8e:5d:1f:82:21:fa:3b:63:27:
c5:e1:5a:3a:c3:b2:a0:ad:fe:a5:5b:d2:fa:71:85:
6f:fe:27:25:b2:76:3a:be:e5:a4:86:69:6a:0a:99:
d9:94:8d:8a:dc:8b:bd:ee:d8:78:52:60:d5:e7:59:
cf:79:b1:06:71:32:eb:f1:b2:01:f3:33:46:8f:36:
3a:3d:41:c9:f4:2d:59:c8:82:ec:8f:30:bf:cd:a5:
89:55:6f:fb:86:7b:3e:b1:c5:36:a2:43:15:6f:1a:
e8:0e:4c:bb:77:e7:d1:b7:2a:ee:9c:46:55:81:e2:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:51:25:E2:F1:30:70:22:7E:3B:6F:DB:88:67:6B:69:E7:8D:C0:C3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7lEl4vEwcCJ-O2_biGdraeeNwMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.137.0/24
Signature Algorithm: sha256WithRSAEncryption
09:52:25:ea:43:8a:0a:7c:fe:59:4b:69:ea:2a:78:80:f6:b8:
b2:b6:f4:ba:c3:59:82:52:60:fd:8d:23:27:37:92:86:60:73:
6b:e1:d5:67:a5:4a:f6:23:fb:ef:6b:41:84:6d:1a:36:80:d1:
0d:6c:8d:96:40:3e:ce:d9:b5:c0:fa:7e:03:31:57:c9:6a:65:
72:e9:65:a9:3e:bb:b3:55:a4:d7:52:a7:8b:6f:b5:26:57:1d:
43:72:a5:a1:a8:8b:73:59:16:1e:84:e0:9b:13:fd:96:f9:ed:
88:aa:e3:ed:9e:4e:6b:c3:92:29:37:98:4e:0c:3e:d6:1a:36:
12:27:00:8e:fd:03:01:0b:10:aa:f1:8a:30:de:30:05:5b:5f:
d6:26:89:32:90:43:8d:79:0e:e6:94:ce:7e:c8:7a:34:32:42:
b6:c3:02:7e:4c:0d:59:1b:b1:b7:fc:ed:ba:a0:d9:8b:06:57:
ef:6c:af:9e:d9:f8:2c:cb:f4:1c:b9:8c:8b:b7:b0:b3:4d:2f:
1c:71:da:b1:3f:de:29:f8:13:57:f1:ac:6a:10:95:d4:42:98:
9e:9c:4b:4a:d5:d7:30:78:d9:16:cb:8d:56:38:ad:33:1e:f1:
4d:50:c2:2b:c5:15:4a:ab:b9:5a:9f:e4:13:15:1e:21:9b:61:
4d:c5:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:41:33 2025 by rpki-client