Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FzWxhm2gepP-C92nuo3mrzl_6iI.roa
File: FzWxhm2gepP-C92nuo3mrzl_6iI.roa (raw, json)
Hash identifier: cMMQNLb5a8EvBRSJ3Er0WQb3MxB8n6aSQMnELAUZ6Ag=
Subject key identifier: 17:35:B1:86:6D:A0:7A:93:FE:0B:DD:A7:BA:8D:E6:AF:39:7F:EA:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019821C26A5138CF4FE5C6212BA7633A3D02
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FzWxhm2gepP-C92nuo3mrzl_6iI.roa
Signing time: Sat 19 Jul 2025 08:17:25 +0000
ROA not before: Sat 19 Jul 2025 08:17:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64457
IP address blocks: 151.242.111.0/24 maxlen: 24
151.242.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:21:c2:6a:51:38:cf:4f:e5:c6:21:2b:a7:63:3a:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 19 08:17:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1735b1866da07a93fe0bdda7ba8de6af397fea22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:dc:28:29:5e:ce:9b:0a:b5:ba:b9:f1:55:
09:df:c5:7c:78:ff:83:48:44:d5:33:dd:1d:2f:61:
ba:4e:fd:c5:b3:f4:72:80:c5:71:e4:ab:0f:c4:ec:
f0:38:fc:82:4b:a9:84:93:b3:ff:ef:3f:34:2b:3e:
7d:f1:65:4c:bb:5c:34:2f:6e:67:72:fa:c4:cf:b6:
73:b7:ec:97:04:71:75:e5:14:d0:23:20:18:6d:af:
75:22:e1:39:9f:68:9c:d5:f2:ae:43:d9:22:55:a1:
13:2d:7b:e5:f4:31:da:1b:97:02:1d:6a:60:b5:3d:
4d:81:03:b6:e4:ca:71:b2:15:15:39:ae:4d:b9:12:
34:ca:65:78:64:73:94:c7:3e:1b:8c:59:e6:a1:35:
53:64:c0:ef:54:37:cc:38:8b:dc:3a:34:03:24:7c:
dd:99:76:9c:31:84:5d:91:6b:65:a0:1b:11:8e:a4:
fa:8d:4e:25:49:c0:b8:e4:d6:8e:80:bb:1b:7c:f1:
3a:e3:09:81:68:79:12:f5:41:4c:04:03:18:f5:77:
b0:89:f1:98:29:2d:97:03:43:32:e3:1c:f5:82:40:
e0:03:6c:40:3d:84:c8:28:07:75:4b:c2:69:cd:b0:
b9:88:4d:91:c9:81:ac:10:df:28:b6:64:92:f4:0d:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:B1:86:6D:A0:7A:93:FE:0B:DD:A7:BA:8D:E6:AF:39:7F:EA:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FzWxhm2gepP-C92nuo3mrzl_6iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.111.0/24
151.242.144.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7d:7c:02:05:3a:85:2c:fd:54:33:07:33:17:98:52:c2:b1:
fc:48:5c:dc:56:35:2e:31:35:c6:53:98:30:3a:9b:20:41:cd:
16:c9:6c:54:5e:89:c1:00:cc:a7:9e:c5:00:d7:a3:ee:bd:1a:
fb:b4:05:35:68:47:1a:53:ce:4d:5d:a4:13:17:77:bf:f9:33:
29:49:c6:a7:04:14:22:18:5f:57:18:0a:08:5e:17:1c:73:da:
24:99:43:81:10:86:8e:c5:69:ab:e1:8e:af:6b:28:cc:27:33:
6a:2a:68:4a:7c:11:27:51:b0:01:8f:6e:a5:ca:84:d1:26:ff:
8f:d6:5e:72:e8:16:79:ce:cc:87:3f:d0:c3:6b:a9:e5:e4:17:
09:8d:5c:6c:86:67:d4:66:9e:66:26:3d:c0:23:a9:dd:b6:ad:
96:07:ee:c6:14:e3:a9:67:c5:67:90:58:1c:84:d8:74:12:e3:
96:f9:f5:dc:11:d1:76:f0:98:89:ce:25:1d:51:fa:a6:c3:00:
3a:36:cd:d6:40:fb:96:57:e0:c7:ed:e1:95:e5:cf:07:ee:5d:
57:c1:ef:73:74:29:46:f5:ce:45:54:14:ed:24:1a:b2:76:d5:
b9:c7:9e:b8:98:82:d4:31:44:86:72:ee:63:22:f1:e2:5d:eb:
7d:00:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:43:06 2025 by rpki-client