Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P3IZuZtAFsUA4jXHNpYivLUvp-A.roa
File: P3IZuZtAFsUA4jXHNpYivLUvp-A.roa (raw, json)
Hash identifier: d4IpRu4AwNJFdBgtwpQdemVXE44gmSqDXGASkMFSQ6Y=
Subject key identifier: 3F:72:19:B9:9B:40:16:C5:00:E2:35:C7:36:96:22:BC:B5:2F:A7:E0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FDFC23FE6B5F0C1E36E5F155E4496014
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P3IZuZtAFsUA4jXHNpYivLUvp-A.roa
Signing time: Sat 12 Jul 2025 09:34:09 +0000
ROA not before: Sat 12 Jul 2025 09:34:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 151.242.89.0/24 maxlen: 24
151.242.122.0/24 maxlen: 24
151.242.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:fc:23:fe:6b:5f:0c:1e:36:e5:f1:55:e4:49:60:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 12 09:34:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f7219b99b4016c500e235c7369622bcb52fa7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:ca:45:42:af:cc:4a:88:4d:86:ee:4d:54:
29:be:c8:3e:35:29:79:c7:27:08:1a:45:f2:0c:74:
3d:6f:a2:84:4a:51:04:8a:7b:37:e1:e0:31:b1:42:
2e:fd:84:77:4e:6a:bc:ef:1a:e2:8c:8a:18:16:e1:
2d:c3:5c:3d:a2:e0:f4:c7:31:aa:78:af:a5:fa:23:
2e:61:58:43:8a:d0:64:3b:77:ac:27:59:1e:e8:b3:
1e:db:9e:b8:e5:a4:66:57:3d:6a:34:08:42:4c:8d:
bb:71:fe:97:6d:42:1b:52:47:1b:e2:60:c6:27:10:
93:ff:67:81:29:25:69:9a:ca:95:83:a1:ef:82:4a:
01:28:0a:c1:7b:f0:4c:10:f0:67:59:3d:d0:78:26:
d3:a5:e2:26:24:bf:24:f9:61:17:23:5e:e7:0f:88:
d7:07:92:a8:3d:f7:9e:b4:a6:26:c2:64:64:7c:4d:
35:8a:01:ea:ef:22:e4:fa:6c:49:0f:0e:1c:a5:ee:
47:ee:16:ef:cd:2c:86:76:78:70:4e:cb:c7:52:51:
9e:90:74:8f:77:74:6b:f2:11:f9:98:2c:06:73:4a:
93:50:aa:af:01:85:e5:bc:6c:e4:49:09:23:bb:26:
6f:91:8d:9a:e9:03:93:e4:17:6d:00:5d:45:ec:74:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:19:B9:9B:40:16:C5:00:E2:35:C7:36:96:22:BC:B5:2F:A7:E0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P3IZuZtAFsUA4jXHNpYivLUvp-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.89.0/24
151.242.122.0/24
151.242.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c8:32:f5:30:68:ae:b9:87:69:41:6e:49:a2:82:f5:63:19:
01:d1:34:e9:f8:6d:06:34:9b:ab:53:a6:74:78:95:e2:b1:0b:
af:33:75:7c:4e:0a:1e:0f:e7:2f:c2:70:cf:38:9e:a5:8a:b3:
c7:f8:b7:66:de:dc:49:b5:e5:e0:9b:fe:89:b5:16:38:9e:96:
0d:59:8a:a4:84:f7:9f:7d:70:7e:ba:dc:02:eb:bf:6f:f6:1f:
55:4e:ee:7f:1b:29:04:20:b3:ed:ae:2d:55:ce:d5:b7:f3:9b:
7d:55:dc:af:b8:59:f3:c8:2e:e8:89:ae:b5:ad:5f:de:dc:bc:
e7:2d:3d:cd:3c:e5:71:f0:fe:e4:4f:26:57:ac:33:c5:6f:60:
bc:de:63:62:e0:28:3b:fe:79:fd:1f:5d:64:6f:aa:dc:0f:70:
47:48:4d:41:c3:d4:38:16:b5:b5:a4:ca:6a:e2:4c:57:24:45:
e6:da:e3:40:09:7a:b4:a7:ef:52:ed:21:1c:61:6f:43:d4:ac:
c8:27:96:74:27:2b:ba:9e:7c:ad:43:cb:2f:41:3c:51:d0:27:
3d:32:03:08:26:28:46:ca:45:c2:29:66:ba:0e:14:99:fa:50:
a0:60:32:2f:ff:af:e8:6e:5f:75:a7:f6:4a:25:99:97:94:b1:
e7:cf:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:43:32 2025 by rpki-client