Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_k1ExJVm7bPzUnBKSXk_eaLWRxU.roa
File: _k1ExJVm7bPzUnBKSXk_eaLWRxU.roa (raw, json)
Hash identifier: HZ58Y3ScsvLf8i6skVe6ZPbKOYmm7Uo0NIVH7Y1s6gg=
Subject key identifier: FE:4D:44:C4:95:66:ED:B3:F3:52:70:4A:49:79:3F:79:A2:D6:47:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197DF74CB59F6B633B7BCD40413382B58EC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_k1ExJVm7bPzUnBKSXk_eaLWRxU.roa
Signing time: Sun 06 Jul 2025 11:17:42 +0000
ROA not before: Sun 06 Jul 2025 11:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49592
IP address blocks: 151.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:74:cb:59:f6:b6:33:b7:bc:d4:04:13:38:2b:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe4d44c49566edb3f352704a49793f79a2d64715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:c8:36:44:e5:3d:b7:6b:26:e9:e2:36:50:
b5:07:4a:f7:2d:3a:b1:fa:36:50:29:df:51:4a:ba:
81:4a:61:96:17:a3:92:be:64:6f:3e:d0:af:3a:b4:
a5:b2:96:bc:a9:8b:8b:57:9b:95:cc:25:09:62:d0:
24:0a:cc:a7:b5:14:bf:57:9d:20:8d:b8:57:a1:89:
50:90:1e:32:ad:b3:f9:7a:f3:26:12:a9:b9:c8:cf:
1f:37:da:37:26:a9:d7:0f:ce:37:e5:f1:f3:9d:1e:
ad:d8:bb:c8:87:fd:86:18:9b:69:32:c4:34:bd:bc:
32:18:77:1b:74:7d:15:9b:4e:f0:e7:a8:8f:ab:db:
2c:4e:49:ea:f6:7c:d5:1f:72:33:13:8b:7d:fc:df:
64:0a:90:e0:4f:a3:53:ba:5d:f3:16:23:5f:1d:c9:
d9:c9:e4:54:82:be:85:46:46:a7:64:9f:9f:bd:01:
56:63:9b:25:f1:54:50:48:45:4a:b9:da:09:4b:37:
8a:8f:8f:38:e6:9e:96:79:fa:aa:e2:51:07:40:ad:
a8:43:57:cb:54:aa:d4:56:b2:2e:9b:68:f5:c2:80:
92:b6:6b:3c:e2:61:d2:8c:be:35:7c:1b:03:0c:74:
2d:7d:db:90:28:af:cb:53:30:f3:9a:e7:01:b1:2d:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:44:C4:95:66:ED:B3:F3:52:70:4A:49:79:3F:79:A2:D6:47:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_k1ExJVm7bPzUnBKSXk_eaLWRxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d7:00:cb:d9:84:7c:15:51:c1:12:7d:98:41:3c:1e:af:cf:
be:46:76:69:04:f6:8d:48:cb:cf:d0:d9:99:a8:1d:d5:d4:9c:
73:35:d8:a5:6c:7a:bb:b9:1d:5e:27:8c:3b:e6:57:10:60:ec:
ee:a0:c0:8e:0c:ab:85:3c:fe:27:63:ee:54:b5:7e:26:e2:48:
f2:bb:67:e9:0a:94:97:73:01:9b:a6:38:42:93:12:4b:2d:91:
5b:3a:f8:1b:36:35:5d:a1:e9:5c:5a:99:95:c0:4c:c8:ac:b6:
22:be:eb:8e:81:57:ae:4d:07:1b:19:05:89:a3:5e:d5:9c:15:
c3:e6:8c:c0:42:c4:2d:51:b3:d3:91:dc:76:f3:41:cd:9d:76:
da:a4:2c:73:2b:89:81:d8:74:4d:34:d4:33:6d:84:dd:d1:91:
0a:87:d7:82:af:d7:72:0f:72:cb:cd:62:cd:8f:be:e1:92:69:
30:e8:cf:b9:b1:6a:9a:25:f7:90:c4:58:9e:c8:82:4c:f3:78:
f7:c9:46:9b:8f:63:91:4b:b7:56:18:70:0f:d0:73:c8:cb:ed:
3c:1b:1e:81:50:a0:70:e8:e2:43:ca:f7:0e:db:09:58:17:09:
45:d3:e0:d6:dc:26:88:5f:18:7e:09:86:fd:25:34:33:af:48:
77:76:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:34:03 2025 by rpki-client