Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ax-yzu1oCusHn-CcwUqywOhlV3E.roa
File: ax-yzu1oCusHn-CcwUqywOhlV3E.roa (raw, json)
Hash identifier: vXUJpxRw7W/2wmSyKLLXlivlef+rhjCRxJWeHyP41aQ=
Subject key identifier: 6B:1F:B2:CE:ED:68:0A:EB:07:9F:E0:9C:C1:4A:B2:C0:E8:65:57:71
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D4A7E8FF4376ADDD447C40401B1B98FE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ax-yzu1oCusHn-CcwUqywOhlV3E.roa
Signing time: Fri 04 Jul 2025 08:57:43 +0000
ROA not before: Fri 04 Jul 2025 08:57:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150249
IP address blocks: 151.242.24.0/24 maxlen: 24
151.242.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:a7:e8:ff:43:76:ad:dd:44:7c:40:40:1b:1b:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 4 08:57:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b1fb2ceed680aeb079fe09cc14ab2c0e8655771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:2e:12:33:5e:66:d7:3e:fc:f0:bb:12:96:
8f:1c:20:cb:63:c1:90:da:5d:f3:87:b9:9f:4b:05:
11:ce:4f:69:3d:7e:c6:3d:00:f8:5e:12:55:49:c2:
c7:bc:53:da:f5:7e:58:dd:f8:fe:82:43:72:98:d4:
c6:e2:a3:5d:7c:f9:38:e0:eb:97:d8:d1:31:ff:bc:
37:14:1c:30:85:11:06:75:aa:d0:68:fe:37:9f:06:
ee:fa:11:c3:15:86:1c:40:77:fc:dd:d0:bf:e1:88:
e5:e9:21:f6:cb:b3:08:d0:f9:21:e2:03:4c:37:95:
49:3f:ea:ea:b2:bf:1a:1f:f5:96:5d:6b:5b:ab:ba:
2d:fc:fe:72:0e:2a:1f:ab:96:9f:21:fc:b2:35:9b:
0f:03:16:1c:aa:4f:f5:eb:05:e4:22:5a:d9:b0:aa:
da:b9:1d:48:c5:20:92:95:db:78:45:61:50:ba:5f:
18:a8:e6:ea:9f:12:fa:68:35:64:d3:77:22:8c:a5:
22:7f:30:c4:1e:51:3d:a1:8d:a3:c9:e4:37:ce:63:
87:ff:32:c5:ba:ea:ea:4b:d1:19:8f:f4:08:13:ef:
dd:39:c4:b8:be:b6:0f:f4:06:82:95:29:05:f5:22:
14:f4:b0:0a:38:a0:8f:ea:81:2a:90:e1:b6:7e:5c:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:B2:CE:ED:68:0A:EB:07:9F:E0:9C:C1:4A:B2:C0:E8:65:57:71
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ax-yzu1oCusHn-CcwUqywOhlV3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.24.0/24
151.242.204.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c5:f3:6b:05:e9:e1:15:4e:44:81:d7:61:85:5a:8f:ce:f5:
e1:90:d3:2d:ee:8f:7a:7a:ad:f0:38:2f:61:0c:95:60:ab:cc:
58:39:9f:9e:06:d1:9f:55:03:c4:60:a1:f0:b0:28:58:59:d9:
75:c8:11:cc:ef:f0:45:38:cb:d1:fa:ab:b8:b3:08:a4:b3:29:
53:14:f4:b6:77:87:7f:77:7e:8f:cc:1e:46:4d:24:6b:07:f4:
35:da:b3:10:74:c4:c7:8f:9e:87:65:2f:2f:e2:c5:7e:8b:16:
73:fb:f8:6c:a3:ad:3c:43:0f:ea:78:2e:f1:21:00:d5:c5:be:
e4:9b:08:fa:be:7f:29:c6:da:83:b6:7d:aa:69:ad:5f:6c:21:
98:33:a2:0c:ce:c1:d9:5d:6d:2c:f6:c8:c1:85:6d:90:55:76:
85:30:b5:c1:45:05:95:f1:d8:51:5a:0e:b7:68:58:e5:62:51:
5b:f8:41:45:c5:11:40:1b:01:3f:63:f0:ce:f2:ba:27:86:b5:
f5:24:05:3d:2f:63:02:d9:3c:6b:60:b9:59:31:b2:33:f8:ed:
35:b6:ab:cb:9b:a5:fb:30:b5:04:dc:87:e7:61:67:7a:15:8d:
54:87:52:68:33:32:b1:17:21:c6:5a:fb:54:8a:8a:3f:49:6c:
d4:dd:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:02 2025 by rpki-client