Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b0rvaZiex0y1ejMb_VhsqDV1Q90.roa
File: b0rvaZiex0y1ejMb_VhsqDV1Q90.roa (raw, json)
Hash identifier: KSr8x9vL7A2UgzL7g/THBn0Qx+fK2Ro/xpVoBWRWgj8=
Subject key identifier: 6F:4A:EF:69:98:9E:C7:4C:B5:7A:33:1B:FD:58:6C:A8:35:75:43:DD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01982C12CD41D15DEBB692788B59768D339C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b0rvaZiex0y1ejMb_VhsqDV1Q90.roa
Signing time: Mon 21 Jul 2025 08:21:26 +0000
ROA not before: Mon 21 Jul 2025 08:21:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 151.245.109.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:12:cd:41:d1:5d:eb:b6:92:78:8b:59:76:8d:33:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 21 08:21:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f4aef69989ec74cb57a331bfd586ca8357543dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:1b:dc:9d:e2:8b:68:fd:22:ae:26:26:88:
ef:98:53:81:96:9a:0e:e7:09:68:90:fa:84:83:3a:
58:14:a6:0e:b9:b1:42:44:97:f4:1b:08:8b:c2:fe:
bc:2d:b6:be:0c:43:57:45:9f:55:c5:29:d9:92:f2:
e9:cb:67:e3:a5:34:a0:3f:6e:ae:37:63:63:81:00:
5c:f6:9e:c3:02:ed:df:4e:50:0b:f9:15:a7:97:60:
de:7f:38:d4:23:2a:19:62:ab:e8:d5:b9:67:42:3b:
6e:0f:08:2d:70:42:97:34:db:b3:20:e6:03:93:bc:
dd:fc:a4:b8:9e:b3:6a:fd:8f:08:d1:40:dc:80:5d:
4c:c2:ff:c3:07:92:33:6c:c2:12:9a:ee:28:a3:c2:
11:4f:86:b3:2d:0d:0d:a9:e7:bb:b3:f0:f6:1b:a0:
9a:73:a3:e3:48:c4:2c:36:21:87:bf:3e:c0:c8:95:
82:f2:c6:a2:31:b6:50:22:99:d7:ae:ef:d2:b4:4d:
30:b4:78:ec:a0:0d:19:c0:29:9d:5e:9a:f9:57:f4:
7e:9b:0e:89:9c:c7:41:64:4d:ff:3c:72:b3:0f:c2:
45:8a:d1:5c:b3:11:5a:9b:5a:00:a1:07:49:5d:11:
cf:07:12:11:42:5d:0b:e7:62:ff:25:ea:29:f5:69:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4A:EF:69:98:9E:C7:4C:B5:7A:33:1B:FD:58:6C:A8:35:75:43:DD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b0rvaZiex0y1ejMb_VhsqDV1Q90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.109.0/24
151.245.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:57:87:2c:9d:71:74:0f:0b:ed:3e:9b:7b:52:c8:f3:f4:79:
77:7c:b1:5b:53:4d:cc:32:14:7f:24:da:1a:58:2d:9a:d2:66:
00:3f:d9:6d:5e:40:b4:5d:18:f7:a6:15:06:0c:31:e3:74:73:
37:23:bf:f6:cd:a3:11:ca:c7:c9:cd:e3:db:f9:87:88:d9:81:
40:86:a6:38:21:83:54:af:83:85:05:6c:3c:00:c2:53:1f:ad:
5d:44:6d:dd:39:d6:53:a0:4f:32:86:b0:e9:4a:0e:dd:41:03:
38:87:4b:3a:a8:08:b3:3e:2c:41:9a:37:df:6a:f3:6a:9d:1c:
13:6a:91:47:b5:83:6c:79:de:46:e4:6d:a3:8e:09:11:a3:a7:
5d:aa:13:26:e0:a0:88:b0:81:36:46:01:81:9a:cb:e8:77:28:
20:0c:81:19:b0:03:70:dd:f7:86:f7:7f:94:6e:c9:d4:5e:4e:
ff:9c:51:f8:13:25:8f:95:a7:40:c5:fd:90:04:ef:e0:af:c7:
b6:6b:43:4a:bd:37:77:40:50:32:33:81:55:3d:2e:98:21:81:
5f:ed:4f:00:eb:99:59:78:ce:6b:88:e3:39:d1:b6:1d:2c:be:
7c:5e:42:ac:df:2d:28:d6:50:fa:95:99:fd:7e:d5:db:93:f1:
04:a5:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:27:38 2025 by rpki-client