Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cPj8YrNAoCkUtMQygSylfhCStpo.roa
File: cPj8YrNAoCkUtMQygSylfhCStpo.roa (raw, json)
Hash identifier: +7fK2kByHsaHE+Jya3NeSiBgWZVJWc4H3uBcIj+Bj0o=
Subject key identifier: 70:F8:FC:62:B3:40:A0:29:14:B4:C4:32:81:2C:A5:7E:10:92:B6:9A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197E858497C747CD37F02440420B2EEBAB4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cPj8YrNAoCkUtMQygSylfhCStpo.roa
Signing time: Tue 08 Jul 2025 04:43:09 +0000
ROA not before: Tue 08 Jul 2025 04:43:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400175
IP address blocks: 151.243.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:58:49:7c:74:7c:d3:7f:02:44:04:20:b2:ee:ba:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 8 04:43:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70f8fc62b340a02914b4c432812ca57e1092b69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:d3:c2:77:c2:f5:d8:a6:6a:3e:db:0a:77:
b3:6e:23:56:bb:81:97:ff:b4:74:a0:0e:10:28:c6:
3b:aa:11:7e:ae:84:f0:61:68:d0:7f:fb:f1:a0:a1:
b4:b5:8b:f5:b7:52:98:e4:72:bc:0c:c6:2d:54:fc:
aa:7e:f5:fe:7b:a5:ec:75:79:56:31:95:33:56:9b:
c3:be:0b:83:94:57:7f:92:9a:6a:11:00:fc:8d:b1:
c2:de:b5:06:2f:05:54:21:6b:90:04:47:c1:67:88:
63:12:49:d4:ec:cd:fb:c2:8e:32:33:26:95:2d:de:
72:4a:17:44:bb:20:75:7a:c9:c6:d2:cc:58:ac:b2:
2f:3c:cc:f9:d0:c4:37:74:d5:93:fd:f5:25:85:9a:
7a:6e:90:df:7f:9b:f7:11:44:ac:df:90:1d:03:ce:
0e:52:f6:99:1f:9a:9e:0f:cb:8a:81:f1:c6:f4:57:
44:c4:96:35:54:14:ce:d7:32:e0:84:df:85:bb:ab:
63:c0:bf:9e:e9:7f:23:df:51:ac:04:b4:a5:da:64:
50:ab:25:85:ad:93:33:1f:4c:3a:a1:fc:18:02:92:
c8:f5:87:b0:3f:7b:59:6f:c1:92:89:63:4f:a3:fb:
cd:31:5f:e4:36:7a:2c:75:f5:e4:fc:a3:6d:9b:1d:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:FC:62:B3:40:A0:29:14:B4:C4:32:81:2C:A5:7E:10:92:B6:9A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cPj8YrNAoCkUtMQygSylfhCStpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.215.0/24
Signature Algorithm: sha256WithRSAEncryption
01:25:74:6a:c9:40:9d:a7:65:74:88:52:e1:12:de:2a:0e:81:
52:0f:e6:df:8c:66:dd:d0:95:72:1a:63:ea:41:ae:ed:d6:82:
ae:c3:c4:20:22:4b:0c:63:bb:92:5b:77:98:6a:5d:78:16:91:
16:e2:d5:6a:dd:70:0f:98:93:ca:82:4d:4b:f7:a4:2a:85:ea:
62:e9:d2:00:03:ed:88:71:f5:99:cd:e4:55:c9:23:57:27:45:
3d:97:06:d4:f2:31:87:80:d4:14:ca:b6:07:4a:2c:5c:8f:3d:
3e:1c:a9:90:b8:d6:d9:6d:d0:f8:6d:39:82:eb:a1:57:85:ed:
4c:44:8e:9e:06:02:a6:04:c4:ee:d8:08:be:02:b7:ce:0a:47:
c3:ea:80:c6:4c:ca:c1:ea:9d:ca:e6:ce:0f:5d:44:62:99:22:
12:cf:70:89:52:3c:fc:fd:c3:35:9a:9c:09:55:52:a3:6f:2a:
cb:fa:8b:0a:f9:a8:8f:3d:80:1b:81:cc:de:98:fe:05:26:c3:
15:f1:6b:98:45:38:aa:ac:a3:90:b8:67:59:bf:f7:94:8a:58:
2d:40:b0:10:c5:13:e1:b1:62:2f:c4:81:1e:60:4d:4e:69:71:
c9:5d:47:a2:3e:9f:b8:bd:f3:76:a2:db:2d:86:ca:24:9e:ed:
3f:7f:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:34:17 2025 by rpki-client