Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cvTzxvHtCvFRIMaIlFPdXmJwEYg.roa
File: cvTzxvHtCvFRIMaIlFPdXmJwEYg.roa (raw, json)
Hash identifier: Urcgs1oB0O/btjF2kDbf9S4KGTzJsPh8JNOk81b3Xfg=
Subject key identifier: 72:F4:F3:C6:F1:ED:0A:F1:51:20:C6:88:94:53:DD:5E:62:70:11:88
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01946EDEDC469074C982452C38BDE27CF6D3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cvTzxvHtCvFRIMaIlFPdXmJwEYg.roa
Signing time: Thu 16 Jan 2025 11:28:06 +0000
ROA not before: Thu 16 Jan 2025 11:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20454
IP address blocks: 151.243.136.0/22 maxlen: 24
151.243.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:de:dc:46:90:74:c9:82:45:2c:38:bd:e2:7c:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 16 11:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72f4f3c6f1ed0af15120c6889453dd5e62701188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:b3:98:35:e3:6d:83:c3:c0:58:97:03:37:
2e:de:8d:b9:a8:2a:84:b9:90:80:31:c3:d6:0b:e3:
68:b0:af:e5:73:b3:7f:fb:fd:35:e9:ba:ef:39:25:
95:78:fb:f2:55:bf:e2:57:8a:e8:93:84:e0:86:87:
c6:88:65:8a:7f:66:7b:59:a5:f8:65:19:4b:8a:e1:
00:42:60:94:ad:0f:6d:d4:00:7c:1c:a1:d4:22:8a:
92:72:53:ac:b6:52:ef:8b:eb:0c:8d:10:eb:d0:bf:
3f:d2:73:f7:56:e6:6d:3c:96:dd:4c:01:ff:2f:99:
c5:83:8e:84:42:c5:42:b4:3c:de:19:9b:22:32:1a:
a7:48:55:85:da:13:11:b4:9a:6b:58:97:ed:66:3e:
42:3f:5d:6c:c4:3b:fa:3a:0d:a0:76:60:02:1e:de:
af:16:09:3d:59:5e:55:63:ed:6b:08:6d:8e:69:eb:
93:cd:f0:8f:78:1d:32:31:da:4d:f0:c7:4d:eb:c3:
2a:ce:b0:c2:f7:a9:d0:5e:12:3e:56:16:32:81:ef:
87:e6:67:ea:b0:69:f3:d7:dd:41:e1:95:ec:54:e5:
88:c7:e4:03:9f:39:c7:08:78:04:11:07:10:14:6c:
66:4e:8e:e3:73:c1:0d:a7:79:21:eb:22:b5:fb:6b:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:F3:C6:F1:ED:0A:F1:51:20:C6:88:94:53:DD:5E:62:70:11:88
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cvTzxvHtCvFRIMaIlFPdXmJwEYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.136.0/22
151.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:f2:8a:b2:84:30:18:7a:ab:bc:6a:71:a3:31:1d:29:c1:90:
7d:3e:40:50:d2:dc:b2:93:3b:ba:96:c8:d5:41:97:0b:70:bc:
e0:92:51:20:8d:2c:98:80:bb:e7:2b:f2:a2:4f:b0:bf:f6:75:
38:b9:73:57:c9:f9:55:37:86:33:9e:75:a0:e9:c6:92:33:c5:
78:33:a9:00:b6:71:21:07:07:5a:3a:82:a7:4f:4f:fb:60:d8:
7a:e6:b4:43:ce:fa:58:ad:53:99:57:9b:4f:0b:8c:60:85:ee:
be:47:51:0a:74:72:aa:33:8d:39:f8:8f:84:61:da:db:b2:3a:
20:a3:54:27:e3:90:4f:26:fc:b0:9b:8c:dd:e5:2a:37:1c:7a:
5d:e6:f4:2b:4e:e2:99:70:9a:e1:28:fe:7b:84:bb:05:be:b0:
ac:86:2a:ba:8d:8c:0b:c8:c3:59:a9:ae:c7:e0:a8:bb:9a:79:
58:9f:00:f1:3e:c5:3b:97:9e:5c:ad:22:7d:d3:6e:97:6c:fb:
76:94:f0:67:bf:c6:8b:ee:50:ab:67:43:90:d0:31:1e:21:da:
5c:7c:da:1b:62:ad:51:5d:b7:b1:18:e8:8b:4d:6b:ed:ae:db:
b6:73:35:a2:8b:61:29:47:6c:01:d2:24:33:07:16:96:e3:0a:
cb:49:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:11 2025 by rpki-client