Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLGrXPTc4R0k9yh01sAPo8PgtSc.roa
File: jLGrXPTc4R0k9yh01sAPo8PgtSc.roa (raw, json)
Hash identifier: dkZ6XKEY7pfVzCpsg+z6JIWxnKIbUENPu9qa3Q0auhc=
Subject key identifier: 8C:B1:AB:5C:F4:DC:E1:1D:24:F7:28:74:D6:C0:0F:A3:C3:E0:B5:27
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FA88A7CA1BDD0417BD04A3DF20B6C538
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLGrXPTc4R0k9yh01sAPo8PgtSc.roa
Signing time: Fri 11 Jul 2025 17:29:09 +0000
ROA not before: Fri 11 Jul 2025 17:29:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 151.242.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:88:a7:ca:1b:dd:04:17:bd:04:a3:df:20:b6:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 11 17:29:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb1ab5cf4dce11d24f72874d6c00fa3c3e0b527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:e5:b3:96:41:a1:bc:c0:84:d9:90:9e:32:
c1:04:d3:2b:1f:9b:9d:ce:42:c9:86:87:23:32:0d:
30:fd:e3:67:dd:be:c2:81:6e:15:a0:e3:01:36:78:
39:22:a4:1a:27:b7:7f:34:ef:36:a2:78:84:45:39:
45:28:53:9c:0c:f0:51:84:e8:f5:14:cc:f6:b7:c1:
14:eb:9a:2b:f3:af:bc:cb:06:98:e5:cf:7f:fa:9e:
68:db:fc:45:cb:7f:8c:8c:1a:bf:ff:8c:3f:30:36:
48:db:b8:02:58:c7:3a:5a:53:fc:97:b4:3e:29:1b:
7c:c8:6f:15:6e:1a:59:dc:86:8d:de:60:74:dc:94:
fe:18:bf:20:44:7d:6d:b1:76:ed:a9:1e:a0:21:ff:
93:bb:a3:80:8c:6b:3c:f0:3b:c9:52:96:7a:2a:e9:
e9:62:00:f2:3f:d2:4b:5d:92:e6:e5:ed:3d:38:e4:
bb:5f:84:eb:ad:3b:26:c2:2b:97:fd:cb:cf:a0:55:
55:04:e3:c6:ed:92:61:11:62:46:3d:9a:56:ad:02:
93:f3:ff:57:28:d6:4d:d1:be:ba:9c:f8:c6:56:b0:
85:cc:57:3b:b7:b0:54:2c:3f:98:fa:ea:0f:22:9a:
2b:3a:cf:0d:57:4b:d5:7e:af:fa:27:91:47:77:86:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:AB:5C:F4:DC:E1:1D:24:F7:28:74:D6:C0:0F:A3:C3:E0:B5:27
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLGrXPTc4R0k9yh01sAPo8PgtSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.75.0/24
Signature Algorithm: sha256WithRSAEncryption
35:79:74:6e:60:97:44:de:b7:d1:f6:7a:35:ef:b7:80:dc:70:
b3:5a:46:aa:4f:c9:2d:ea:f3:e0:e8:df:9d:a0:c1:2d:30:5e:
0b:0d:3d:ed:b7:b8:8b:39:bf:f8:df:19:e5:fe:89:9c:6b:b5:
c0:b4:5b:44:8d:9e:50:68:9c:a9:71:3e:d0:c8:1e:78:0a:7f:
fb:9b:78:27:54:00:24:30:54:44:b2:23:d0:bd:f2:55:09:35:
58:15:68:21:f3:2d:9a:b0:14:01:50:ef:fd:e7:51:5e:76:00:
08:5b:2a:b7:07:ab:39:ba:cd:ee:cf:b8:10:4a:c5:fd:6c:a6:
3b:ce:06:dc:11:78:60:44:70:01:3a:bc:8a:42:23:91:e4:e8:
46:c7:c6:1b:ff:75:77:57:8d:cd:fa:e6:15:fd:81:eb:bb:b7:
7c:b9:25:2f:11:e6:f1:24:22:33:10:18:f1:62:50:6b:13:00:
61:ff:d2:6b:ce:84:1f:2d:88:ef:15:a9:0e:a7:3a:c1:16:51:
13:3a:b2:d6:96:97:9d:37:9d:cf:4b:6c:c5:bf:48:71:17:30:
3b:d5:96:13:59:27:f8:4d:ee:22:68:5b:92:95:35:d8:8a:0a:
85:40:84:28:54:6d:9c:9f:03:04:c5:1a:32:b5:d7:ce:40:0a:
56:74:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:46:34 2025 by rpki-client