Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qEo82Uq7hD1yvCiSlL2SkfKELQY.roa
File: qEo82Uq7hD1yvCiSlL2SkfKELQY.roa (raw, json)
Hash identifier: 6Rr4LwFLoPYrd4rPM0vVZsRu7TAefiN0HozfvJclsTU=
Subject key identifier: A8:4A:3C:D9:4A:BB:84:3D:72:BC:28:92:94:BD:92:91:F2:84:2D:06
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01981D4EB9DF9BA747A922A576B92CE7D8C2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qEo82Uq7hD1yvCiSlL2SkfKELQY.roa
Signing time: Fri 18 Jul 2025 11:32:35 +0000
ROA not before: Fri 18 Jul 2025 11:32:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 151.243.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:4e:b9:df:9b:a7:47:a9:22:a5:76:b9:2c:e7:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 18 11:32:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a84a3cd94abb843d72bc289294bd9291f2842d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:28:d6:d7:01:44:4f:15:35:f4:7c:e1:13:
02:36:96:43:6f:42:72:c4:26:0b:66:e8:fb:bf:c5:
80:ed:8c:92:6d:63:e0:59:41:b3:dd:74:bc:d5:5b:
28:78:08:c5:ea:b3:df:ee:6b:6e:ec:79:38:ac:a3:
21:15:12:75:61:a9:f0:e5:4c:57:74:16:83:fd:31:
50:93:a2:2f:f8:4a:d1:a4:91:13:36:cf:31:2f:a7:
ee:0a:f4:dd:21:17:e1:fc:15:f2:3d:82:84:b9:11:
9f:13:8d:81:55:4c:62:e7:f1:fe:be:c4:e3:50:73:
a2:ec:d2:44:f1:a5:d8:e4:5f:6c:57:9f:3b:ff:a3:
25:1b:68:87:95:01:df:df:fb:72:aa:a5:17:7c:04:
b4:ca:ba:27:06:6b:27:5a:cb:61:21:c9:2e:6e:ff:
7b:51:da:12:d9:59:17:f6:aa:6d:a2:b1:40:25:48:
47:63:9e:27:99:dc:1d:e6:2d:0d:a3:99:95:c6:8c:
97:39:84:e1:2a:6a:d8:3a:43:da:fb:14:c7:b4:03:
12:99:77:90:a7:83:80:ed:c3:d6:eb:81:29:2a:b0:
12:e7:92:37:67:62:77:79:b0:bc:57:f9:08:cc:2d:
b9:2a:81:3d:1e:4b:76:59:c7:c9:cc:4c:7f:e4:27:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4A:3C:D9:4A:BB:84:3D:72:BC:28:92:94:BD:92:91:F2:84:2D:06
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qEo82Uq7hD1yvCiSlL2SkfKELQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:f5:8f:4a:43:99:c7:0c:1d:cc:52:23:fd:44:51:be:f2:3b:
5c:29:b4:b7:c6:55:d5:bb:63:9f:aa:8c:ad:2e:4d:ec:dd:73:
be:10:0a:35:e8:10:43:6d:34:ae:f9:22:f9:77:e5:e1:d1:6e:
45:39:9e:a8:fa:e9:08:c7:27:f3:91:46:5c:c3:23:f8:d8:73:
84:20:e6:90:7e:77:4a:85:aa:81:ef:ac:9a:82:8a:81:94:0d:
50:fe:b3:fb:eb:5c:22:3e:7e:4e:6f:9f:76:dc:e4:cd:2c:74:
d7:c9:84:dd:69:ce:ca:8c:99:4d:0e:73:2d:91:c9:14:91:69:
3e:f2:b9:bd:77:cf:f2:95:32:9c:b2:da:e3:db:5e:ab:16:e8:
d3:dd:81:15:2e:5f:8e:f0:4c:63:43:b8:fd:e2:90:9c:bf:5d:
00:2a:59:15:1a:dd:d5:09:d5:31:af:e5:ff:b0:37:60:43:e1:
c1:24:a7:c2:73:50:c0:c4:69:0d:69:10:c3:0f:b3:ba:3a:9a:
76:2f:65:39:d1:2b:ca:22:f5:57:d4:9e:03:16:9b:82:9a:fe:
a8:34:2f:af:53:89:c2:84:8e:fe:aa:4e:22:ed:55:c6:2e:12:
4f:ce:54:f5:ba:2c:0f:11:a9:36:7d:fe:bf:70:64:ec:26:f1:
50:6e:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:49:05 2025 by rpki-client