Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ucMIg0IFdxli08X6rQFlV7AWgjI.roa
File: ucMIg0IFdxli08X6rQFlV7AWgjI.roa (raw, json)
Hash identifier: NK9ERVmkeRZEd7gpacavIWC3s1T0BbbyxFRtfw1wiUY=
Subject key identifier: B9:C3:08:83:42:05:77:19:62:D3:C5:FA:AD:01:65:57:B0:16:82:32
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019811D0BC99FF3FA5ECF68354FD91594872
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ucMIg0IFdxli08X6rQFlV7AWgjI.roa
Signing time: Wed 16 Jul 2025 05:59:09 +0000
ROA not before: Wed 16 Jul 2025 05:59:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 151.244.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:11:d0:bc:99:ff:3f:a5:ec:f6:83:54:fd:91:59:48:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 05:59:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c308834205771962d3c5faad016557b0168232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:a9:93:87:84:31:23:eb:00:3b:31:13:b1:
98:12:f0:dc:74:75:30:02:05:0b:4d:ef:6b:76:cd:
b0:af:29:1e:90:cc:93:42:ea:b9:4f:52:df:32:27:
64:f9:a3:1e:99:52:f7:73:1e:bc:8e:c4:46:c1:b4:
6e:f0:0f:f0:6b:99:61:b2:5a:06:d0:7f:45:7d:14:
40:21:7a:0a:cf:6a:fa:ec:01:f1:b7:5b:82:95:3d:
1b:ee:2b:44:a7:24:8a:aa:2c:49:bb:ab:04:6e:98:
8f:10:f2:46:c9:99:d2:c7:01:2a:9c:b2:14:44:b7:
87:b8:4d:df:c5:57:5c:c4:2e:cf:af:ab:e8:a4:41:
32:1b:2f:a1:29:d2:4b:c4:7f:59:f7:fb:0a:94:ce:
47:3d:b6:0b:2b:26:9d:41:50:5d:be:2e:b7:38:40:
a1:5b:e5:17:05:da:da:af:15:e9:fe:30:6b:ac:fc:
7f:a1:73:1b:d3:b8:93:dc:48:58:ba:76:c9:98:9c:
90:cf:66:78:f9:72:fa:c9:e8:5c:f7:1e:2a:a6:f3:
84:7d:51:37:e3:ed:b3:ac:2c:db:5b:5a:5b:d5:ac:
35:08:e1:82:2d:93:54:e5:de:9e:54:b5:96:9d:ab:
e5:7f:f3:b6:d5:cc:bc:c6:f1:d8:16:04:ce:bb:fe:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:08:83:42:05:77:19:62:D3:C5:FA:AD:01:65:57:B0:16:82:32
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ucMIg0IFdxli08X6rQFlV7AWgjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:1b:c3:19:74:8d:ed:16:43:81:0c:d1:f5:24:19:48:62:e2:
05:42:da:5b:b3:f4:b1:7b:21:e1:3e:d4:9a:f0:b3:b2:b7:57:
d9:a2:ed:f4:a1:a3:d9:5a:b8:e1:7f:4d:35:6e:e1:83:ce:08:
89:b4:d7:ce:f9:03:37:15:c2:af:c0:af:20:c0:68:d7:5f:d4:
4c:c1:d1:f3:d6:06:f9:4d:3d:23:c2:7a:0e:e3:84:46:8c:03:
47:05:85:29:51:84:6c:fa:34:9e:47:85:13:8d:ee:2d:70:e4:
f0:cd:48:e0:63:8a:47:49:2b:01:77:7e:55:12:b7:1b:0f:24:
45:63:61:5b:68:8a:84:c7:2d:97:93:bf:d3:8d:ba:e7:64:0d:
64:4a:95:9c:82:b4:14:e8:39:5b:91:c4:f4:62:77:6e:1d:87:
78:02:18:0c:e8:78:79:3b:0d:6e:42:e6:d2:66:e8:5d:00:8e:
28:d3:53:76:fc:ed:58:10:ce:64:a0:b3:ad:dd:93:be:67:eb:
4b:8e:31:d5:c7:46:e0:e3:25:a6:54:94:0c:7d:69:38:c3:cb:
ff:5f:69:80:55:0d:5d:53:ef:90:f2:52:6b:ef:c1:61:dc:28:
5b:a4:1f:0c:5e:bf:61:c5:d2:bc:30:52:87:09:af:0f:8d:05:
85:11:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:37:41 2025 by rpki-client