Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vMFJT_TlLHhzM05m00jp4oVSeFo.roa
File: vMFJT_TlLHhzM05m00jp4oVSeFo.roa (raw, json)
Hash identifier: 0qHNAkVi/1iV6e4CLbdllWgOEwe4EHnXxCY1GJ0PvnI=
Subject key identifier: BC:C1:49:4F:F4:E5:2C:78:73:33:4E:66:D3:48:E9:E2:85:52:78:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019811B8F17DF141913CDAD33A5DD72008FA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vMFJT_TlLHhzM05m00jp4oVSeFo.roa
Signing time: Wed 16 Jul 2025 05:33:09 +0000
ROA not before: Wed 16 Jul 2025 05:33:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215691
IP address blocks: 151.242.190.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:11:b8:f1:7d:f1:41:91:3c:da:d3:3a:5d:d7:20:08:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 05:33:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc1494ff4e52c7873334e66d348e9e28552785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:73:e0:1f:8d:37:07:54:fc:8f:40:6b:cd:bc:
ad:22:c5:8f:b7:22:03:b8:a9:92:3e:cd:5f:02:2e:
3e:bc:38:11:97:00:ed:1e:63:07:0c:f2:c1:e8:55:
01:7d:f1:5d:cb:47:42:d6:f6:79:ba:97:ec:e5:8c:
11:23:0a:83:76:a7:53:ce:49:c5:ba:ef:f5:8f:4f:
29:38:87:d4:60:be:a3:93:28:7b:83:12:6e:34:49:
1d:b7:ed:66:4f:de:3b:3c:3a:a3:2d:d6:7a:22:b3:
89:1b:f5:76:1c:01:c6:7f:e9:ba:d7:40:ab:2f:bc:
09:38:c5:03:93:50:53:ce:84:b3:6d:e5:a8:8c:08:
f3:7a:b3:61:fc:9a:1a:a8:c0:4f:e4:a4:cf:4f:ed:
27:f1:05:4a:08:c8:3d:18:08:1f:38:fe:84:02:a2:
a2:4c:f0:e6:58:06:7c:e2:9b:19:7e:c1:f6:45:e0:
e3:81:78:04:88:03:8a:22:25:62:95:da:4b:eb:95:
de:86:d2:08:37:b0:e0:8e:41:b4:fb:a1:6a:34:50:
0e:56:84:e3:50:21:6e:bc:6f:c2:79:a4:2f:eb:38:
06:e6:c7:04:b2:6a:da:2f:2e:30:78:61:e8:91:f8:
af:27:4d:c5:e6:76:3f:91:ed:9f:6b:b2:4a:c8:ae:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C1:49:4F:F4:E5:2C:78:73:33:4E:66:D3:48:E9:E2:85:52:78:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vMFJT_TlLHhzM05m00jp4oVSeFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.190.0/24
151.242.194.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d9:ac:8a:48:b4:d5:90:28:5d:07:87:ec:d7:cc:8e:3d:65:
65:ff:03:69:79:76:e3:2a:5b:f5:f2:6e:b0:2e:7b:17:06:79:
25:7f:8e:01:f0:db:ca:11:3f:95:05:31:11:ed:6f:a4:fa:9d:
ad:fc:40:f9:78:bc:a1:e1:69:69:fe:a8:a1:20:35:6a:fd:ee:
5d:4a:f7:fb:6e:9b:f4:35:57:d4:e4:91:e2:3c:5f:d7:dc:b9:
06:21:38:d5:9a:d7:45:98:19:7b:47:34:f8:4a:ab:f3:15:6d:
d6:53:29:5f:13:c7:9c:ae:0b:61:1b:b5:25:84:7d:20:3d:92:
78:28:d8:2f:c1:22:8b:ce:20:8f:af:30:fc:18:28:de:5f:3a:
83:41:54:5a:50:b0:69:b2:0f:a4:b2:66:b9:28:cd:bc:2b:fb:
4d:93:62:87:af:50:5f:d3:a6:38:9f:2b:e1:ef:6f:af:0c:cf:
9a:5c:e8:4c:3c:78:ac:57:36:0b:0d:b4:a8:51:d2:d4:a3:06:
07:79:78:97:11:e1:f6:54:7d:5c:1b:9f:e2:be:7b:fe:a9:cc:
49:39:dd:7a:63:1f:41:f4:8f:8f:ac:30:4f:28:4b:82:c1:b4:
1a:39:72:3d:4d:36:55:b2:27:ba:50:49:b0:81:c7:94:be:be:
7c:d2:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:00:09 2025 by rpki-client