Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-HON2YhmcLmD2q1gOvp7t61reN8.roa
File: 1-HON2YhmcLmD2q1gOvp7t61reN8.roa (raw, json)
Hash identifier: 4BxWgdAAnyHcrhMA48tQqbLlBnoKrj64a3HFAwS47Qs=
Subject key identifier: F8:73:8D:D9:88:66:70:B9:83:DA:AD:60:3A:FA:7B:B7:AD:6B:78:DF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197A600D4DC309B4553220EC41AD67BC7B1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-HON2YhmcLmD2q1gOvp7t61reN8.roa
Signing time: Wed 25 Jun 2025 07:32:41 +0000
ROA not before: Wed 25 Jun 2025 07:32:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 151.242.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:00:d4:dc:30:9b:45:53:22:0e:c4:1a:d6:7b:c7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 25 07:32:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8738dd9886670b983daad603afa7bb7ad6b78df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:74:6f:dc:b3:ae:a8:cd:31:14:85:96:16:
32:56:f5:d8:4c:eb:3b:ff:6f:29:84:0c:ec:15:13:
e0:79:cc:9f:83:b3:89:61:d9:b6:7b:8b:c6:79:9e:
36:0d:b8:62:ec:6f:23:e0:25:4e:19:26:cc:04:f1:
2e:93:2f:3a:b3:26:09:74:54:97:b5:e4:01:fb:88:
63:17:82:42:e2:85:ca:f9:4d:72:4a:0a:e2:8e:db:
48:45:64:c7:fc:87:99:a1:df:fd:80:ef:80:da:91:
ef:ef:0d:91:2c:44:3c:ba:c6:a2:37:25:a2:0d:66:
07:66:59:d1:a8:39:13:9c:28:36:1c:a9:7e:a6:51:
66:79:4c:1b:88:da:c6:4e:49:a0:71:96:c2:71:86:
26:1f:c0:21:0e:8f:a9:60:b3:e0:0b:15:35:3f:02:
b3:ce:5c:e3:9c:eb:76:48:ad:8b:8b:75:07:fb:c2:
33:eb:50:1b:5c:f2:29:0e:fc:0f:49:64:79:b1:c7:
81:39:6c:32:12:96:97:25:69:9d:ee:22:2d:ed:80:
5b:77:08:ae:0c:cd:db:81:81:0c:1b:9a:e1:82:98:
26:24:7e:af:e6:60:16:b7:1d:f8:b1:82:e8:25:ed:
c5:14:8c:f9:66:8d:fe:b4:8b:58:ea:17:08:ba:46:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:73:8D:D9:88:66:70:B9:83:DA:AD:60:3A:FA:7B:B7:AD:6B:78:DF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-HON2YhmcLmD2q1gOvp7t61reN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:df:60:b7:cd:78:64:3e:55:6b:76:5f:0d:f0:da:25:60:83:
3a:b0:14:7b:cc:00:b1:bc:63:fc:0a:88:a6:d8:cd:87:51:c4:
dd:5f:65:ac:2d:f1:a4:80:b3:f5:95:2b:41:d4:11:9a:e6:03:
33:45:a0:d2:b1:c6:6a:4e:4e:2d:d4:cf:d6:49:7f:6e:ab:5d:
ab:1f:1e:fb:44:62:7e:32:23:00:85:d3:8e:1a:df:76:fb:ba:
d6:2f:41:08:5b:f5:2d:3e:2b:c1:99:07:91:cf:48:fe:0e:10:
ed:b2:e8:ee:c1:4d:b5:15:66:9d:00:b9:eb:9d:a9:8d:fb:b0:
00:cb:c7:68:ff:14:9f:de:f8:1e:85:76:07:f2:13:c9:42:eb:
1c:35:2d:b1:ee:3c:c3:19:17:0e:50:db:80:fe:c3:8c:3d:6e:
cc:3b:c2:82:d6:fe:48:30:9e:09:4c:f5:dc:da:85:a5:32:7e:
a5:d8:1b:d7:ae:43:2a:4e:40:47:a8:3e:6b:7d:0f:b7:7a:ea:
87:7f:ba:b7:97:df:04:5f:ef:5f:5d:28:bf:37:4e:d3:7f:e0:
5d:00:f4:7d:11:c6:d0:1a:4f:d5:ac:97:36:53:8e:4a:f7:11:
b1:92:57:ea:d1:ad:53:7b:c1:51:36:ea:01:63:4c:e4:d0:f4:
b9:af:da:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:25:43 2025 by rpki-client