Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Jtgseyot3LYPi82jazdigFYIIE.roa
File: 5Jtgseyot3LYPi82jazdigFYIIE.roa (raw, json)
Hash identifier: +qPsddhj6nEVSKCxbdq/p9csbgadYuGHSk+nuBNbJ0c=
Subject key identifier: E4:9B:60:B1:EC:A8:B7:72:D8:3E:2F:36:8D:AC:DD:8A:01:58:20:81
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195D8F7BFECF726330988A291893FE0BFCC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Jtgseyot3LYPi82jazdigFYIIE.roa
Signing time: Thu 27 Mar 2025 18:57:50 +0000
ROA not before: Thu 27 Mar 2025 18:57:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203446
IP address blocks: 151.243.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:f7:bf:ec:f7:26:33:09:88:a2:91:89:3f:e0:bf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 27 18:57:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e49b60b1eca8b772d83e2f368dacdd8a01582081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:03:e6:bc:42:d5:60:4a:a3:31:2e:ec:48:
01:88:c9:21:eb:f3:33:05:6b:1d:ee:72:dc:1c:90:
36:b5:5e:fc:af:a3:d3:7f:6f:80:a5:0b:9a:69:6c:
5e:5f:5d:7e:a8:95:a7:4f:64:8a:82:57:3e:9c:cf:
88:d5:93:19:fb:ea:db:48:48:10:5e:a3:67:a5:67:
2f:7d:aa:1d:46:57:ab:b1:66:6e:dd:36:cb:7d:df:
b7:b8:8b:f0:3f:83:f0:cc:f3:be:18:02:83:da:44:
0e:f1:35:41:01:37:05:e2:5e:4d:2e:18:5b:2d:64:
1c:42:0d:72:79:12:c4:11:06:be:b7:17:fd:b1:73:
be:3d:03:b1:34:a0:a0:c7:fb:e4:06:8a:6b:44:9c:
76:3c:28:40:da:02:f4:96:25:d0:9a:a3:1a:45:e4:
0b:2e:cf:f3:69:a8:33:19:d3:7e:0a:5a:11:f1:7f:
91:70:e5:4e:3c:91:b1:b0:2d:31:6a:39:d3:16:b1:
57:25:65:e4:c7:28:28:9f:33:cc:fe:ab:c8:cf:72:
e4:14:f3:13:a0:eb:18:78:db:4d:cb:03:7f:05:c3:
0e:80:c2:73:16:16:e9:eb:71:cf:af:4e:1c:0c:98:
47:71:99:9c:79:d1:6a:43:12:c1:25:2a:f3:e8:78:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:60:B1:EC:A8:B7:72:D8:3E:2F:36:8D:AC:DD:8A:01:58:20:81
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Jtgseyot3LYPi82jazdigFYIIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d3:61:ac:28:c4:46:e9:95:f8:2a:8b:e2:e1:62:dd:cc:69:
42:5e:92:c9:42:ff:b6:d6:87:7f:83:7f:c7:8b:6a:84:91:e5:
2f:b4:6c:e4:83:c6:82:99:0c:6d:58:d4:64:40:64:2c:cc:22:
d7:c7:c4:30:ce:09:76:d9:64:31:9a:65:5a:16:1f:0e:50:7e:
5c:4a:66:79:46:aa:18:68:aa:3f:c3:8b:ae:7d:28:c0:7e:0d:
00:8e:e6:f5:b4:21:bf:f1:e7:1d:f7:22:0b:41:ca:97:a0:ac:
e9:ae:c1:70:80:d6:3c:b3:35:01:a6:0d:95:6d:7e:b4:f1:4f:
e1:3c:8f:16:99:ff:83:fa:36:92:9d:1e:2e:d9:25:b3:11:2f:
19:f4:27:34:b5:4d:dc:78:d4:09:35:33:03:c7:a0:46:28:31:
5e:57:a3:4b:95:02:be:8b:d9:6f:ba:4a:8e:2f:d9:53:b6:90:
6e:58:c8:f1:ce:ee:81:9a:fa:e0:14:17:92:9e:b0:c3:95:2a:
1b:43:c3:86:67:5c:9c:e9:17:47:38:3d:1f:88:8b:cd:b2:34:
62:27:4a:b8:b1:0a:ca:e1:09:70:fd:d2:45:14:95:fe:77:62:
93:3e:3e:0b:14:76:bf:25:44:3e:db:e8:5d:65:ea:8c:40:75:
f1:45:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:14 2025 by rpki-client