Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DW8DIk332PEc4X4oj1CwwqQXlxo.roa
File: DW8DIk332PEc4X4oj1CwwqQXlxo.roa (raw, json)
Hash identifier: Rk1nPkma8Htvt0NUCI0wzxc/3e550GF2eAJUpLDxOqw=
Subject key identifier: 0D:6F:03:22:4D:F7:D8:F1:1C:E1:7E:28:8F:50:B0:C2:A4:17:97:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D959146D6B29302D1BB2ADFB5E66673F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DW8DIk332PEc4X4oj1CwwqQXlxo.roa
Signing time: Sat 05 Jul 2025 06:49:43 +0000
ROA not before: Sat 05 Jul 2025 06:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.242.202.0/23 maxlen: 23
151.243.206.0/23 maxlen: 23
151.244.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:59:14:6d:6b:29:30:2d:1b:b2:ad:fb:5e:66:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d6f03224df7d8f11ce17e288f50b0c2a417971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:87:27:9c:8b:2a:11:6a:c0:30:24:be:6b:
78:e3:1f:cd:49:18:95:64:98:ea:28:d7:8f:64:cb:
16:f0:a3:e3:9f:b0:b2:f9:8a:79:93:19:98:86:26:
cd:52:d3:5c:d7:f6:6d:0e:21:4a:50:d7:09:c0:64:
56:78:64:76:d3:ab:44:47:80:63:6f:11:15:86:1f:
77:e6:4b:5b:11:be:b6:01:c8:33:a2:83:e9:0d:30:
e0:b1:86:c2:ab:22:4a:b1:c5:d3:b8:36:2b:2d:c4:
5e:bb:21:15:6d:72:0d:d8:2b:fc:94:38:6b:17:da:
82:f6:c7:89:ed:1e:9a:85:82:4b:de:df:08:1b:59:
f9:56:59:21:86:26:65:39:e6:df:3a:ee:fb:f1:8a:
64:49:bc:73:a6:1b:24:c1:ed:e7:b3:58:34:82:72:
29:21:72:df:c7:00:e7:7b:c5:6a:11:10:ac:e6:9b:
8e:c4:84:60:09:df:20:d9:be:11:a0:35:20:74:84:
f2:41:10:c3:70:3a:56:87:4d:00:f8:47:01:d9:4e:
07:81:35:46:fc:ac:47:1f:70:4f:16:2c:d4:50:04:
58:24:8e:46:d8:e9:8f:4b:f2:88:5d:eb:a8:b9:a4:
64:4c:83:2c:47:83:21:d3:c2:39:04:04:8f:3a:ee:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:03:22:4D:F7:D8:F1:1C:E1:7E:28:8F:50:B0:C2:A4:17:97:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DW8DIk332PEc4X4oj1CwwqQXlxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.242.202.0/23
151.243.206.0/23
151.244.88.0/24
Signature Algorithm: sha256WithRSAEncryption
80:02:14:87:23:3b:49:ca:29:b3:09:74:2c:5a:e8:38:29:94:
4b:87:99:07:e9:b8:c3:86:fd:d1:b3:fc:6f:70:1f:73:7f:07:
40:8f:d6:a5:93:c6:eb:11:bd:06:34:be:f6:4e:30:08:60:80:
8b:49:24:47:f3:a0:4a:9d:bd:96:8b:fe:6c:1c:f4:41:5d:08:
66:53:85:08:4c:2c:07:68:1b:eb:f0:b7:ac:d3:5d:77:65:1b:
79:12:2f:74:aa:84:f3:c0:67:32:00:7f:a7:3e:9a:65:9c:1a:
8b:96:61:ff:74:b5:73:7d:c0:3c:6a:bd:6c:32:41:9e:7d:f2:
ec:57:93:01:c4:cf:7b:e7:1c:be:4c:7b:eb:45:96:d3:bc:c3:
0f:69:52:3f:38:e3:ae:4d:96:c6:09:68:04:06:4e:3a:21:2c:
d4:b8:11:2b:ad:f1:6e:c7:2a:55:54:a4:43:eb:8f:36:d5:64:
2c:7d:99:b2:5c:15:21:58:ff:77:8c:d0:15:2d:f7:1e:21:90:
d6:19:84:7c:52:7c:d7:f4:3f:22:ee:96:8c:0d:e8:9b:7a:2d:
cb:d1:58:53:f9:79:0a:72:70:43:97:f0:e0:70:cd:f4:63:a6:
21:8f:e2:59:ee:3d:5d:e9:96:d9:85:95:ad:8b:35:32:a0:75:
25:b3:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 08:41:26 2025 by rpki-client