Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DclFEibUdmZzoRE2btRuUyVZwCE.roa
File: DclFEibUdmZzoRE2btRuUyVZwCE.roa (raw, json)
Hash identifier: 1iYHaYYLjzKcjsQzD4mZeX5VGFjP8R81gZ4IRV+f2fA=
Subject key identifier: 0D:C9:45:12:26:D4:76:66:73:A1:11:36:6E:D4:6E:53:25:59:C0:21
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01973B599D6BA9695CD3D5AA0D772801081A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DclFEibUdmZzoRE2btRuUyVZwCE.roa
Signing time: Wed 04 Jun 2025 14:30:18 +0000
ROA not before: Wed 04 Jun 2025 14:30:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 151.244.77.0/24 maxlen: 24
151.244.84.0/24 maxlen: 24
151.245.79.0/24 maxlen: 24
151.245.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:59:9d:6b:a9:69:5c:d3:d5:aa:0d:77:28:01:08:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 14:30:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dc9451226d4766673a111366ed46e532559c021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:50:b6:d6:de:a4:f2:b7:c3:8d:91:b2:d0:4b:
25:0d:0e:24:9b:62:6a:9a:99:1b:41:d7:a6:0f:94:
d1:cb:0e:7e:78:2a:37:c1:5e:08:97:01:cc:08:a2:
96:79:da:c0:1d:4d:4e:57:c0:6f:cf:ee:08:91:47:
36:d1:23:4f:26:9a:7e:bd:d2:dc:b8:61:41:18:59:
62:a0:6b:9c:0e:a9:d0:b5:0e:c7:c9:ab:bd:44:44:
da:cd:4f:f8:21:4f:e8:a5:9f:9b:ba:27:4c:f8:12:
8d:1a:1f:cb:2c:f8:9d:23:b4:73:d4:a2:ff:77:d0:
e4:1b:13:ff:21:9f:e0:fa:e6:57:65:88:2e:c9:b5:
25:41:56:6e:97:ab:72:d2:9f:7b:83:76:e2:88:68:
11:77:13:c0:35:98:58:f9:59:ce:e4:a7:49:0a:40:
16:42:51:79:36:a1:64:42:99:0e:67:32:9d:a8:87:
f4:e3:f4:33:ce:ab:55:b0:ed:3d:91:bb:0b:9d:9a:
50:88:60:6e:f0:a7:a5:4a:8d:94:3a:d7:e6:b3:8d:
a5:c8:3a:ad:29:5d:6d:3f:9b:af:b6:6f:01:5b:7e:
86:51:07:95:4f:40:bb:d7:7c:d2:07:7f:17:16:cf:
35:fd:3b:68:b0:9e:67:7b:9a:f2:18:65:c2:14:44:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C9:45:12:26:D4:76:66:73:A1:11:36:6E:D4:6E:53:25:59:C0:21
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DclFEibUdmZzoRE2btRuUyVZwCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.77.0/24
151.244.84.0/24
151.245.79.0/24
151.245.84.0/24
Signature Algorithm: sha256WithRSAEncryption
48:45:3b:b6:17:d2:80:2b:9e:55:ab:40:6a:09:6d:6d:1c:1f:
28:6c:e8:db:e6:60:d6:2f:4c:92:f0:19:9c:ef:78:4c:4d:47:
b4:f6:24:8e:c9:c8:5e:bf:06:d9:9a:ab:cd:7c:92:c0:27:5b:
f8:88:0a:6f:ba:e7:f7:76:e7:a9:0d:95:a2:68:e7:20:b6:76:
b0:d4:84:06:67:49:8e:39:bb:64:1f:85:04:b3:36:07:c7:5b:
c6:95:7f:f8:4e:34:f8:d3:93:6a:a3:9b:c5:33:6e:bd:61:98:
4f:82:5b:45:c3:e2:f8:fb:3e:46:55:2d:49:58:d0:b4:41:e1:
4a:ae:de:49:01:a0:60:3c:3b:b9:ed:86:2c:35:f0:fa:40:e2:
42:ea:b3:9f:f8:47:ca:8b:5e:1c:9d:8e:b8:d9:6f:63:b2:0c:
85:b0:db:8d:8a:3a:f0:f0:96:98:3e:33:3e:98:97:f8:19:c0:
e1:31:c8:35:7a:cd:30:d1:a9:30:b1:ad:30:1b:a3:5a:61:33:
b2:35:21:2d:af:f5:ea:99:04:2e:ce:fe:1e:87:0b:5e:d9:15:
03:8e:20:ee:ef:2a:0e:3a:ae:f3:15:22:b1:3f:d1:e2:e6:57:
c8:69:4c:f1:d2:fe:c3:cb:d2:8f:a3:29:9d:0e:eb:97:1b:54:
ca:00:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:31:18 2025 by rpki-client