Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EjQCC6OTCBAN3V1NmaiotEnkvj8.roa
File: EjQCC6OTCBAN3V1NmaiotEnkvj8.roa (raw, json)
Hash identifier: XXJp0nhj0yf/JhdfJEa7H19bYONLxATXClNYATILEws=
Subject key identifier: 12:34:02:0B:A3:93:08:10:0D:DD:5D:4D:99:A8:A8:B4:49:E4:BE:3F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196E7D9C6380A4594ED488C74366C87DD37
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EjQCC6OTCBAN3V1NmaiotEnkvj8.roa
Signing time: Mon 19 May 2025 09:22:11 +0000
ROA not before: Mon 19 May 2025 09:22:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25862
IP address blocks: 151.244.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:d9:c6:38:0a:45:94:ed:48:8c:74:36:6c:87:dd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 19 09:22:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1234020ba39308100ddd5d4d99a8a8b449e4be3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:34:43:b4:fe:77:07:10:fa:ce:c2:a9:a7:
66:0c:92:7a:34:84:00:d8:d9:a8:ce:b8:7f:c6:67:
30:08:4d:2e:05:ab:91:4d:a3:de:3a:3a:25:cf:50:
b6:2a:db:28:43:65:5f:d3:dc:24:6e:aa:39:51:83:
d1:45:24:f4:d6:66:d2:f8:98:84:4b:d2:76:26:b6:
33:37:5a:5a:6a:3c:8a:ed:79:ce:a6:4b:e6:7c:b2:
27:d0:07:ff:9e:81:c5:42:82:63:81:bb:af:4f:18:
03:ef:ec:56:f7:d4:9d:67:09:9b:14:bb:f0:84:b2:
f0:a0:9e:7a:ce:49:5b:47:4a:4b:f9:69:b3:98:67:
5f:99:bc:88:75:f1:b9:ee:cc:29:78:17:97:6c:06:
71:1e:f9:fc:f6:4b:c2:f2:97:6c:b2:a0:0f:35:45:
b3:70:b8:bb:ed:d5:c8:05:89:8d:c7:d6:96:a0:0b:
4c:bb:5c:13:92:ce:f0:5d:35:90:9f:1b:34:8b:09:
2e:13:b0:8e:7c:76:b8:e4:e7:3c:93:44:cf:04:68:
d6:3f:7e:85:94:a7:6d:61:1b:77:19:94:37:c5:ee:
a5:79:96:0f:68:40:90:85:6f:40:12:dc:54:a3:e3:
17:65:1e:23:3a:30:9b:5d:08:75:90:9d:ce:9a:21:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:02:0B:A3:93:08:10:0D:DD:5D:4D:99:A8:A8:B4:49:E4:BE:3F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EjQCC6OTCBAN3V1NmaiotEnkvj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c0:a5:1c:39:6a:8f:dd:ed:42:d7:9d:03:13:a4:74:2c:a4:
8a:75:8e:74:e0:4f:36:d7:c4:d3:e9:e9:b4:85:24:ec:ce:ca:
51:a4:3e:07:65:ff:37:a6:21:a7:01:fd:72:c5:92:75:9e:7a:
2f:33:11:13:c2:f8:08:72:e2:90:1c:85:74:38:0e:16:86:81:
8f:b2:3b:b1:17:9f:74:a0:00:e1:7a:97:56:82:96:f2:32:ac:
93:00:12:04:14:31:a0:66:0e:d4:4b:17:6f:88:77:74:65:f0:
c8:d6:a0:2f:35:22:d3:74:7a:1e:cd:20:d9:cf:7d:c0:15:94:
4b:af:0e:00:99:af:1a:01:64:4f:43:09:a3:87:ec:2b:cf:9e:
1a:77:b3:c0:94:21:fc:2e:e3:d9:5d:c5:eb:44:5d:ea:41:b3:
b4:a7:30:5b:f1:97:69:ca:9c:47:f2:70:c8:74:86:bb:18:3a:
47:3f:51:58:84:46:ae:71:b4:aa:0b:11:b3:02:26:0d:d4:cd:
58:29:e2:c0:e1:ed:11:4d:00:38:ac:cf:eb:94:b3:d6:45:7f:
29:ca:47:77:c9:33:67:28:f7:0c:c8:13:4e:2e:d3:50:4f:4e:
f1:48:a3:b2:33:c3:f3:72:30:76:d8:cb:c5:2b:f1:16:20:39:
3c:af:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:14:12 2025 by rpki-client