Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FnHWO1GmaZz-RVGh1wh7xmuadRQ.roa
File: FnHWO1GmaZz-RVGh1wh7xmuadRQ.roa (raw, json)
Hash identifier: nHGpft9z4pTKyPLMj2AJlQ+vjJPpUdFO59RhdsfLusY=
Subject key identifier: 16:71:D6:3B:51:A6:69:9C:FE:45:51:A1:D7:08:7B:C6:6B:9A:75:14
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197105379EC42CF0BFB283F258DE7305CD1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FnHWO1GmaZz-RVGh1wh7xmuadRQ.roa
Signing time: Tue 27 May 2025 05:59:55 +0000
ROA not before: Tue 27 May 2025 05:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15143
IP address blocks: 151.242.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:53:79:ec:42:cf:0b:fb:28:3f:25:8d:e7:30:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 05:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1671d63b51a6699cfe4551a1d7087bc66b9a7514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:7f:ef:31:7c:0a:8b:1f:a9:b8:12:c0:f5:
2d:43:19:97:2a:fc:c0:67:d7:27:9d:69:71:66:db:
00:77:cd:32:7a:d5:ed:8c:d2:b6:41:ce:c6:28:57:
00:ee:1f:06:35:63:76:ff:a4:5f:52:8f:87:6b:83:
4b:eb:88:00:f1:15:d2:44:94:87:89:f0:c5:b8:61:
30:56:f8:30:8e:3e:c5:4e:11:4a:6d:76:52:83:fa:
9a:e0:50:b4:9e:60:b5:f8:79:be:1f:42:ce:f6:de:
5c:2d:4d:55:39:41:d2:7c:6d:60:fc:03:23:40:fe:
8f:bd:b0:27:6b:ed:9a:45:bb:91:ca:2d:f6:31:da:
d9:51:80:5a:c0:dc:b7:e0:46:c8:33:bd:d5:7e:c8:
45:47:90:9b:cf:7a:6d:29:68:af:74:26:39:83:6b:
c4:bb:86:aa:d9:4a:20:78:cd:dc:c4:49:ef:ca:7e:
46:99:de:ea:07:2b:3f:5d:40:5f:1b:da:a0:ae:13:
12:fc:bd:b3:ba:fb:9d:14:a7:42:b1:0f:07:0c:7c:
36:04:cf:64:c5:bc:34:a2:ec:47:3f:05:dd:8f:55:
0b:ad:66:92:29:11:1b:64:d7:d5:8b:29:a7:ca:38:
19:98:68:56:48:14:2e:ef:8a:c6:02:88:1a:e4:25:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:D6:3B:51:A6:69:9C:FE:45:51:A1:D7:08:7B:C6:6B:9A:75:14
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FnHWO1GmaZz-RVGh1wh7xmuadRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.224.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:65:8b:fe:b6:4c:05:1f:d0:87:9f:bd:05:11:72:9f:99:74:
00:f6:81:d5:d3:ed:2f:19:0a:e9:c7:e2:10:88:b3:c5:8e:54:
72:81:de:b6:92:b2:dc:07:f5:fd:ad:83:58:bb:90:7b:f4:87:
7c:7d:38:0f:7f:21:5a:65:39:9b:ec:0a:d9:19:96:36:b2:e4:
dd:07:aa:b8:ef:bc:55:8b:9f:fe:be:65:d7:e3:57:2e:8a:d3:
aa:6b:ee:6d:03:aa:57:06:04:ed:90:71:b9:c1:ce:f4:54:36:
31:a8:f9:d0:ff:e4:e4:fd:9b:8d:10:54:40:60:2f:06:f1:c9:
d4:03:b0:60:9c:82:21:cf:f7:e7:8b:c5:71:93:e4:22:e5:a3:
18:f9:13:dd:ab:a5:ea:0f:88:73:03:d8:9f:16:10:67:0e:96:
bc:08:4a:a5:7f:65:48:8f:1c:c5:9f:3f:2c:b2:8e:8f:f7:72:
fa:42:f2:82:4d:00:4b:27:05:7c:e9:a0:30:bd:c4:01:0e:4b:
ed:b4:86:3b:76:5d:25:1b:44:54:f3:f9:a4:96:f5:f5:da:3f:
6b:9a:12:14:b1:ba:dc:59:f6:b3:70:b9:72:21:97:92:ce:d8:
5d:b9:67:43:79:fe:25:f4:89:11:45:c1:84:5f:e0:ae:d8:bd:
07:8e:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:52:57 2025 by rpki-client