Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FuV7-YTJ4BwxI_Um4OsqEqLKs7E.roa
File: FuV7-YTJ4BwxI_Um4OsqEqLKs7E.roa (raw, json)
Hash identifier: XTnztps/6Ni3s/OCo+9HSGkxk63mp7IXk+ZkfzZpXa4=
Subject key identifier: 16:E5:7B:F9:84:C9:E0:1C:31:23:F5:26:E0:EB:2A:12:A2:CA:B3:B1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195409D93CE8705268E4F76AC026255A96E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FuV7-YTJ4BwxI_Um4OsqEqLKs7E.roa
Signing time: Wed 26 Feb 2025 04:57:03 +0000
ROA not before: Wed 26 Feb 2025 04:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214557
IP address blocks: 151.243.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:9d:93:ce:87:05:26:8e:4f:76:ac:02:62:55:a9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 26 04:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e57bf984c9e01c3123f526e0eb2a12a2cab3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:a7:22:d1:91:1f:73:1d:f4:33:7f:07:18:
38:18:13:4a:3b:ed:27:69:9f:cc:ac:30:89:92:5d:
d7:a4:e2:08:b3:eb:d6:6b:7f:c0:4d:e1:15:50:80:
76:0b:93:ff:b6:89:a1:b7:70:ee:e2:80:02:24:9e:
0c:9b:89:21:fd:95:00:b2:69:e7:f5:a3:42:1c:51:
7d:f8:d2:c3:14:d6:b7:77:61:1e:f3:1b:e9:ad:5e:
d4:ea:5d:be:cc:5e:da:6a:06:64:ca:3e:aa:f9:43:
9f:c0:07:d7:f7:34:9c:a3:47:e4:30:69:01:e3:30:
7b:2c:2e:c9:42:e0:66:92:6c:05:84:da:9a:56:70:
7a:d8:74:f5:d6:84:00:5c:0c:5d:33:6d:bd:fd:15:
39:5d:51:35:61:e8:7e:d3:6c:3b:6d:4b:da:af:1c:
a4:f7:99:a5:62:32:d2:a9:73:f7:70:fb:f2:3b:54:
b3:14:fa:b8:d8:a0:e8:0d:e1:8b:6f:33:d9:ae:89:
a8:36:de:12:52:16:5f:0d:1e:a4:d1:40:18:6c:c8:
25:44:f2:54:5a:7f:14:5b:b6:fc:5a:8f:a1:40:8f:
bc:94:5a:ac:47:2a:dc:bd:01:bc:53:06:91:66:19:
00:2c:ff:98:55:4a:58:31:71:d0:d2:0b:55:3a:1f:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:7B:F9:84:C9:E0:1C:31:23:F5:26:E0:EB:2A:12:A2:CA:B3:B1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FuV7-YTJ4BwxI_Um4OsqEqLKs7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.11.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ab:4d:68:e3:02:25:9c:be:f9:08:b1:0c:cd:ea:6f:aa:7d:
1f:b4:bb:d1:56:5a:10:5a:f7:7b:18:2b:19:28:0f:8d:93:b9:
ad:65:e6:62:81:8b:a7:49:ec:2b:12:bd:34:bb:75:c5:ba:58:
79:bb:85:6f:ec:4f:d5:f6:2e:6c:da:51:21:5a:fe:f8:8f:60:
ac:cf:d0:0e:24:6c:ee:1d:a1:eb:69:ff:40:de:51:fc:3a:86:
5a:04:24:e2:79:5c:64:d0:7d:8c:66:3d:10:c3:9a:39:c5:87:
c8:4e:cd:ab:06:3c:09:fe:d0:61:e6:20:2b:96:d3:67:c4:9d:
f2:5f:a8:77:42:b0:e0:a8:6e:be:49:c6:70:e9:e6:d7:bc:f5:
af:b4:83:e2:86:45:86:e9:7a:b7:a8:57:63:63:13:5e:e5:9d:
76:a9:08:f0:8c:2d:bf:b0:af:c9:92:56:bf:97:ef:5c:1d:5b:
c6:8b:76:33:98:1d:da:28:6d:9c:fd:46:b8:02:2a:7d:98:54:
29:f0:a1:3d:3e:2a:1e:3e:f7:d4:ce:8d:15:0d:92:04:4e:9c:
67:f8:21:42:77:6f:5e:2e:39:8c:0d:df:c9:82:ad:3a:f0:dd:
ff:21:5d:8d:59:a1:c0:0e:bc:e7:d1:39:34:b6:79:6a:1d:82:
4d:96:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:11 2025 by rpki-client