Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FvuaYrHIf9bQBYQTYSRlbSh1G9o.roa
File: FvuaYrHIf9bQBYQTYSRlbSh1G9o.roa (raw, json)
Hash identifier: GC1FJCIzeCMkM+08ok2QrE19KZFy8Ug6v3CGxPQMnMI=
Subject key identifier: 16:FB:9A:62:B1:C8:7F:D6:D0:05:84:13:61:24:65:6D:28:75:1B:DA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954D7491A802B5EE4B24CB6EF773289041
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FvuaYrHIf9bQBYQTYSRlbSh1G9o.roa
Signing time: Fri 28 Feb 2025 16:47:19 +0000
ROA not before: Fri 28 Feb 2025 16:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216022
IP address blocks: 151.243.43.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:74:91:a8:02:b5:ee:4b:24:cb:6e:f7:73:28:90:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 28 16:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16fb9a62b1c87fd6d00584136124656d28751bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:81:10:df:9a:20:c4:9e:c9:9c:df:0f:62:
22:fd:2e:c9:30:74:3b:b5:4a:eb:1d:8f:56:45:60:
10:8a:8b:92:c1:75:64:70:f2:d4:f9:65:94:f1:bf:
fc:40:53:08:e5:b5:45:fe:c1:ac:81:40:5e:f7:a9:
5c:9e:ff:77:3e:39:23:28:10:96:67:f4:bf:f4:e1:
33:c4:9c:b1:25:80:7b:49:03:19:89:85:b2:73:99:
3d:32:38:fa:77:0b:f3:c4:cb:0f:16:21:1a:c8:9b:
48:f2:40:7c:d7:a9:bd:45:e5:0e:2a:18:f6:97:6f:
06:a7:55:3e:35:77:ea:28:38:3e:2e:d7:c5:aa:7d:
e3:f1:28:d7:3f:9f:14:ab:d1:fc:b3:11:fe:ea:33:
3e:c9:a1:55:30:82:83:c2:88:52:56:f5:db:e1:a1:
8f:bd:a8:c5:92:fb:f7:45:5e:66:78:9a:de:45:fd:
d5:ac:a8:9e:c8:7d:75:2c:a3:7d:ef:40:93:bd:1d:
f0:c7:5b:fd:61:e8:54:5c:4f:cc:94:74:e6:68:ba:
d1:6a:8a:d5:12:a9:31:f9:71:49:40:f5:62:e7:e3:
89:cd:53:97:37:80:e0:1e:c8:a3:d5:bd:1a:9b:b9:
bf:9c:64:5c:40:d5:cf:d3:69:93:4b:58:0c:24:21:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:9A:62:B1:C8:7F:D6:D0:05:84:13:61:24:65:6D:28:75:1B:DA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FvuaYrHIf9bQBYQTYSRlbSh1G9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.43.0/24
151.243.174.0/24
Signature Algorithm: sha256WithRSAEncryption
74:35:40:45:a9:ed:03:79:04:f6:4e:40:c4:24:23:32:22:fc:
20:24:e0:39:84:9a:98:10:d9:cc:35:2c:0f:1d:1f:4b:93:22:
12:eb:b1:c8:78:c8:91:b2:4a:ba:90:de:66:20:41:d8:ee:f9:
6c:5b:a0:98:03:56:ef:13:91:55:c4:2a:49:5e:0c:5d:9d:f1:
3c:49:64:7a:f9:3d:6d:8d:ef:65:f2:52:26:d3:90:ef:d4:35:
39:62:a5:07:e7:cf:6c:cb:10:9d:65:97:19:3f:04:b8:8d:ec:
c0:20:29:f8:6e:d9:9b:61:6e:3c:29:44:bf:49:b3:a9:d8:9b:
23:3d:6a:ad:c2:b7:ef:09:b1:ec:09:1d:88:1b:a8:2f:0d:cd:
83:f9:c3:ef:9d:0f:5e:15:0f:29:c5:69:1c:e4:14:75:ed:54:
d0:ce:b0:c4:50:28:55:13:b5:cf:2c:1c:72:7b:43:bc:9b:ff:
f4:5c:06:80:19:56:3f:64:f5:a8:a7:f9:e4:ab:f2:1a:99:98:
0d:00:89:d9:ba:4d:64:17:30:a1:47:07:9a:1a:6a:1d:93:5e:
15:34:f4:7a:39:15:fe:ca:d2:62:e4:99:4b:cc:44:3c:79:0e:
8d:02:70:26:f9:bf:9a:98:5a:b8:b5:e6:b9:bb:82:7d:94:95:
c5:e6:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:51 2025 by rpki-client