Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I7jupG9bc_JRzUyCVb5jqJJ1CLU.roa
File: I7jupG9bc_JRzUyCVb5jqJJ1CLU.roa (raw, json)
Hash identifier: 9jk6QMO1ThON8P0bs84fE0+W+PLE8vLz4cNTYjPb0Fk=
Subject key identifier: 23:B8:EE:A4:6F:5B:73:F2:51:CD:4C:82:55:BE:63:A8:92:75:08:B5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197342B40861B2B6E8F8E103872C51C7AD3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I7jupG9bc_JRzUyCVb5jqJJ1CLU.roa
Signing time: Tue 03 Jun 2025 05:02:19 +0000
ROA not before: Tue 03 Jun 2025 05:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265919
IP address blocks: 151.242.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 19:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:2b:40:86:1b:2b:6e:8f:8e:10:38:72:c5:1c:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 05:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23b8eea46f5b73f251cd4c8255be63a8927508b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:4e:9c:d4:6a:a6:2a:76:fd:79:f8:1f:21:
4b:8a:5c:07:34:0b:de:48:4a:c5:1d:aa:3f:06:0c:
4c:89:c5:36:b0:f6:12:7d:2b:08:ff:8f:5e:53:11:
a8:41:c2:ae:ce:59:08:10:a9:2f:11:b4:30:3a:02:
2a:73:5f:6f:52:f1:5a:42:51:71:40:cb:4d:00:f2:
e1:5e:b7:0c:2d:af:e4:ee:63:f5:1f:00:42:f7:55:
94:6e:36:8d:22:06:31:53:6e:f8:52:af:cd:63:c7:
64:de:58:f1:ce:24:7a:e1:b0:18:27:ed:6c:7e:a7:
b6:a4:34:54:43:d4:98:31:5d:0d:ed:9a:60:09:e3:
0f:0e:03:9c:e8:72:93:13:b8:39:e9:c7:e2:ad:8e:
ad:d6:e3:88:26:49:67:dc:41:d7:e3:9f:7b:9a:1b:
ef:f6:53:7c:f2:da:97:b3:33:e2:06:66:cb:1c:60:
53:2e:15:0b:cc:9e:2d:52:84:5b:c4:1d:c1:83:75:
49:50:9f:1a:6d:86:30:79:8c:fa:72:87:94:f9:56:
ce:22:67:f3:3f:18:4a:35:e8:0d:03:24:e9:19:0f:
22:1e:9c:55:73:7e:15:96:e3:85:14:93:f7:56:c8:
c0:45:de:28:b3:16:58:37:70:84:35:29:50:bc:9b:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:EE:A4:6F:5B:73:F2:51:CD:4C:82:55:BE:63:A8:92:75:08:B5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I7jupG9bc_JRzUyCVb5jqJJ1CLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:05:f6:19:d6:76:18:15:57:64:63:a3:71:4d:96:ac:0a:2f:
bf:e2:d1:e9:8f:ff:d3:30:2a:d7:0b:f6:d9:73:30:a3:c3:c3:
9b:f4:5b:da:33:62:02:d8:2e:d4:8f:aa:5e:47:76:02:0b:b2:
ba:6f:02:23:e0:03:da:29:6e:f9:17:16:77:d2:be:a1:b9:40:
0a:48:f3:07:37:7c:92:97:20:8e:87:9b:d3:8b:9c:4a:0c:14:
a0:0f:37:d8:ae:97:34:64:ff:e4:dc:4a:53:1b:c8:89:f7:5e:
81:35:8c:a8:8d:8c:40:f0:0a:ca:17:eb:7c:6d:1d:af:d2:6a:
e2:6d:e4:2d:68:ea:57:7a:a1:89:c7:4d:bb:04:58:ae:2b:12:
e8:08:10:1b:af:ab:ba:b8:51:d0:8e:19:44:a5:be:c6:64:45:
92:04:05:06:98:c5:81:68:59:6f:98:b2:e9:42:eb:7a:8b:15:
8b:66:6d:e9:71:29:c5:f3:76:56:62:2e:f7:a6:92:8c:c5:c6:
a8:d8:40:13:56:e3:bd:8a:74:be:ec:f6:14:f2:f4:60:6b:7f:
a0:cd:c4:c5:c6:bc:4e:88:0e:1d:0c:28:a7:7d:70:78:ae:8c:
e7:67:48:8d:5f:94:56:e5:47:81:53:ff:f7:4e:6a:28:53:52:
8f:57:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:41:56 2025 by rpki-client