Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IRt0IdCjmGP3SRl7pqP6-m5Ir9c.roa
File: IRt0IdCjmGP3SRl7pqP6-m5Ir9c.roa (raw, json)
Hash identifier: hFnBCw6D0qdHYVD0al7cY0Vi/jz08C867sNouMPx8w4=
Subject key identifier: 21:1B:74:21:D0:A3:98:63:F7:49:19:7B:A6:A3:FA:FA:6E:48:AF:D7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019618D7BAB517639E260BEC7A892254DF0B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IRt0IdCjmGP3SRl7pqP6-m5Ir9c.roa
Signing time: Wed 09 Apr 2025 04:38:33 +0000
ROA not before: Wed 09 Apr 2025 04:38:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 264459
IP address blocks: 151.243.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:d7:ba:b5:17:63:9e:26:0b:ec:7a:89:22:54:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 9 04:38:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=211b7421d0a39863f749197ba6a3fafa6e48afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:2e:df:b2:f2:19:42:00:d5:3c:a0:f4:d9:
f3:6d:1b:64:61:da:ef:65:58:0d:33:ff:a6:1b:6a:
7a:ee:c4:f4:bf:90:55:01:b4:7a:ef:0e:cd:be:ec:
fd:35:3e:56:ed:3e:b7:61:c2:dc:5f:c7:a1:39:91:
e3:1d:bc:b9:a7:db:dd:17:a6:02:4b:e7:23:59:dc:
5e:b6:ed:8a:5d:d8:55:86:e1:3a:ef:df:5d:dc:6c:
f0:78:4b:49:82:ee:0b:14:02:ec:39:0c:75:cd:27:
6d:e9:21:84:e6:ea:27:d3:0a:0d:df:be:d2:57:65:
e9:bf:74:6e:2b:b8:62:96:7e:e8:db:a2:81:98:07:
99:da:17:2e:7e:e9:59:54:50:68:f9:67:de:b2:ec:
15:a2:81:00:0c:97:b2:1e:12:ea:09:68:b8:fc:eb:
1c:1b:ba:0b:68:36:01:0c:d3:79:6d:7e:20:e5:29:
cd:58:b0:ae:bc:a9:3e:89:3b:09:6e:1f:73:24:36:
15:59:55:55:8f:20:19:10:50:55:73:5a:9f:1a:b4:
4e:62:06:2f:bf:9a:db:e8:d7:7a:2d:bc:d0:42:04:
65:54:cc:ce:03:cc:72:fa:e6:f6:e6:8a:af:22:7e:
60:52:cf:d2:ea:2a:6e:6d:c7:2c:05:8a:cf:43:35:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:74:21:D0:A3:98:63:F7:49:19:7B:A6:A3:FA:FA:6E:48:AF:D7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IRt0IdCjmGP3SRl7pqP6-m5Ir9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
28:83:64:9d:e1:37:af:17:df:eb:0a:27:6f:61:fe:41:c6:ef:
e4:42:b5:3e:7d:4d:bd:bf:a5:79:b9:00:a5:57:cd:33:b8:4f:
ae:64:92:02:99:04:33:1f:1f:30:4c:af:b5:72:bd:49:7f:c9:
2b:e1:73:8f:ad:77:8c:12:c5:e0:06:35:cb:ca:5c:97:5a:89:
f8:fa:f6:fa:0d:3e:97:1a:22:4d:b4:98:ca:cd:22:c7:cd:6a:
cf:c2:d5:25:71:45:6a:da:18:65:b9:1e:8d:5c:39:d8:c0:30:
64:a7:71:6f:08:20:96:bd:4e:48:9e:ec:fa:49:b7:08:87:27:
cd:36:4a:d7:e2:be:c7:52:7a:3d:b0:75:3d:43:90:a6:12:61:
13:ca:25:74:94:ce:66:42:03:58:96:0f:d7:c5:53:09:ed:39:
7b:15:bb:ff:69:a9:f9:87:d1:0b:e0:01:af:0f:e9:61:a9:c9:
2c:84:60:01:0f:7a:df:34:d8:e8:13:40:eb:4f:2b:45:c7:34:
4b:be:6a:e1:b2:24:21:67:2b:29:3c:20:f0:bf:4c:a0:7b:cb:
a2:4b:4d:57:6e:c6:b3:32:e3:c0:df:e2:02:60:f6:ea:49:15:
47:7f:f2:bf:fe:a4:46:13:c5:cc:0d:9e:e4:33:55:98:7b:32:
32:d2:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:00 2025 by rpki-client