Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nd7TwkfdVXD_TB2WXFHmyuk0WdQ.roa
File: Nd7TwkfdVXD_TB2WXFHmyuk0WdQ.roa (raw, json)
Hash identifier: EI5QiJZycQ/BxuOU2CFS7sPNle85dHZbeKkzQnXJeSk=
Subject key identifier: 35:DE:D3:C2:47:DD:55:70:FF:4C:1D:96:5C:51:E6:CA:E9:34:59:D4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196FE7927F1E37D0C61B0EBFE3CAC93CFC3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nd7TwkfdVXD_TB2WXFHmyuk0WdQ.roa
Signing time: Fri 23 May 2025 18:47:55 +0000
ROA not before: Fri 23 May 2025 18:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60602
IP address blocks: 151.243.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:79:27:f1:e3:7d:0c:61:b0:eb:fe:3c:ac:93:cf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 23 18:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ded3c247dd5570ff4c1d965c51e6cae93459d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:13:a9:bb:06:43:22:c8:b2:e4:e1:75:35:
f5:08:aa:2a:ec:b2:09:a5:fc:d0:d3:c2:24:71:16:
1e:7b:11:c2:20:64:86:21:47:f3:ed:db:ca:43:61:
1b:8e:2b:23:1c:46:7c:70:5e:1d:0e:11:48:e7:b2:
a5:a6:a9:34:4b:14:5f:fe:43:4a:0b:8c:56:0c:3e:
8e:f7:8b:07:a1:9e:95:71:5f:45:b3:57:79:53:4e:
c6:c6:ad:fd:8a:eb:4f:df:e1:14:98:63:00:72:89:
6e:88:26:ff:21:3b:72:e3:79:03:fd:2f:59:8c:68:
b2:33:fb:fc:30:48:7d:ca:ee:cb:f1:40:26:c9:72:
c2:12:18:28:fb:70:d4:91:fa:cd:8c:94:9e:60:8d:
c6:46:36:e0:ca:f0:f6:37:9e:68:f4:a7:3f:d0:f3:
82:8a:21:f6:22:68:e2:8a:b3:91:cb:d9:4b:d8:19:
eb:dd:99:02:b3:40:a5:49:00:d0:48:e4:37:a7:62:
04:d4:75:51:ed:99:d8:a2:e5:e3:63:dd:d8:57:ce:
5c:bf:3b:51:90:48:a0:e9:55:1c:ee:79:78:28:a1:
07:e9:95:8a:12:28:9e:82:70:fb:cb:71:73:3b:83:
4a:61:85:1d:c4:1b:07:63:c2:52:30:cc:40:bd:d0:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:D3:C2:47:DD:55:70:FF:4C:1D:96:5C:51:E6:CA:E9:34:59:D4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nd7TwkfdVXD_TB2WXFHmyuk0WdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.80.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:b4:c4:60:ac:83:c6:35:96:92:51:25:7f:de:f9:54:a3:6a:
44:c5:55:a7:81:fe:fb:f0:68:b5:20:40:64:03:44:ad:11:a6:
3e:2d:f1:3f:3f:c8:e1:c7:ba:f3:ed:68:64:87:5c:4f:e7:fd:
e6:6c:35:f3:f6:39:de:5e:3a:6d:d0:01:53:1a:ea:ed:21:e8:
10:00:3e:88:e8:e3:ad:b6:58:e6:7a:ae:be:ca:b8:41:bf:5f:
1b:06:b8:8b:b2:78:40:a5:9c:ea:cd:72:35:13:e7:8c:06:90:
c1:be:7a:1d:98:d4:da:af:ce:b7:89:a2:56:52:f5:e3:39:27:
04:39:e4:be:f4:76:93:ed:a7:d3:59:47:04:08:f9:2e:11:05:
d6:f9:7c:43:99:1d:33:86:6d:10:cc:fb:9c:54:91:2f:d6:57:
0d:68:4e:69:17:cc:3d:c5:11:87:7b:21:49:31:12:47:00:6a:
dd:18:e1:d4:a8:2c:60:aa:80:00:bd:10:69:c3:d8:96:45:61:
6c:20:1a:f1:99:ce:b6:86:25:86:f5:b5:19:8c:5c:0c:3a:4b:
7f:56:4b:2d:d8:4d:5d:c9:0e:92:01:99:92:cf:d8:2b:26:cc:
35:da:94:03:0c:58:ab:03:4e:9c:89:21:59:28:c6:88:9d:d2:
1a:5b:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:11:20 2025 by rpki-client