Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RUgfH8Z1aCQWx-7xNFvG7jKhgTc.roa
File: RUgfH8Z1aCQWx-7xNFvG7jKhgTc.roa (raw, json)
Hash identifier: PgP2N7kPy442JYAToF0w0SVAhOx9tlOO/H/gT3s65Sg=
Subject key identifier: 45:48:1F:1F:C6:75:68:24:16:C7:EE:F1:34:5B:C6:EE:32:A1:81:37
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195185166DE27F4FE84508ED7D35D6AE526
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RUgfH8Z1aCQWx-7xNFvG7jKhgTc.roa
Signing time: Tue 18 Feb 2025 09:09:02 +0000
ROA not before: Tue 18 Feb 2025 09:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213845
IP address blocks: 151.243.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:51:66:de:27:f4:fe:84:50:8e:d7:d3:5d:6a:e5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 18 09:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45481f1fc675682416c7eef1345bc6ee32a18137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:2b:54:c7:1d:df:c1:4f:2d:da:e7:6a:7f:
a7:74:14:79:57:7b:c9:7b:92:98:06:4d:77:68:53:
64:75:10:c8:85:34:2d:e2:95:10:84:64:cd:8f:51:
eb:3b:09:cd:a4:5f:af:fc:07:5b:d6:73:76:ce:f4:
c2:cb:2f:57:b2:ee:35:82:d6:09:6f:48:9d:b5:60:
b8:d9:bc:6b:66:0e:20:70:6e:18:79:1d:eb:0d:d5:
9e:20:41:18:03:5e:d4:4d:d8:27:7c:84:72:44:28:
49:e6:85:78:28:e1:e9:eb:96:82:50:78:4b:d0:d0:
cb:68:ab:06:9d:8d:1b:33:d3:d2:d7:78:e2:59:1c:
17:f2:8e:4b:a3:d4:55:dd:f3:dd:c9:8c:66:94:08:
54:56:a3:d3:eb:f3:a8:c6:37:f8:59:a8:48:41:9b:
73:5f:31:34:68:1b:b8:6a:85:99:25:f0:5b:34:00:
2e:a0:3d:af:68:24:b3:75:d4:3d:40:88:7e:87:08:
9b:bb:ea:19:22:7e:b6:a4:54:9e:48:f0:ef:18:b3:
28:5d:31:2a:62:5b:8a:88:f3:9d:31:b3:40:97:f5:
4e:10:f1:4d:a1:9d:3f:6a:44:f1:a3:a1:9e:fa:44:
e0:ee:a8:61:6d:dd:97:b0:64:3c:18:98:1e:e1:00:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:1F:1F:C6:75:68:24:16:C7:EE:F1:34:5B:C6:EE:32:A1:81:37
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RUgfH8Z1aCQWx-7xNFvG7jKhgTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.58.0/23
Signature Algorithm: sha256WithRSAEncryption
21:00:69:78:79:9c:06:4c:10:b3:0f:3e:90:31:7f:f6:11:22:
36:a3:bd:5a:b5:56:71:1f:8f:71:1c:98:56:16:ee:32:4f:4f:
63:c2:aa:4a:57:f7:bc:ae:24:0f:9b:c2:32:63:95:c6:61:03:
b2:82:20:60:b4:2d:28:7f:b9:04:57:e7:e9:d8:24:24:41:89:
18:ef:ed:fd:7e:af:99:46:1f:2e:0f:97:d4:54:c8:2c:7d:85:
d8:2f:2b:a1:8c:65:48:b7:fc:eb:5f:27:c1:2b:fc:a2:06:fa:
5b:aa:75:b6:5a:2c:d1:6d:ce:c2:05:d4:2e:ef:c1:06:15:57:
49:87:8b:1b:ec:91:b2:0f:ca:76:64:01:61:c7:de:33:92:dd:
cd:cd:28:d1:97:89:96:9c:b0:9e:e4:e8:92:a3:20:47:62:d5:
d1:35:e4:3e:9d:5e:0c:19:0b:42:fc:c8:02:4f:00:26:cd:8a:
96:65:f3:9b:d2:38:4c:f9:31:fb:19:26:69:a5:48:f0:39:76:
6d:d4:71:05:b4:4f:97:12:04:6d:f5:8c:2a:46:f6:e8:ef:57:
7c:a8:5e:9a:cf:0f:11:9f:90:7d:21:fc:f6:24:d1:41:54:22:
37:8d:2c:55:df:16:87:bf:a7:64:be:45:c7:55:b4:32:bc:88:
0d:e4:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:08 2025 by rpki-client