Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ThyoAQ4pImZLhTf4CbPYFWtvJO8.roa
File: ThyoAQ4pImZLhTf4CbPYFWtvJO8.roa (raw, json)
Hash identifier: 638BwYstRnhQRpcqEqKq0KUxSuCDgdNXRgEFsR3SJjs=
Subject key identifier: 4E:1C:A8:01:0E:29:22:66:4B:85:37:F8:09:B3:D8:15:6B:6F:24:EF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F92999CF089F87DC8D1D522E301A5026
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ThyoAQ4pImZLhTf4CbPYFWtvJO8.roa
Signing time: Thu 22 May 2025 18:02:55 +0000
ROA not before: Thu 22 May 2025 18:02:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214693
IP address blocks: 151.243.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:29:99:cf:08:9f:87:dc:8d:1d:52:2e:30:1a:50:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:02:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e1ca8010e2922664b8537f809b3d8156b6f24ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:a7:0b:42:d2:f8:9f:b0:a6:c1:95:ed:a0:
ce:d4:bd:cf:71:53:85:50:13:6d:18:b5:1a:be:ee:
d4:97:78:53:1c:c5:4c:6c:99:07:25:e3:ff:c2:93:
26:dd:62:05:a8:ff:bd:45:5a:2e:b9:8e:2b:57:41:
07:06:bf:69:0a:c8:5b:2f:58:f8:f4:94:76:bf:37:
ce:30:ad:59:f2:e1:d2:7b:cd:a0:f7:5b:73:f3:e2:
50:95:03:8d:01:3a:c6:a3:f1:5f:22:ea:25:f0:f2:
19:6d:32:8c:7c:da:d2:98:ed:b1:49:fe:28:3a:e5:
bf:69:2d:20:8b:ff:1c:d0:5b:53:f0:21:9c:17:2b:
d6:15:84:3f:c0:a0:9f:03:de:5d:f3:64:04:8e:54:
d9:39:8f:9c:39:ae:2b:41:c9:eb:0b:11:03:e1:32:
6f:ee:73:29:00:df:9f:7b:2d:aa:59:0a:38:f9:da:
0b:f5:15:ed:f5:d2:46:fc:f6:35:03:96:cb:b6:e3:
2d:1e:ac:94:ec:fd:c0:7a:85:fa:8a:ed:52:0c:05:
2e:04:46:71:b1:ca:93:5e:b2:b7:01:a7:da:76:a7:
21:a7:9b:7a:f3:83:0a:74:6f:25:23:ab:a8:54:db:
70:80:55:eb:ba:41:d7:e4:a2:cd:84:2b:5c:9a:5e:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1C:A8:01:0E:29:22:66:4B:85:37:F8:09:B3:D8:15:6B:6F:24:EF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ThyoAQ4pImZLhTf4CbPYFWtvJO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.200.0/24
Signature Algorithm: sha256WithRSAEncryption
97:67:53:3d:16:1e:7e:18:49:e8:a3:65:d0:a0:5b:c0:fa:a8:
b7:44:0f:49:38:57:67:94:18:94:e8:05:9e:32:8a:57:6c:00:
79:18:17:d5:d7:f0:a7:23:29:67:e7:94:6d:4b:94:a9:21:00:
cc:72:ae:a3:4d:04:d2:10:b9:ec:5b:f8:a2:d5:91:07:34:dd:
78:34:f3:e4:26:0b:cc:a6:72:5f:65:ca:5b:13:1d:e5:07:db:
be:b7:ac:82:a3:ba:ed:ab:a3:e2:f9:f6:36:f5:e9:ea:e3:68:
cf:32:b8:df:45:da:46:76:b1:dd:62:82:77:d3:ec:f6:50:5b:
35:45:45:62:6a:4e:ef:81:2b:64:53:46:af:c7:65:d3:0f:78:
fb:53:69:e3:e7:a5:d5:d1:a4:e7:0b:fd:af:0e:0e:9a:e0:ab:
e9:9a:fc:01:cc:77:14:cf:05:f4:19:43:8f:e1:37:8b:cd:c8:
90:3b:59:c2:4e:ce:ba:2f:f9:c1:e6:fd:65:bd:b3:45:c3:f9:
67:60:0b:48:49:be:e9:f1:8a:57:a6:bc:47:46:aa:0c:96:97:
45:cd:4e:1b:9c:e4:02:2d:d5:6d:4f:e3:f2:3e:ea:a4:ac:5a:
1b:46:94:62:0f:cf:36:5c:e9:ff:65:65:f9:fd:46:da:80:2d:
ce:79:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:09:32 2025 by rpki-client