Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_bnjoF9tdbegyW7bo4MAtUFaP44.roa
File: _bnjoF9tdbegyW7bo4MAtUFaP44.roa (raw, json)
Hash identifier: 853VD80tn3XNp6lwEIcPFALHyQAWaRX1V4F8SsTvT4s=
Subject key identifier: FD:B9:E3:A0:5F:6D:75:B7:A0:C9:6E:DB:A3:83:00:B5:41:5A:3F:8E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195A28EEB2F45E5DD6F771D7BEAAE22A1F9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_bnjoF9tdbegyW7bo4MAtUFaP44.roa
Signing time: Mon 17 Mar 2025 05:23:50 +0000
ROA not before: Mon 17 Mar 2025 05:23:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 151.243.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:8e:eb:2f:45:e5:dd:6f:77:1d:7b:ea:ae:22:a1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 17 05:23:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdb9e3a05f6d75b7a0c96edba38300b5415a3f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:02:73:50:e5:a1:1b:f7:33:da:a6:c8:e3:
b0:38:80:ba:7e:9a:01:f6:7b:6b:35:11:d0:1d:02:
8a:4a:2b:2d:68:67:65:40:c9:d1:72:e8:b5:c5:f7:
68:0f:cd:25:04:5c:ca:c0:be:4f:66:20:67:e7:be:
01:14:33:3d:eb:2d:4f:14:93:4e:f2:64:93:11:61:
7c:be:6b:d9:4b:e0:7c:8a:9d:c7:e3:37:44:76:38:
e1:5e:97:aa:79:7b:1f:fb:3c:41:96:b8:21:9f:fc:
48:22:93:0b:2d:ed:47:6b:7e:46:19:58:6c:e5:91:
06:8a:4e:46:c3:52:dc:3a:75:7b:bf:03:ea:94:b1:
2e:2c:4e:66:64:0f:c5:ee:6c:b6:3b:7c:18:92:3f:
33:85:30:b9:f0:da:b0:96:ec:c6:45:1d:70:1b:04:
7c:7d:d2:49:53:ef:89:9a:d8:ca:49:12:ca:0f:8b:
e7:92:be:52:8a:c1:49:41:af:62:3b:cd:a3:d8:78:
ea:a6:af:33:63:be:57:78:14:ba:2c:0b:9a:ad:bc:
cb:02:29:e4:bc:1a:9c:a5:c8:a3:92:bd:22:57:3a:
4c:e4:b8:70:15:07:15:90:49:44:6e:8c:be:20:ee:
a8:2a:98:96:ba:a9:5e:23:80:9d:2e:bf:02:1e:30:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:E3:A0:5F:6D:75:B7:A0:C9:6E:DB:A3:83:00:B5:41:5A:3F:8E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_bnjoF9tdbegyW7bo4MAtUFaP44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:75:5e:2c:37:3d:b3:95:5b:55:a9:50:90:97:67:03:07:4b:
88:f7:5b:d0:1c:2a:7f:75:ed:39:31:48:f6:d7:94:3a:18:6d:
f6:3e:88:79:12:d1:3b:b6:ee:93:1f:01:9e:b6:59:f8:e8:d9:
94:26:81:ed:6d:ef:3e:f3:92:f5:20:cc:cb:b1:1d:df:02:b3:
63:c3:a7:da:1b:eb:48:4a:3b:96:92:f6:4f:61:89:d2:64:f0:
16:5b:dc:4e:78:10:fd:fd:a2:64:77:c8:ae:b4:bc:5f:9d:8e:
a9:0d:18:82:bc:18:3c:77:40:f1:af:a4:26:2d:45:e8:0c:ad:
86:25:ea:36:90:e2:90:5b:29:5f:82:b8:4c:bd:f1:bb:1e:d6:
6b:c4:91:73:f5:cc:5e:79:80:c8:8f:3f:ae:9f:ae:e7:1c:e7:
d0:d4:43:36:15:f0:d0:c1:84:64:6a:53:8a:e9:62:7c:1e:65:
99:0e:cb:de:35:69:aa:ef:a0:6a:db:4b:7a:8e:6d:03:13:0b:
77:c6:1a:3c:86:46:d2:ae:39:bb:78:af:1d:b8:8a:47:af:61:
87:cb:5a:36:f6:c0:5b:8f:45:e1:61:9a:91:b1:97:ef:7b:5f:
b0:59:75:92:86:7d:2b:30:13:a7:ec:b3:3a:98:c0:6b:1b:20:
59:70:d3:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWijusvReXdb3cde+quIqH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzE3MDUyMzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGI5ZTNhMDVmNmQ3NWI3YTBjOTZlZGJhMzgzMDBiNTQxNWEzZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv80Cc1DloRv3M9qmyOOwOIC6fpoB
9ntrNRHQHQKKSistaGdlQMnRcui1xfdoD80lBFzKwL5PZiBn574BFDM96y1PFJNO
8mSTEWF8vmvZS+B8ip3H4zdEdjjhXpeqeXsf+zxBlrghn/xIIpMLLe1Ha35GGVhs
5ZEGik5Gw1LcOnV7vwPqlLEuLE5mZA/F7my2O3wYkj8zhTC58NqwluzGRR1wGwR8
fdJJU++JmtjKSRLKD4vnkr5SisFJQa9iO82j2Hjqpq8zY75XeBS6LAuarbzLAink
vBqcpcijkr0iVzpM5LhwFQcVkElEboy+IO6oKpiWuqleI4CdLr8CHjCYcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP2546BfbXW3oMlu26ODALVBWj+OMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvX2Juam9GOXRkYmVneVc3Ym80TUF0VUZhUDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OSMA0G
CSqGSIb3DQEBCwUAA4IBAQBsdV4sNz2zlVtVqVCQl2cDB0uI91vQHCp/de05MUj2
15Q6GG32Poh5EtE7tu6THwGetln46NmUJoHtbe8+85L1IMzLsR3fArNjw6faG+tI
SjuWkvZPYYnSZPAWW9xOeBD9/aJkd8iutLxfnY6pDRiCvBg8d0Dxr6QmLUXoDK2G
Jeo2kOKQWylfgrhMvfG7HtZrxJFz9cxeeYDIjz+un67nHOfQ1EM2FfDQwYRkalOK
6WJ8HmWZDsveNWmq76Bq20t6jm0DEwt3xho8hkbSrjm7eK8duIpHr2GHy1o29sBb
j0XhYZqRsZfve1+wWXWShn0rMBOn7LM6mMBrGyBZcNPq
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:03 2025 by rpki-client