Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_gZ_tT9wTQ3rpsAZLyfUyrktHZg.roa
File: _gZ_tT9wTQ3rpsAZLyfUyrktHZg.roa (raw, json)
Hash identifier: I7sl5ScAvP+xH8Rx4zjwjo406gr3gqgUPOOyk9gu/fo=
Subject key identifier: FE:06:7F:B5:3F:70:4D:0D:EB:A6:C0:19:2F:27:D4:CA:B9:2D:1D:98
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019660DE1BFAEFC499130D44FAABFDF446EA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_gZ_tT9wTQ3rpsAZLyfUyrktHZg.roa
Signing time: Wed 23 Apr 2025 04:18:10 +0000
ROA not before: Wed 23 Apr 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 151.243.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:de:1b:fa:ef:c4:99:13:0d:44:fa:ab:fd:f4:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 23 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe067fb53f704d0deba6c0192f27d4cab92d1d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:d4:8f:a1:8f:90:65:24:6b:fe:c4:5d:54:
a3:63:cd:24:be:c2:80:b1:10:79:6e:5f:11:e9:9e:
f4:27:d8:53:0d:3a:df:08:29:36:af:9d:b7:b8:b5:
6d:47:2e:9a:a3:75:3e:03:00:2c:83:f3:11:45:ee:
85:45:cc:a2:81:24:be:c9:1c:50:ff:84:d0:de:7d:
f6:4c:33:99:50:29:50:2d:c9:f5:28:1a:17:a1:7e:
81:6b:c3:3c:e8:a1:5e:d3:f1:6c:0f:54:85:fd:f6:
be:c2:96:2e:a5:01:14:c5:5e:76:e7:64:57:56:93:
f2:2d:77:97:ba:17:f2:f2:74:6f:95:2a:b1:43:a8:
3c:8f:d3:11:6b:a3:71:dc:f0:8e:ae:53:58:50:a8:
b1:57:61:0d:36:7c:a4:34:23:96:44:85:ed:5c:73:
73:0e:c8:38:f7:1b:4c:a8:b8:0e:e2:bf:0d:d3:6c:
71:50:94:5a:ae:45:07:75:22:43:66:54:ae:8c:c6:
3f:5a:73:ae:32:95:07:2a:1d:cd:29:55:7b:c5:a0:
65:d8:e8:b9:d6:6f:ee:9c:6c:18:a6:5e:0c:51:25:
99:73:ea:23:f2:78:79:90:eb:fd:aa:67:65:0c:72:
2d:63:a7:96:93:75:68:8d:18:fe:b2:45:dd:68:64:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:06:7F:B5:3F:70:4D:0D:EB:A6:C0:19:2F:27:D4:CA:B9:2D:1D:98
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_gZ_tT9wTQ3rpsAZLyfUyrktHZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.93.0/24
Signature Algorithm: sha256WithRSAEncryption
29:84:34:36:c3:70:d8:39:e5:d6:ed:fa:8c:40:b6:c7:3d:6e:
3b:66:0c:61:18:d3:2b:2f:62:e0:df:ed:a6:b6:54:00:14:11:
f8:1b:cc:58:85:cc:08:e8:d1:16:8f:8b:9a:98:a2:b6:6c:07:
b6:f4:6d:ff:f2:fb:54:c1:be:b0:e0:a2:42:49:48:a6:80:e5:
c5:52:9b:c5:26:41:e5:c7:00:64:93:65:dc:50:26:ca:05:4d:
93:44:c4:1a:29:01:f0:c9:c8:c6:9f:05:47:2e:eb:a5:bf:35:
0e:b7:23:73:83:61:89:52:57:33:ab:31:97:34:f1:80:e7:31:
d1:f0:30:ea:c5:a4:5b:1f:35:79:33:6b:13:5d:4b:ee:90:36:
ea:18:46:5c:39:99:a8:c7:34:73:37:50:2f:ee:1f:85:e8:db:
35:0a:d9:9a:12:0b:c1:f0:85:f8:fd:4f:44:5b:2a:1b:19:c8:
78:76:a1:08:56:a1:0e:c2:7b:3b:2a:35:99:8c:08:66:5c:ac:
2a:c3:15:ba:78:18:5b:f6:ab:ac:57:e3:43:fd:97:3b:38:4e:
e0:27:df:78:f1:e0:f2:19:99:fa:c2:89:6d:89:c0:30:87:c9:
25:d0:39:6a:f6:0a:1f:5c:ae:4a:89:23:aa:2b:53:c1:63:14:
ab:2b:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:07:59 2025 by rpki-client