Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/af8REI_b-IUJ0A2266w4IDa9AV0.roa
File: af8REI_b-IUJ0A2266w4IDa9AV0.roa (raw, json)
Hash identifier: EV0dS1ahjYTmecdETSeStRIVNHLZPiwlRPxAEe9I0Fk=
Subject key identifier: 69:FF:11:10:8F:DB:F8:85:09:D0:0D:B6:EB:AC:38:20:36:BD:01:5D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194E42FB955D6FFFB44827B6F7A30506BDE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/af8REI_b-IUJ0A2266w4IDa9AV0.roa
Signing time: Sat 08 Feb 2025 06:12:00 +0000
ROA not before: Sat 08 Feb 2025 06:12:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 151.243.32.0/24 maxlen: 24
151.243.48.0/24 maxlen: 24
151.243.56.0/24 maxlen: 24
151.243.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:2f:b9:55:d6:ff:fb:44:82:7b:6f:7a:30:50:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 8 06:12:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ff11108fdbf88509d00db6ebac382036bd015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:c2:7b:58:a1:83:2e:49:31:ff:f7:57:48:
dd:2b:4c:1b:e4:61:a0:66:0c:f3:cf:f2:05:e9:91:
bc:a3:55:43:b4:49:0e:09:1a:c8:1e:7c:46:3c:6c:
1c:f6:85:e3:0f:1b:c6:84:10:ef:1f:c2:7a:ae:c3:
00:bb:f7:8e:2c:65:1d:74:2b:29:84:73:7f:cc:3c:
21:1e:29:e3:bb:b9:92:83:1d:52:3d:b0:08:61:7c:
32:f0:6a:08:8d:5f:d9:9c:1a:69:b1:16:07:75:36:
70:0a:ca:37:a4:58:9a:9a:61:54:79:b5:fe:ee:58:
84:ec:cc:40:14:da:31:d7:e5:5b:25:15:e4:76:6d:
29:0e:99:69:ed:c6:18:f5:d0:45:3d:66:d1:b6:93:
58:00:d1:31:03:1c:a3:98:fb:fb:40:20:11:cc:c7:
f7:c7:d7:0d:76:56:08:0e:83:57:2b:72:da:0e:ed:
2d:e6:a8:48:e3:0a:5c:31:c0:eb:da:88:32:a9:0e:
54:d3:8e:f4:c3:9c:55:68:34:3c:51:52:c5:c4:72:
e7:13:d7:c6:5a:e8:78:d1:70:77:59:f8:e6:ed:3b:
9d:8c:c5:b1:82:1e:99:d9:37:15:ae:bc:b9:4c:fe:
e6:27:c2:08:b4:79:86:e3:3e:fc:46:88:5a:c9:fa:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:11:10:8F:DB:F8:85:09:D0:0D:B6:EB:AC:38:20:36:BD:01:5D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/af8REI_b-IUJ0A2266w4IDa9AV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.32.0/24
151.243.48.0/24
151.243.56.0/24
151.243.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e9:0a:81:0f:1a:c5:b5:a8:a0:ed:86:86:82:ae:c9:40:ee:
10:92:a3:be:80:34:16:a0:2b:2a:13:66:a3:27:77:45:4e:ec:
0d:c7:a3:c6:75:87:36:b7:9c:73:f7:51:e9:48:c6:cf:be:11:
db:86:42:70:3c:19:cd:7a:c4:03:52:6d:05:f5:36:5f:92:25:
f5:5b:a9:23:7f:c4:e5:d2:e9:58:70:d9:f2:a9:30:dc:3e:32:
d5:45:37:8f:2e:dd:ca:c1:4d:09:95:b1:a6:dc:7e:50:6b:5e:
42:95:df:a8:05:89:7e:5d:04:4f:b6:1c:29:c3:12:e1:da:a8:
b7:58:ae:b0:32:e5:a5:da:75:bb:d2:89:e1:bb:fc:e9:d5:6e:
35:48:b5:24:77:43:e6:11:54:f5:ed:5b:28:06:94:68:e8:89:
3d:cd:84:f1:58:ef:ca:2f:8b:5d:76:8b:af:c1:ae:1f:ad:cf:
f5:c5:98:cf:32:8e:c8:73:aa:a9:d6:9c:e3:2b:79:ac:5a:c8:
2f:bc:1d:87:d8:77:20:68:b5:eb:94:29:9a:1e:32:36:aa:5b:
fd:b4:2a:63:cf:ba:92:79:1e:45:16:d9:b3:a8:dc:e1:bc:eb:
39:33:00:04:08:aa:3b:7a:f8:72:81:79:53:d7:f8:2c:11:1c:
3b:c1:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:55 2025 by rpki-client