Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKnOaCXtNkjOsClkGlTIYSAsnqM.roa
File: cKnOaCXtNkjOsClkGlTIYSAsnqM.roa (raw, json)
Hash identifier: fex/h6hw6QsB+WGCrw3mSfoZzd5829NXw/n8M0z7z7I=
Subject key identifier: 70:A9:CE:68:25:ED:36:48:CE:B0:29:64:1A:54:C8:61:20:2C:9E:A3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019892BEB00A4FB63CE4FC7A9BC3D577484B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKnOaCXtNkjOsClkGlTIYSAsnqM.roa
Signing time: Sun 10 Aug 2025 06:50:27 +0000
ROA not before: Sun 10 Aug 2025 06:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 151.243.162.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
151.244.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:be:b0:0a:4f:b6:3c:e4:fc:7a:9b:c3:d5:77:48:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 10 06:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70a9ce6825ed3648ceb029641a54c861202c9ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:3e:8a:64:3d:6e:ff:18:e5:9e:0c:b0:58:
a2:82:c2:14:f3:10:ce:fd:e5:a8:60:98:15:67:d9:
5d:d6:42:af:8d:2e:76:62:85:79:56:f8:07:44:d3:
40:f7:14:01:9a:c2:7b:ca:9e:b9:69:1b:7c:9b:2b:
15:b5:be:e8:36:e5:a4:c7:d2:97:48:6c:f2:8e:ab:
23:f5:e5:5c:e8:d0:4e:1d:a4:82:95:49:8c:74:14:
3a:9b:6f:2a:b9:44:80:3f:7d:4a:fd:25:9a:b2:55:
09:ad:3b:8e:0c:8d:64:90:32:54:34:d1:e7:ae:f8:
7b:74:ec:58:58:13:51:55:b1:87:b0:f2:f1:84:fc:
54:6d:38:1c:d7:3b:14:d6:5e:82:e4:56:3d:02:7a:
19:38:f6:02:37:4a:71:c3:7c:6e:a4:13:c1:5e:46:
d8:6e:bf:b7:3d:dd:ad:b2:42:b8:d0:59:c3:c1:c5:
91:16:3c:fd:e7:30:24:22:63:39:7d:61:b8:dc:51:
4c:84:c3:1a:e5:7e:27:d0:f4:c1:ca:cb:08:3a:da:
37:48:12:9a:f0:84:86:28:a2:1e:a4:eb:86:c9:d8:
01:d0:23:ac:52:b1:47:e5:8c:37:43:fa:c2:cc:73:
d9:4d:aa:f9:69:71:7a:64:9a:d4:1d:f7:75:43:fb:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:CE:68:25:ED:36:48:CE:B0:29:64:1A:54:C8:61:20:2C:9E:A3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKnOaCXtNkjOsClkGlTIYSAsnqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.162.0/24
151.243.168.0/24
151.243.254.0/24
151.244.34.0/24
Signature Algorithm: sha256WithRSAEncryption
39:70:ea:c9:b7:99:58:ca:aa:ed:ac:5d:9c:08:64:30:04:6b:
4d:dd:c1:cb:b0:7a:72:c4:04:37:74:7f:5e:9e:14:f4:bf:ed:
0b:0a:22:bb:2f:9c:b3:ac:73:26:3e:d3:86:f6:ef:37:33:0e:
33:97:cb:55:d7:ad:3a:03:cb:52:7c:6d:4a:81:94:d7:36:cb:
af:65:c3:b5:97:1b:3f:a2:c1:df:bc:f2:58:e5:b4:b5:0e:d6:
6d:ac:22:7c:bd:a4:d9:b1:cd:03:d6:19:03:0f:51:df:02:12:
7d:99:47:9c:2d:3a:b2:1a:2b:40:ed:84:a5:fa:7c:4c:51:44:
62:6b:77:91:ab:3b:02:d0:c9:55:ca:65:9e:e1:1e:dc:a9:1e:
9e:8a:47:f7:0a:3c:1a:ac:9d:0b:4d:fc:95:27:25:27:ee:30:
7d:24:3c:44:70:19:bd:eb:71:31:31:d2:b7:cd:91:0e:fc:c2:
f0:77:28:c5:13:26:9a:3a:12:6b:52:7f:75:34:87:2f:bd:81:
08:9b:0d:89:96:05:4e:59:75:5a:37:25:dc:cd:36:27:a5:ae:
89:62:f5:f4:d2:15:c8:25:c1:88:2b:df:74:ac:7c:30:b1:a7:
f3:81:1a:b3:ba:fe:a2:98:d3:e1:ac:16:4b:c2:6f:5e:5a:e9:
7e:f8:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:11:03 2025 by rpki-client