Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dGwTZWhGEEtrUFnZJ_95-_rZEGY.roa
File: dGwTZWhGEEtrUFnZJ_95-_rZEGY.roa (raw, json)
Hash identifier: G080xA9k+O53mOsEX6XxEFYUKGz43DnZIyco5Ly3JV8=
Subject key identifier: 74:6C:13:65:68:46:10:4B:6B:50:59:D9:27:FF:79:FB:FA:D9:10:66
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195C92AF42D55FCFFC4BC1E7C80BEA5D472
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dGwTZWhGEEtrUFnZJ_95-_rZEGY.roa
Signing time: Mon 24 Mar 2025 17:19:50 +0000
ROA not before: Mon 24 Mar 2025 17:19:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401190
IP address blocks: 151.242.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:2a:f4:2d:55:fc:ff:c4:bc:1e:7c:80:be:a5:d4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 24 17:19:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746c13656846104b6b5059d927ff79fbfad91066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:f0:7d:22:f4:55:81:09:0e:d5:b5:29:7d:
3d:ee:d2:d6:a2:e6:9c:55:6a:88:4a:7b:a6:c2:9c:
a1:7e:6c:77:d3:34:c2:a7:3e:7c:b2:a9:57:78:dc:
a3:be:60:3c:39:2c:72:71:6f:8b:8f:14:99:f7:de:
2d:f8:0e:a1:38:8d:f7:f9:53:ab:a0:c8:45:91:6e:
66:5f:4c:65:4b:c7:18:46:37:81:9a:c6:2c:96:56:
50:a3:3c:ab:5c:80:46:36:01:c8:4f:57:c4:1a:2e:
6e:5d:85:69:a7:a9:b8:55:14:00:31:c6:2e:61:98:
93:20:ba:98:da:0d:84:1c:cf:ff:69:37:99:bd:c1:
a5:c3:05:e4:e3:e7:05:ab:53:fd:6d:ea:67:83:b5:
68:3e:21:4a:f0:0f:b0:b5:e8:9b:fd:ab:e2:f3:39:
b0:f5:be:ef:ac:21:4c:a5:4d:89:3d:62:57:6b:32:
88:60:dc:83:7e:7e:86:60:5e:cc:de:50:e5:2a:05:
db:b9:ef:bb:84:2c:82:25:4f:4e:8e:11:5e:a0:45:
45:c6:86:5e:c2:e7:dd:a9:4d:88:9c:8f:9b:07:0b:
01:13:2b:a3:63:06:bf:33:6a:36:07:fc:74:e0:12:
a8:f3:e7:b5:6c:2e:35:b5:60:e2:18:97:39:47:45:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:13:65:68:46:10:4B:6B:50:59:D9:27:FF:79:FB:FA:D9:10:66
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dGwTZWhGEEtrUFnZJ_95-_rZEGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
84:66:bc:85:8c:83:19:30:70:82:60:1c:3d:52:db:c6:12:14:
1d:e8:d5:33:95:22:ac:bc:ae:cf:1a:cc:f9:2a:24:2f:ac:ec:
0f:c0:de:56:c1:f6:34:53:af:b4:c4:44:ac:2d:39:93:33:80:
15:ff:fc:27:f3:95:5e:c7:27:bd:7f:38:5e:be:d8:ac:58:10:
96:ca:1b:7d:02:12:75:55:c3:69:4e:32:32:64:6a:b6:fc:10:
8d:91:bc:6c:c8:9a:64:40:c4:5b:d3:69:09:d8:f9:56:af:d8:
7c:3e:7b:f0:18:7f:a4:23:25:c4:cb:38:39:cd:06:59:b4:5c:
de:49:00:f0:d9:6f:cb:cf:2e:2d:16:af:f5:4d:f9:97:ce:73:
4d:e3:46:a7:db:47:e5:f8:1f:13:e2:1a:f4:b9:6e:1b:00:a9:
76:e9:b3:7b:13:3d:c1:2e:18:61:e0:cd:0e:e5:9e:89:53:96:
49:87:dd:7d:cf:6b:bc:f8:2f:0b:3c:a7:b5:b5:32:46:7f:52:
97:8f:d9:36:0c:46:22:4f:ec:1c:89:19:da:22:3a:1b:da:76:
fd:a9:7d:10:a6:a0:30:70:4f:44:4d:9b:cf:d6:6a:ad:3a:e8:
a5:9c:ff:0a:86:ea:9f:76:4a:0b:d9:9d:ca:34:20:9e:bb:ef:
be:49:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:54 2025 by rpki-client