Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dd6R1n2SbUzZt09-z5KZu0Wip1Q.roa
File: dd6R1n2SbUzZt09-z5KZu0Wip1Q.roa (raw, json)
Hash identifier: Te1FQxvefTwgVaJpDWctI5IaTJNKbLyP+0zayO4lUwQ=
Subject key identifier: 75:DE:91:D6:7D:92:6D:4C:D9:B7:4F:7E:CF:92:99:BB:45:A2:A7:54
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195BCADED5E7CF6B44174D68DE68BC62BBD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dd6R1n2SbUzZt09-z5KZu0Wip1Q.roa
Signing time: Sat 22 Mar 2025 07:07:49 +0000
ROA not before: Sat 22 Mar 2025 07:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213186
IP address blocks: 151.242.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bc:ad:ed:5e:7c:f6:b4:41:74:d6:8d:e6:8b:c6:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 22 07:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75de91d67d926d4cd9b74f7ecf9299bb45a2a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:0b:4b:02:50:5d:85:9b:56:5c:59:68:bb:
45:90:1e:c6:5d:94:31:9c:e9:62:4a:f4:a8:b4:26:
0e:8c:ec:a1:b8:c1:f0:ba:66:54:50:73:2e:56:58:
c4:b0:11:36:44:12:3d:41:85:0d:30:6e:9a:38:34:
6c:7c:48:b0:33:11:7e:cf:9a:79:07:64:8e:cc:a4:
cf:0a:9a:89:47:14:77:3d:28:09:e4:92:c8:d1:3b:
c5:75:de:79:04:b3:e3:c6:02:e1:08:57:94:2a:24:
83:c4:d1:1c:00:85:8e:83:c7:74:78:73:75:89:a4:
dc:36:14:f1:98:7e:73:91:8e:8b:50:d2:1d:7a:bf:
51:ba:01:ad:8f:47:07:62:8f:37:75:b1:b8:54:b0:
b8:e4:94:33:a5:7c:95:cb:c7:e4:92:57:a2:8c:c5:
f4:71:4f:c9:71:b3:47:08:14:2d:1b:08:7a:a3:92:
f5:cb:72:94:86:4c:37:f2:91:14:d6:da:d1:de:9c:
ec:6b:20:c6:59:54:82:a7:c2:e3:66:1a:cd:a1:62:
41:00:63:66:46:c8:29:66:79:c4:1e:af:20:b7:66:
5c:80:53:92:6d:7e:a9:b4:7a:41:50:96:4b:06:4e:
f3:4e:8d:b1:6f:63:ac:2d:76:d4:14:7d:24:eb:ec:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DE:91:D6:7D:92:6D:4C:D9:B7:4F:7E:CF:92:99:BB:45:A2:A7:54
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dd6R1n2SbUzZt09-z5KZu0Wip1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.92.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0e:c6:05:81:32:78:29:dd:8d:73:6a:47:cb:71:6c:ea:4d:
c3:05:e8:60:c2:2f:2d:3e:c0:99:e4:1e:ff:d5:bb:9f:c1:5a:
40:a3:70:8d:5f:71:7a:ec:84:de:ca:8d:20:6a:cc:d5:d3:23:
18:0b:71:a9:66:d2:22:c5:49:4f:62:05:50:f2:4d:82:aa:5b:
cd:f0:9d:b4:ad:e1:87:c4:1f:af:fc:a5:ec:42:70:03:39:70:
a6:69:3f:c5:57:ca:da:25:b2:44:ed:5c:24:ba:1f:48:fb:e4:
ee:cb:28:2e:66:99:c2:11:13:13:0e:a2:e3:8d:ac:71:85:96:
01:8b:5a:f9:95:cd:af:23:53:8f:b8:ba:1b:96:bc:56:55:3c:
6b:0b:de:00:65:64:59:8d:f6:66:48:73:28:db:a1:74:1b:38:
5b:ef:fa:75:d7:16:0b:f7:f9:f5:61:14:8c:4c:4f:ee:da:04:
2b:a0:2e:2c:14:81:2c:55:d7:06:44:33:ca:b6:22:52:32:0c:
4e:7f:7f:ec:5b:71:b4:c1:62:ff:be:b3:06:b6:75:15:f3:39:
ec:52:2b:6c:12:af:20:8f:9a:f3:6c:17:0d:e4:fe:6b:47:52:
68:13:60:e8:f6:dd:0f:f2:60:da:09:fd:42:f3:59:31:cb:17:
34:ac:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:07 2025 by rpki-client