Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/diJ6rgEnCTasXWI_e0fhpH71-a4.roa
File: diJ6rgEnCTasXWI_e0fhpH71-a4.roa (raw, json)
Hash identifier: G4w4Hp1Iujk95vs99PBnewGKn1+Xxupy3BtZYyPiGXY=
Subject key identifier: 76:22:7A:AE:01:27:09:36:AC:5D:62:3F:7B:47:E1:A4:7E:F5:F9:AE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195F04EB711DFED551B8774136F4FE2F0EE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/diJ6rgEnCTasXWI_e0fhpH71-a4.roa
Signing time: Tue 01 Apr 2025 07:44:05 +0000
ROA not before: Tue 01 Apr 2025 07:44:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213476
IP address blocks: 151.243.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:4e:b7:11:df:ed:55:1b:87:74:13:6f:4f:e2:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 1 07:44:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76227aae01270936ac5d623f7b47e1a47ef5f9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:e0:9e:11:db:e7:b5:02:b6:58:b8:0d:f4:
ee:02:6f:4a:a3:47:b2:38:af:55:23:71:0f:d3:0c:
a0:bc:9c:30:d6:3b:3b:86:ee:92:25:d4:6b:da:f7:
ac:1d:6d:c1:09:12:ac:8e:9d:a5:85:ea:b2:75:a1:
e0:7c:ee:9c:c8:4b:17:cb:29:d2:53:b8:45:5e:8a:
e2:f0:43:35:b7:61:36:4e:39:9c:55:17:52:b3:61:
a7:cb:9b:49:ec:3e:1e:67:e0:3c:be:67:cb:01:7d:
05:46:87:b8:6c:98:d1:ff:2f:5d:e4:a3:44:d8:a1:
6f:b7:03:dc:7c:ee:47:ff:1a:a0:82:39:36:35:c6:
93:7d:81:e8:63:b7:33:2f:19:77:ba:76:fa:42:01:
70:fd:b1:7e:de:e2:94:f9:25:68:8c:b9:57:e3:61:
4e:28:65:8c:19:f3:04:e3:54:83:d3:07:65:09:46:
10:ad:ae:d2:45:15:01:9a:09:5e:d8:4f:5d:b5:6f:
b1:39:5a:e7:bb:72:b7:2d:2c:28:3d:21:3e:61:04:
f2:45:13:ce:a7:10:dd:cf:c3:9b:0c:60:4a:ea:65:
37:39:9b:9b:91:16:ca:7f:06:3c:48:9d:10:41:16:
88:c4:ea:ac:0a:84:77:94:2a:85:ba:fe:23:c4:d8:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:7A:AE:01:27:09:36:AC:5D:62:3F:7B:47:E1:A4:7E:F5:F9:AE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/diJ6rgEnCTasXWI_e0fhpH71-a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.103.0/24
Signature Algorithm: sha256WithRSAEncryption
07:05:52:f8:1d:88:84:78:1c:21:ed:ec:06:17:25:bf:d1:c0:
44:72:b4:22:16:55:a0:5c:d6:d4:e4:c7:f3:e8:5c:c5:d0:8e:
50:18:84:16:da:6f:37:ec:9d:ea:a5:d5:52:6a:74:30:71:c2:
ad:4e:60:8e:29:e2:df:fd:2b:13:06:51:66:7d:72:47:3b:c4:
36:99:2e:29:4f:2d:cb:ef:d2:8a:ea:78:2e:37:6d:d8:63:7f:
81:39:63:b2:cf:36:94:7d:84:76:24:1d:d1:1d:20:67:f5:2d:
e8:16:a7:c8:ea:26:8b:33:8a:3c:34:3f:58:5e:c2:c8:18:2a:
50:ab:8c:ab:22:af:5d:42:b8:d2:7b:2f:2d:bf:dc:8f:6e:65:
0a:7a:64:c5:bd:14:52:6d:76:2d:a2:e4:6a:f7:73:9e:8b:e8:
a0:c8:79:29:b0:f2:40:a0:26:0c:1f:a4:60:40:2d:52:1c:3d:
b7:b2:db:26:f7:14:71:84:3b:f3:d1:26:3b:3f:1e:08:8d:6a:
c8:e9:e0:c1:3c:4c:a2:c4:9f:16:85:d2:48:2d:e4:63:4b:7c:
c8:eb:5b:1b:ae:73:6d:46:85:ca:51:76:da:71:cf:ff:ae:b9:
08:79:3e:a6:86:4a:54:b3:d6:b6:cb:2d:5c:aa:b8:78:6e:2c:
dc:d9:db:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXwTrcR3+1VG4d0E29P4vDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDAxMDc0NDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjIyN2FhZTAxMjcwOTM2YWM1ZDYyM2Y3YjQ3ZTFhNDdlZjVmOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGngnhHb57UCtli4DfTuAm9Ko0ey
OK9VI3EP0wygvJww1js7hu6SJdRr2vesHW3BCRKsjp2lheqydaHgfO6cyEsXyynS
U7hFXori8EM1t2E2TjmcVRdSs2Gny5tJ7D4eZ+A8vmfLAX0FRoe4bJjR/y9d5KNE
2KFvtwPcfO5H/xqggjk2NcaTfYHoY7czLxl3unb6QgFw/bF+3uKU+SVojLlX42FO
KGWMGfME41SD0wdlCUYQra7SRRUBmgle2E9dtW+xOVrnu3K3LSwoPSE+YQTyRRPO
pxDdz8ObDGBK6mU3OZubkRbKfwY8SJ0QQRaIxOqsCoR3lCqFuv4jxNgPrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYieq4BJwk2rF1iP3tH4aR+9fmuMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZGlKNnJnRW5DVGFzWFdJX2UwZmhwSDcxLWE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/NnMA0G
CSqGSIb3DQEBCwUAA4IBAQAHBVL4HYiEeBwh7ewGFyW/0cBEcrQiFlWgXNbU5Mfz
6FzF0I5QGIQW2m837J3qpdVSanQwccKtTmCOKeLf/SsTBlFmfXJHO8Q2mS4pTy3L
79KK6nguN23YY3+BOWOyzzaUfYR2JB3RHSBn9S3oFqfI6iaLM4o8ND9YXsLIGCpQ
q4yrIq9dQrjSey8tv9yPbmUKemTFvRRSbXYtouRq93Oei+igyHkpsPJAoCYMH6Rg
QC1SHD23stsm9xRxhDvz0SY7Px4IjWrI6eDBPEyixJ8WhdJILeRjS3zI61sbrnNt
RoXKUXbacc//rrkIeT6mhkpUs9a2yy1cqrh4bizc2dtm
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:04 2025 by rpki-client