Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e683OAyfHrqVrDSzv5JfKzVGemQ.roa
File: e683OAyfHrqVrDSzv5JfKzVGemQ.roa (raw, json)
Hash identifier: 0toHS3XMP8ORnKwV0w8h8uJygQxz56kaJzBTdo4yfJA=
Subject key identifier: 7B:AF:37:38:0C:9F:1E:BA:95:AC:34:B3:BF:92:5F:2B:35:46:7A:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01972A7450E3BE126261D066C836895D799B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e683OAyfHrqVrDSzv5JfKzVGemQ.roa
Signing time: Sun 01 Jun 2025 07:45:55 +0000
ROA not before: Sun 01 Jun 2025 07:45:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215672
IP address blocks: 151.242.10.0/24 maxlen: 24
151.243.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:74:50:e3:be:12:62:61:d0:66:c8:36:89:5d:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 1 07:45:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7baf37380c9f1eba95ac34b3bf925f2b35467a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:c2:e8:b7:30:3c:ee:84:f2:b5:0d:1a:90:
ff:93:08:6e:63:cf:18:e0:59:24:f5:65:cc:19:73:
4f:50:96:19:1d:80:7f:8e:6a:f9:d8:bf:63:f0:b4:
fe:fa:86:99:5d:3a:23:53:f6:48:b6:4e:b6:6b:54:
ad:30:55:c3:67:21:90:33:d2:35:14:cc:c7:e1:93:
84:56:34:02:f9:a6:98:44:d5:43:56:9f:bf:54:33:
8c:fd:40:4a:79:bc:7e:9b:57:e6:de:4c:23:3d:57:
44:42:48:ff:46:6b:87:5b:40:7a:3c:49:c2:dd:af:
4f:fc:d8:33:b0:22:8c:7f:d1:14:6a:02:64:97:2c:
44:1f:21:23:eb:21:7b:05:f9:eb:b3:74:e0:56:d7:
a8:99:87:49:34:b0:71:26:80:e6:ae:f9:cd:d8:3a:
e6:23:ec:86:b0:b1:f9:d6:69:c2:83:96:c3:f3:25:
a7:98:9d:e6:46:9b:c8:f7:0e:e2:86:b6:3d:78:f8:
61:d6:9d:8d:84:03:33:08:25:90:46:9a:51:bf:13:
fa:5a:0a:2b:d4:2a:a7:05:d6:54:b0:82:11:cd:a7:
b5:da:4e:78:49:45:90:ce:81:39:f8:bd:4d:2f:7b:
7b:42:da:23:6b:da:59:95:59:40:7a:e2:58:2b:04:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:37:38:0C:9F:1E:BA:95:AC:34:B3:BF:92:5F:2B:35:46:7A:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e683OAyfHrqVrDSzv5JfKzVGemQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.10.0/24
151.243.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:50:d3:1d:8b:e5:09:c4:c4:99:2a:1c:95:d3:18:d0:57:ca:
b9:89:3a:e4:b6:0c:0d:43:e9:e3:b1:3c:f6:af:10:84:f2:a4:
9e:d8:d6:46:83:e0:cf:77:34:70:01:7b:a4:8d:73:46:97:04:
47:2f:01:00:75:ad:c5:2d:4c:39:cb:1c:13:4c:8e:fa:f3:c0:
e0:a1:8b:85:05:c3:a9:a4:7e:df:dc:a1:29:51:15:85:15:98:
21:49:1a:96:5f:2e:49:2e:76:bc:6c:d4:b3:4c:20:e5:86:bc:
5f:62:b5:89:c7:c9:d8:72:ce:f1:6c:c2:97:e3:14:4d:2e:d7:
1c:02:5f:02:c8:1e:9a:8b:97:9b:15:53:4f:49:b2:cb:83:04:
f9:7d:97:7f:55:86:ce:29:28:61:4e:50:3a:d0:8d:0e:3f:5c:
8c:71:d0:b0:3a:b9:5c:cb:0a:3c:e1:48:d9:ee:7d:f9:cc:d6:
c6:b2:2a:18:b0:14:51:2b:91:24:71:6c:96:f3:64:8d:df:c3:
f0:49:64:37:6b:77:a7:ad:6f:22:fa:32:ac:ac:57:bc:d7:0f:
57:ff:98:38:f2:f0:aa:c0:1c:29:e2:07:84:26:58:aa:30:54:
f5:c5:5b:19:fd:f2:e0:6e:59:e4:8c:8b:ce:b3:3d:35:2b:cf:
c7:97:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:45:45 2025 by rpki-client