Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eKFyuc5NMm2WXNnbQvix9cLavbo.roa
File: eKFyuc5NMm2WXNnbQvix9cLavbo.roa (raw, json)
Hash identifier: BLpNcCflwONm+E5YTKfNKS/ldF3QZ3Yt4R7SMegUnMk=
Subject key identifier: 78:A1:72:B9:CE:4D:32:6D:96:5C:D9:DB:42:F8:B1:F5:C2:DA:BD:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197406742B2F3AD1FE771B43B129055F25F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eKFyuc5NMm2WXNnbQvix9cLavbo.roa
Signing time: Thu 05 Jun 2025 14:03:18 +0000
ROA not before: Thu 05 Jun 2025 14:03:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 151.240.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:67:42:b2:f3:ad:1f:e7:71:b4:3b:12:90:55:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 5 14:03:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78a172b9ce4d326d965cd9db42f8b1f5c2dabdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:44:09:4b:bd:c5:f8:2e:e8:e3:7d:a1:82:
b1:a1:8f:91:53:1e:c6:d1:bf:cf:0b:2d:58:31:d4:
e4:7d:68:20:1e:fa:c4:ef:f0:0e:06:87:13:b8:19:
09:8b:ba:c2:bf:f0:26:c7:4e:f3:8f:b9:9f:ca:ce:
9d:1f:75:1f:ff:26:fe:7c:b9:39:d7:2b:7c:f3:f2:
9c:8d:03:5f:71:29:40:fe:37:05:57:90:94:59:2a:
24:e8:c7:4b:af:b1:1e:af:06:0c:80:4a:2b:81:06:
fd:54:da:87:45:fd:68:54:43:dd:bc:75:51:00:73:
60:9d:a6:55:8e:f6:d8:c9:9d:ec:29:3b:3a:85:87:
c8:2d:bf:8a:c6:42:63:8a:54:b4:34:e4:b7:25:ad:
a8:70:42:b5:de:fc:ab:a9:99:c7:51:2d:32:9c:2c:
90:85:cc:b1:59:48:88:d9:b4:3b:45:f7:7e:0b:96:
bc:9d:21:c8:2b:e8:af:d6:4f:4b:93:f7:79:57:33:
6c:28:65:4c:f6:10:12:b2:3f:76:c5:9d:2f:c5:53:
7b:04:db:4c:b9:da:12:7f:c7:8c:21:03:92:34:e8:
2c:ce:0c:13:b7:b3:77:ff:65:6e:dc:60:b2:99:ce:
56:3a:f6:dc:17:93:e6:07:7c:f8:d4:a2:da:9b:fc:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:72:B9:CE:4D:32:6D:96:5C:D9:DB:42:F8:B1:F5:C2:DA:BD:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eKFyuc5NMm2WXNnbQvix9cLavbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0d:17:47:de:3a:90:0c:85:82:26:f6:97:c5:43:a5:99:24:
e1:a9:64:c2:da:0a:6a:c4:fa:e8:fd:d7:96:4f:bb:f4:95:df:
65:25:44:f1:ba:c5:66:bc:f9:d5:bd:cc:19:3f:60:13:09:a0:
71:c4:4b:7b:6f:93:6b:f4:ab:37:d6:14:7a:f1:f8:19:3a:b9:
43:e5:24:65:c2:1c:fb:66:d5:a9:f2:85:46:6b:46:3a:03:25:
ec:9f:f7:36:9c:d8:83:a9:ca:1e:42:28:1e:20:74:29:e6:b1:
60:8d:8f:37:88:b3:dc:51:80:88:3e:2b:e2:4f:21:c4:3e:b6:
1f:9d:93:0f:1d:68:b7:f6:07:8d:73:6a:b9:91:cd:de:66:82:
69:43:4f:81:56:bf:e0:11:ef:33:ed:20:8f:b1:1b:52:01:ec:
cf:3c:37:9f:46:d4:60:25:c1:3f:c6:00:af:f3:03:27:ec:ca:
25:57:22:31:2d:4c:9b:ed:c6:4d:a0:71:15:a0:8a:de:f1:dd:
7f:eb:c5:e8:a7:fb:ab:d5:e3:b4:b4:fd:39:8a:35:58:ec:1c:
91:e5:9d:5c:b7:dc:a1:bd:e7:a5:6b:38:a9:11:59:0e:77:f9:
d2:1e:74:a4:af:b1:fa:0c:93:c7:50:fe:32:c3:a2:21:a4:ee:
87:3b:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:05:42 2025 by rpki-client