Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eOfaCR96m_eSG-XWmgldmT0-ovM.roa
File: eOfaCR96m_eSG-XWmgldmT0-ovM.roa (raw, json)
Hash identifier: v2hIL4sapGuNslLeoI8Sw1v+YC0D8fhOra+gpX355Zw=
Subject key identifier: 78:E7:DA:09:1F:7A:9B:F7:92:1B:E5:D6:9A:09:5D:99:3D:3E:A2:F3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197406398FAD2FB443E37BE8210D4BE8808
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eOfaCR96m_eSG-XWmgldmT0-ovM.roa
Signing time: Thu 05 Jun 2025 13:59:18 +0000
ROA not before: Thu 05 Jun 2025 13:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207992
IP address blocks: 151.240.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:63:98:fa:d2:fb:44:3e:37:be:82:10:d4:be:88:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 5 13:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e7da091f7a9bf7921be5d69a095d993d3ea2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:73:9b:ef:d7:03:c2:07:08:12:28:35:35:
d9:2f:90:a2:58:48:fa:c9:b2:2f:9a:7f:88:38:36:
0d:66:29:1a:48:65:0d:5f:f4:04:07:1e:3b:49:1d:
c0:88:e5:f2:da:18:0d:5d:b8:dd:96:7b:89:ac:8b:
68:e6:38:71:05:17:bc:ea:18:ed:e5:81:0b:a0:38:
4f:06:a5:2c:ca:c3:7c:f2:9a:f1:3e:ff:02:be:08:
c5:a2:58:d9:ac:34:2c:e6:7e:ae:b8:e2:4a:8d:09:
07:5c:ed:bc:26:8d:0e:bb:a5:1f:1e:e8:a0:8a:c4:
fb:9a:b7:ec:72:fa:2b:f8:3d:c6:8e:de:3e:40:16:
35:e8:68:26:64:99:fb:12:53:cb:da:33:34:66:10:
08:1c:74:e8:77:53:e8:50:9b:94:03:40:42:f5:37:
30:ef:b9:88:20:b9:ee:28:c2:c3:eb:64:3b:d9:e0:
a8:3a:69:cd:2d:79:6d:b3:6f:03:7d:bc:e4:b3:81:
c7:85:c1:b0:ee:36:96:7a:e9:25:ff:a2:96:78:f7:
4b:fb:1d:b4:11:a9:ff:53:bb:81:ab:7c:66:f7:04:
ee:0f:96:68:be:f5:1f:7f:36:8d:d8:3b:50:c2:2a:
8a:a5:9f:b3:eb:93:6e:c5:5a:c3:7e:ca:91:0e:21:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:DA:09:1F:7A:9B:F7:92:1B:E5:D6:9A:09:5D:99:3D:3E:A2:F3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eOfaCR96m_eSG-XWmgldmT0-ovM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.19.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d4:82:37:98:fc:f6:b4:f4:34:a8:08:55:1d:79:20:84:87:
5c:59:9e:58:fb:4d:88:c8:d0:c3:52:f1:d8:74:c9:3d:9c:a6:
7b:b1:6a:3a:88:18:8c:55:8a:9c:96:51:5f:99:63:7d:27:cd:
5c:c1:6a:f7:83:a2:7c:33:f7:24:7c:83:d3:6b:00:61:7f:f5:
34:0e:3c:f7:cd:34:10:c1:79:30:14:c1:fe:5a:ba:2a:f8:a5:
8a:d6:32:ec:f4:98:33:bc:8f:db:5b:ba:04:88:b8:0d:41:f4:
af:1f:78:63:fb:bd:32:f0:59:cf:61:73:72:18:13:48:9c:62:
ec:55:2d:88:7f:85:70:98:1f:e7:28:84:7f:fc:96:d4:ff:ed:
6e:57:c2:35:4d:ef:59:e0:18:91:63:7b:ec:20:53:0a:c5:6d:
4e:d2:45:ca:fc:6a:79:48:f9:0c:eb:52:26:19:cc:be:fb:56:
59:81:e5:e3:3a:fc:2d:00:57:ae:46:8d:2b:cc:9c:77:a2:ea:
55:5e:c1:5b:9c:52:44:95:e6:f3:e1:a7:f6:5a:6e:c5:ea:9a:
25:61:77:ca:a0:ca:56:61:f3:1b:07:a1:2e:d0:4a:61:a1:41:
22:87:86:3f:16:4e:d5:1f:ac:0e:85:04:be:b9:ed:eb:89:92:
9c:ff:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:57:55 2025 by rpki-client