Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/erK91yBiA8BpLaUmh-7GZm_deeE.roa
File: erK91yBiA8BpLaUmh-7GZm_deeE.roa (raw, json)
Hash identifier: SgARSJl4W78G9NKfIyrzFASIkBG13l+KIoCQ+xKc6kU=
Subject key identifier: 7A:B2:BD:D7:20:62:03:C0:69:2D:A5:26:87:EE:C6:66:6F:DD:79:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019590CB7D955060AD8074B84BCEC6437BD3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/erK91yBiA8BpLaUmh-7GZm_deeE.roa
Signing time: Thu 13 Mar 2025 18:36:49 +0000
ROA not before: Thu 13 Mar 2025 18:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214730
IP address blocks: 151.242.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:cb:7d:95:50:60:ad:80:74:b8:4b:ce:c6:43:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 13 18:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ab2bdd7206203c0692da52687eec6666fdd79e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:0d:e3:8f:81:ba:72:02:ea:f0:b7:ce:3d:
57:28:19:06:3d:8e:b2:cf:9a:4d:89:24:c9:8a:0a:
7b:3f:3c:81:c2:8f:81:8a:f2:1c:2e:3e:1a:60:0a:
67:9e:a3:98:3a:e3:20:4e:cd:29:9d:22:7a:d7:ce:
88:b7:a1:d4:17:07:bc:85:1c:bc:93:fb:b1:22:02:
38:9d:fa:0a:cd:1d:4b:a1:05:dd:87:e0:0b:c8:03:
a2:37:2e:56:b6:31:de:e6:8a:96:53:ac:fd:db:37:
f0:5a:cf:9c:ea:6b:9d:cb:a1:39:73:b0:56:73:92:
7f:de:10:c2:5b:f1:45:3d:6f:8b:93:05:94:3b:00:
68:bd:37:09:b7:f3:ed:e4:91:68:eb:3d:d0:75:4c:
c8:68:27:4e:22:80:6b:1f:3c:69:88:c7:55:52:1d:
ed:35:03:8f:bf:49:43:c8:e6:18:10:83:73:fe:8a:
63:4f:63:7f:2c:b5:79:5b:5d:af:93:98:44:16:f1:
7d:16:8a:e3:a2:6f:51:56:55:ca:9a:84:9b:ad:ff:
45:81:53:96:75:b7:fa:b4:92:cc:cb:6d:6a:71:c9:
e7:45:98:3d:bf:96:57:3d:7f:69:5b:6b:40:67:e5:
62:9f:c1:e4:fd:b5:5a:3f:53:42:56:3a:1a:17:24:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:BD:D7:20:62:03:C0:69:2D:A5:26:87:EE:C6:66:6F:DD:79:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/erK91yBiA8BpLaUmh-7GZm_deeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
af:41:30:c0:49:f8:e5:69:0c:48:50:1d:a2:95:98:53:fa:14:
73:6d:1f:6c:dd:16:da:4c:cc:f1:83:fc:db:6c:92:ee:7a:ab:
30:d4:75:c5:4e:96:0e:bd:a6:0e:da:31:2e:9a:9a:28:b7:b5:
b2:e3:77:a6:03:91:ef:35:78:e0:4c:bb:e4:33:77:58:4f:d9:
9b:fc:8d:9f:32:16:a1:93:5b:1d:af:d0:94:f0:92:88:05:86:
ab:86:dd:ed:04:d2:b8:a2:c9:ce:b3:4b:7c:80:07:e3:28:7b:
f1:e6:39:41:fa:09:7c:8a:f1:e3:9f:f3:b9:99:41:3d:f4:31:
25:ef:03:55:6f:d5:f9:0e:6c:33:01:35:06:ff:eb:c2:44:e2:
bb:82:f4:c2:53:c6:79:6b:c3:f3:a2:cc:74:73:b5:1d:d3:79:
80:cf:b5:50:ee:be:be:70:db:be:2b:73:4c:c5:1c:43:93:61:
01:df:80:88:3a:e9:02:a8:c9:0a:d0:68:18:fa:5f:75:cd:81:
42:09:e4:0f:5b:b2:40:ac:52:02:ca:59:6b:ce:17:c1:84:5d:
19:c5:54:e7:d2:e0:68:5c:ca:51:6a:a5:92:99:d0:fb:01:8c:
09:b9:c1:a8:42:57:33:d8:2a:45:bf:2f:9e:68:70:45:a5:e0:
20:73:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:57 2025 by rpki-client