Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hjuuqNObLv4G5rcnivuGT1kKsNk.roa
File: hjuuqNObLv4G5rcnivuGT1kKsNk.roa (raw, json)
Hash identifier: ZjGLL1EUq8wsfv1ONGo/1oVZfhQeWCkM4To1yrFtMCQ=
Subject key identifier: 86:3B:AE:A8:D3:9B:2E:FE:06:E6:B7:27:8A:FB:86:4F:59:0A:B0:D9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01951D933B67348B1F35834716700C7FEAAB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hjuuqNObLv4G5rcnivuGT1kKsNk.roa
Signing time: Wed 19 Feb 2025 09:39:02 +0000
ROA not before: Wed 19 Feb 2025 09:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56594
IP address blocks: 151.243.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:93:3b:67:34:8b:1f:35:83:47:16:70:0c:7f:ea:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 19 09:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=863baea8d39b2efe06e6b7278afb864f590ab0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:4d:a7:3b:4b:07:77:d1:96:43:4b:fe:5a:
16:bd:41:66:95:39:88:ce:9b:e4:00:48:61:a9:68:
e5:5c:30:71:d7:75:a9:3b:ec:95:0f:40:4b:93:e2:
dc:47:1c:84:76:38:ab:39:a0:e0:49:36:0f:1c:38:
94:da:71:df:9b:8e:b5:f5:b6:e3:f6:24:53:6c:d2:
93:a6:2f:00:e9:e6:ee:90:66:4d:bc:2e:4c:5c:e0:
7d:7a:6b:90:50:31:e7:19:d3:94:5e:ce:0f:52:c6:
64:dd:4f:1a:9b:5f:80:ad:7c:d1:d3:35:fa:11:36:
6d:20:c3:4a:6c:60:82:43:17:40:7e:98:19:65:ea:
ce:45:c0:f3:25:3c:c1:e1:b7:79:41:f6:12:71:ae:
67:a6:17:50:78:f8:13:ba:77:e3:6d:ca:66:c3:55:
9b:6b:e8:37:31:fc:59:78:62:8a:1c:32:ba:46:3a:
f5:a8:d2:38:99:34:5c:43:0c:b3:9b:ef:27:37:ca:
85:48:93:a9:13:42:47:1c:28:c1:7b:03:0a:4a:80:
8f:b6:e1:77:bc:1c:76:c7:ab:fb:26:79:7a:bf:14:
8a:d9:72:90:1e:44:bb:90:c6:c9:a2:41:9c:0e:c7:
76:44:15:b5:03:ee:e5:32:b3:e3:cf:6a:9e:10:0e:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:AE:A8:D3:9B:2E:FE:06:E6:B7:27:8A:FB:86:4F:59:0A:B0:D9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hjuuqNObLv4G5rcnivuGT1kKsNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:6a:e0:d5:c5:ad:31:d4:a7:bd:fd:a8:2b:2f:a9:c2:75:8c:
64:8d:ca:08:fe:a0:5d:e7:19:cb:d6:2c:55:5b:c7:79:86:7e:
2e:6b:a3:fb:fc:9f:8b:e1:bc:1e:b5:89:d4:e6:dc:fe:2d:d7:
88:99:6a:da:84:47:01:46:a4:b0:32:0e:3a:a2:e3:6c:91:ea:
1e:02:82:86:1c:39:3c:97:b3:54:ed:89:d9:09:9d:f0:c0:0a:
d3:59:9c:73:37:2d:12:d6:1a:b1:3f:95:d2:49:84:83:b3:c8:
5e:b2:55:4d:c7:b6:03:e8:04:fa:90:bd:51:62:73:3b:20:d9:
f1:9e:15:75:3e:5f:58:30:ff:5c:74:00:c7:71:ac:12:d5:14:
44:0c:6e:bb:b7:99:56:64:52:3b:af:7d:d2:a1:90:9d:42:2a:
50:e8:5e:85:2f:ae:d8:4e:3b:15:fe:c9:7d:17:cb:68:27:68:
a3:68:66:b6:72:36:28:75:39:af:1f:9e:3a:c7:03:d5:03:cf:
ed:72:a0:67:25:b3:86:ff:3b:17:10:dc:2a:8e:19:25:5b:86:
6d:10:b0:c5:d0:81:d2:d9:0c:d8:39:11:a3:e1:68:ca:7b:c3:
3f:cb:6e:8d:3f:9a:6e:97:2b:74:ae:39:87:56:4e:14:33:32:
1c:20:a0:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUdkztnNIsfNYNHFnAMf+qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMjE5MDkzOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjNiYWVhOGQzOWIyZWZlMDZlNmI3Mjc4YWZiODY0ZjU5MGFiMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFRNpztLB3fRlkNL/loWvUFmlTmI
zpvkAEhhqWjlXDBx13WpO+yVD0BLk+LcRxyEdjirOaDgSTYPHDiU2nHfm4619bbj
9iRTbNKTpi8A6ebukGZNvC5MXOB9emuQUDHnGdOUXs4PUsZk3U8am1+ArXzR0zX6
ETZtIMNKbGCCQxdAfpgZZerORcDzJTzB4bd5QfYSca5nphdQePgTunfjbcpmw1Wb
a+g3MfxZeGKKHDK6Rjr1qNI4mTRcQwyzm+8nN8qFSJOpE0JHHCjBewMKSoCPtuF3
vBx2x6v7Jnl6vxSK2XKQHkS7kMbJokGcDsd2RBW1A+7lMrPjz2qeEA7qjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIY7rqjTmy7+Bua3J4r7hk9ZCrDZMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaGp1dXFOT2JMdjRHNXJjbml2dUdUMWtLc05rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/NRMA0G
CSqGSIb3DQEBCwUAA4IBAQC1auDVxa0x1Ke9/agrL6nCdYxkjcoI/qBd5xnL1ixV
W8d5hn4ua6P7/J+L4bwetYnU5tz+LdeImWrahEcBRqSwMg46ouNskeoeAoKGHDk8
l7NU7YnZCZ3wwArTWZxzNy0S1hqxP5XSSYSDs8heslVNx7YD6AT6kL1RYnM7INnx
nhV1Pl9YMP9cdADHcawS1RREDG67t5lWZFI7r33SoZCdQipQ6F6FL67YTjsV/sl9
F8toJ2ijaGa2cjYodTmvH546xwPVA8/tcqBnJbOG/zsXENwqjhklW4ZtELDF0IHS
2QzYORGj4WjKe8M/y26NP5pulyt0rjmHVk4UMzIcIKBq
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:38 2025 by rpki-client