Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lOMkAn3p7itqCHBeeXlxxaphM6c.roa
File: lOMkAn3p7itqCHBeeXlxxaphM6c.roa (raw, json)
Hash identifier: cMYJno9lroXT4DTdXozCFKGSWvSrqRJvLivdgKAVt44=
Subject key identifier: 94:E3:24:02:7D:E9:EE:2B:6A:08:70:5E:79:79:71:C5:AA:61:33:A7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194A0D208236D088C44F5B3248B4D550F95
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lOMkAn3p7itqCHBeeXlxxaphM6c.roa
Signing time: Sun 26 Jan 2025 04:15:06 +0000
ROA not before: Sun 26 Jan 2025 04:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141968
IP address blocks: 151.243.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a0:d2:08:23:6d:08:8c:44:f5:b3:24:8b:4d:55:0f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 26 04:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94e324027de9ee2b6a08705e797971c5aa6133a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:33:3c:6a:41:a7:fc:0a:08:89:78:5c:cd:
49:a4:65:ad:48:a8:01:95:95:f9:d7:3e:3c:61:22:
7b:f9:01:ec:fd:28:6e:0b:31:05:29:4f:bc:68:49:
03:d9:61:93:05:e0:19:e1:0e:85:d4:79:0f:5f:12:
01:ab:a8:0f:16:ca:35:02:8b:fe:c1:cd:fe:09:97:
a4:e3:1e:48:6c:96:57:b6:31:48:49:cf:e5:ab:00:
c2:cf:6a:6d:20:9e:6a:97:0c:32:49:3f:42:e2:52:
b5:92:93:e1:d5:5e:c7:30:cf:45:3c:ed:71:a0:40:
14:55:2f:3e:8d:a8:77:26:4a:3c:31:fd:45:d8:ce:
1c:f9:8e:d3:9f:e3:c1:7e:ea:c8:9b:65:e0:10:27:
29:26:b9:1e:22:d6:c6:e1:1c:fc:89:19:e5:5b:fe:
a1:ce:b6:6c:aa:c6:0e:16:4a:74:c0:74:87:0e:f6:
9a:8c:21:8f:16:1d:ed:6c:e2:fd:b1:00:e4:af:5b:
81:a9:b4:17:ad:a6:70:6a:6e:01:c0:e2:0c:f3:7b:
8c:48:9b:44:3d:79:89:69:c5:ab:1f:d1:16:d5:81:
ad:a6:a2:52:0f:2c:7d:2c:60:d2:ab:70:33:7c:72:
51:84:21:4e:2d:37:06:0b:ee:3b:db:f5:54:bb:cd:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:24:02:7D:E9:EE:2B:6A:08:70:5E:79:79:71:C5:AA:61:33:A7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lOMkAn3p7itqCHBeeXlxxaphM6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.222.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ee:d0:95:c8:5b:6d:99:96:fd:e6:db:a4:87:09:6b:a1:f4:
8f:7e:e3:2c:82:39:88:ac:a4:94:3f:69:f3:70:80:dd:9f:6f:
f7:fe:bd:71:c9:27:91:50:b7:5e:77:37:a2:01:16:cb:81:b7:
c9:da:4e:65:c7:09:7a:33:f9:04:02:16:1d:7c:71:97:38:19:
c6:6e:14:9f:42:ea:bd:db:18:08:4f:9e:c0:67:b0:4e:cf:36:
19:d3:d4:e5:66:fb:c7:2a:98:e4:6b:2b:24:f8:b4:8b:9c:ee:
fc:6d:48:6d:b6:ac:63:57:9f:49:54:b1:da:f8:be:80:01:a6:
62:df:7c:21:5e:13:56:c0:6c:fb:6d:13:d7:fc:9a:4f:af:4b:
aa:cd:10:9e:47:1b:ba:e5:50:a0:a1:f0:d8:84:af:42:cd:f1:
4f:5f:7b:41:ed:64:a8:15:25:3b:04:af:4e:55:2c:1b:4a:cb:
a3:bb:7c:28:c8:a7:3e:9a:3b:fe:ce:b2:33:ff:2e:45:fc:6e:
9d:a7:3b:6a:00:a7:28:52:b1:5b:38:9a:71:58:d0:25:28:f3:
ee:5d:7b:20:1b:e9:30:52:6d:f9:d3:e1:81:66:8b:56:39:f9:
f2:d6:d3:f9:2c:b2:f4:c5:f0:d7:aa:52:dd:61:e0:7f:d8:07:
c8:4c:05:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:02 2025 by rpki-client