Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oc5h2YnKd3i6jS8S8s5KeYoEixw.roa
File: oc5h2YnKd3i6jS8S8s5KeYoEixw.roa (raw, json)
Hash identifier: R8+enzLq79CtgjJ04AJaQPV9X29NzbDuwVnB03EPj8Y=
Subject key identifier: A1:CE:61:D9:89:CA:77:78:BA:8D:2F:12:F2:CE:4A:79:8A:04:8B:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F92D44099E357004BAA58EB028C9A894
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oc5h2YnKd3i6jS8S8s5KeYoEixw.roa
Signing time: Thu 22 May 2025 18:06:55 +0000
ROA not before: Thu 22 May 2025 18:06:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401243
IP address blocks: 151.242.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:2d:44:09:9e:35:70:04:ba:a5:8e:b0:28:c9:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:06:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1ce61d989ca7778ba8d2f12f2ce4a798a048b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:83:9c:f8:24:f5:ad:93:7d:e9:94:53:a0:
a6:75:ec:71:e1:f9:ad:16:cb:e3:56:ac:49:3f:14:
45:ca:16:a9:9e:ac:7b:9c:a7:d0:f4:98:07:39:26:
f7:12:fd:c0:41:ee:d4:cd:fb:58:ec:f0:83:a8:8b:
fd:ac:66:da:b9:2d:36:a6:77:a9:4c:9d:f4:2c:0f:
64:85:d0:60:53:cd:95:68:a9:8b:73:cb:f6:04:f7:
2f:4a:13:02:c0:36:d4:3f:2e:50:04:2c:48:ea:83:
05:83:df:59:3e:50:3d:8b:38:44:2d:59:1d:d2:af:
0f:86:66:32:c4:56:fb:3f:d3:44:9b:04:d7:65:0e:
18:e8:c9:b3:87:e6:e0:60:5e:82:bd:95:94:8d:83:
68:45:56:b5:49:24:3d:96:45:4d:de:76:5c:e3:18:
c1:de:6a:5e:d1:03:2c:b4:68:5a:80:9c:f9:fa:2e:
1a:e5:e5:18:59:ba:2e:62:c6:f5:45:dc:46:89:4f:
86:7f:58:f2:12:f9:c6:92:ae:a2:51:d2:e1:f8:89:
c5:19:66:e6:77:ea:94:42:69:0e:19:68:54:c0:98:
f2:8a:f1:fe:e0:cc:d7:ff:5f:0e:00:60:d5:41:61:
e5:a0:57:ea:c1:83:86:a5:cb:9f:73:7e:17:38:e7:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:61:D9:89:CA:77:78:BA:8D:2F:12:F2:CE:4A:79:8A:04:8B:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oc5h2YnKd3i6jS8S8s5KeYoEixw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.36.0/24
Signature Algorithm: sha256WithRSAEncryption
07:49:c8:a1:3e:5a:dd:73:ea:6e:82:41:cd:53:fc:96:7b:95:
89:ee:82:b7:d2:98:92:29:a0:a4:45:09:ba:8e:2c:13:22:73:
5b:a5:7d:c5:40:31:9d:e2:14:17:94:24:6b:24:03:6a:de:1f:
e2:dc:d8:b2:d4:94:e8:31:a0:41:83:98:0a:d3:a2:e9:e7:a2:
56:d4:cd:b7:a0:f6:29:cf:a1:6f:cc:69:d0:13:24:d3:fe:0e:
a2:c2:b5:d5:d1:66:ae:c1:f7:51:3b:3b:a3:86:b4:a9:b9:21:
2d:f3:f2:af:87:2e:54:5a:23:8e:72:92:73:94:ab:28:80:2e:
d5:cb:70:b9:9f:de:9c:7a:34:84:1b:ae:cc:bb:01:3c:b4:36:
d8:6b:04:42:8c:52:c8:5b:51:3d:cc:3e:60:1c:8c:0d:ac:5e:
2c:28:8b:45:a0:90:a1:0b:9b:08:fb:d2:b2:7b:56:96:ec:c1:
7a:37:cb:9c:d4:c4:93:af:bc:43:f1:31:74:0c:c7:a1:54:e0:
49:1b:db:da:7b:87:07:cf:9c:85:44:27:5e:12:6f:16:3f:7e:
6a:8a:16:58:b2:4b:d4:f3:a6:db:68:77:14:c2:45:9e:7b:53:
84:3b:a5:65:0e:86:a2:e6:18:4d:63:05:5b:a5:76:9a:6c:a6:
75:c6:bd:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb5LUQJnjVwBLqljrAoyaiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTIyMTgwNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWNlNjFkOTg5Y2E3Nzc4YmE4ZDJmMTJmMmNlNGE3OThhMDQ4YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BaDnPgk9a2TfemUU6Cmdexx4fmt
FsvjVqxJPxRFyhapnqx7nKfQ9JgHOSb3Ev3AQe7UzftY7PCDqIv9rGbauS02pnep
TJ30LA9khdBgU82VaKmLc8v2BPcvShMCwDbUPy5QBCxI6oMFg99ZPlA9izhELVkd
0q8PhmYyxFb7P9NEmwTXZQ4Y6Mmzh+bgYF6CvZWUjYNoRVa1SSQ9lkVN3nZc4xjB
3mpe0QMstGhagJz5+i4a5eUYWbouYsb1RdxGiU+Gf1jyEvnGkq6iUdLh+InFGWbm
d+qUQmkOGWhUwJjyivH+4MzX/18OAGDVQWHloFfqwYOGpcufc34XOOdSOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHOYdmJynd4uo0vEvLOSnmKBIscMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb2M1aDJZbktkM2k2alM4UzhzNUtlWW9FaXh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IkMA0G
CSqGSIb3DQEBCwUAA4IBAQAHScihPlrdc+pugkHNU/yWe5WJ7oK30piSKaCkRQm6
jiwTInNbpX3FQDGd4hQXlCRrJANq3h/i3Niy1JToMaBBg5gK06Lp56JW1M23oPYp
z6FvzGnQEyTT/g6iwrXV0WauwfdROzujhrSpuSEt8/Kvhy5UWiOOcpJzlKsogC7V
y3C5n96cejSEG67MuwE8tDbYawRCjFLIW1E9zD5gHIwNrF4sKItFoJChC5sI+9Ky
e1aW7MF6N8uc1MSTr7xD8TF0DMehVOBJG9vae4cHz5yFRCdeEm8WP35qihZYskvU
86bbaHcUwkWee1OEO6VlDoai5hhNYwVbpXaabKZ1xr0r
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:44:22 2025 by rpki-client