Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qGLXUr7zXZwpRtJXOFKu5u0ZeKw.roa
File: qGLXUr7zXZwpRtJXOFKu5u0ZeKw.roa (raw, json)
Hash identifier: eY0QRbaJI2dKfDvRB6iret46iFHnJh+Xig+/xOL5u2Y=
Subject key identifier: A8:62:D7:52:BE:F3:5D:9C:29:46:D2:57:38:52:AE:E6:ED:19:78:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196E282E2DC0FBCB1ADC9C1E68EC2709F63
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qGLXUr7zXZwpRtJXOFKu5u0ZeKw.roa
Signing time: Sun 18 May 2025 08:29:10 +0000
ROA not before: Sun 18 May 2025 08:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136359
IP address blocks: 151.243.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e2:82:e2:dc:0f:bc:b1:ad:c9:c1:e6:8e:c2:70:9f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 18 08:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a862d752bef35d9c2946d2573852aee6ed1978ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:71:a6:28:c3:01:59:d7:c2:f3:ac:ba:50:
e3:cc:92:de:59:78:91:6c:c1:2b:9a:e6:8f:2c:ce:
4b:fe:c6:b3:f4:50:37:7c:f9:af:59:ea:20:07:6c:
f8:83:32:a3:69:62:1a:4b:e5:c5:8d:ab:75:f8:cb:
92:9a:d8:e6:f3:35:0a:da:91:bb:0d:1c:0e:37:97:
31:e8:ac:60:7a:7a:75:87:58:b0:d2:5c:8a:99:de:
dd:d0:be:d1:ca:7b:0a:1f:48:4c:15:a3:ed:dc:b6:
73:28:09:8e:0c:1b:dd:a4:66:a2:95:6c:46:28:55:
65:20:51:2f:78:f3:6e:7c:f3:cb:7f:cd:67:83:64:
06:61:3b:2a:48:fd:48:ed:95:28:0f:e8:21:e2:ed:
f4:ef:bd:4c:7f:73:73:7e:26:f6:4d:c6:80:3a:aa:
98:72:76:b5:5e:8f:05:10:0d:71:9f:d6:a1:ab:66:
1d:72:0e:9b:6b:a5:7a:04:d2:7f:52:55:b6:b6:be:
a5:49:e9:bd:30:5b:c9:0f:ca:f7:a6:fe:72:94:d3:
37:f0:55:cf:47:83:52:ab:84:cb:df:1f:46:96:42:
af:7e:93:59:99:14:9c:87:5e:05:8b:b5:bb:68:c6:
b1:fd:44:dd:0d:8c:af:d8:22:53:a1:19:75:af:98:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:62:D7:52:BE:F3:5D:9C:29:46:D2:57:38:52:AE:E6:ED:19:78:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qGLXUr7zXZwpRtJXOFKu5u0ZeKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.44.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6c:4f:c9:bc:8d:fe:92:15:0c:db:20:6d:e6:23:be:67:76:
a1:0e:71:8a:2b:11:8f:ee:03:5e:22:fc:a6:4d:4e:11:12:77:
69:8e:0f:a8:99:cd:34:a7:6f:e6:db:79:db:91:03:13:4e:52:
77:88:14:28:66:ef:bb:e1:dd:cf:b4:e9:f9:27:0c:3f:d5:ea:
a7:45:0b:80:ae:c6:37:7b:49:3b:06:3a:5d:1a:a5:5c:6b:ce:
22:f6:3e:63:a7:6b:1a:6f:84:c4:39:96:c1:f6:8c:21:8e:4c:
47:b8:a5:99:00:6a:4e:61:a2:08:ec:90:8b:78:83:82:97:3a:
84:14:5e:62:c3:fe:35:77:e0:ee:73:a9:30:45:f7:50:ea:e6:
c3:4e:cf:c1:76:6c:13:24:6a:c6:7c:0b:9c:c0:b9:8f:4c:f8:
2d:ac:b8:7b:01:5d:c3:73:8d:91:1f:df:b5:75:13:10:66:18:
fb:d6:5c:4a:70:0f:6f:75:2e:2a:73:f4:39:ca:31:f6:d3:e5:
47:02:94:a6:75:6c:9e:ed:d6:7d:5a:81:85:41:88:fa:34:85:
6a:a9:c6:24:7c:05:e8:da:89:5f:68:5a:c7:58:97:52:27:d3:
2e:70:7a:4c:77:83:fd:06:c4:61:41:e0:cd:3c:76:3d:e4:b9:
3d:90:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:42 2025 by rpki-client