Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qJpv61jiMhWbh0-YBV72Unfxk9g.roa
File: qJpv61jiMhWbh0-YBV72Unfxk9g.roa (raw, json)
Hash identifier: 67rAeZvLRul8Cbfh7JFkOjOkAfzYv8x6mKbbv3njJEE=
Subject key identifier: A8:9A:6F:EB:58:E2:32:15:9B:87:4F:98:05:5E:F6:52:77:F1:93:D8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7AE8B379E1BDBF890E2C9ACFD3020
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qJpv61jiMhWbh0-YBV72Unfxk9g.roa
Signing time: Wed 01 Jan 2025 21:48:44 +0000
ROA not before: Wed 01 Jan 2025 21:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 151.243.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ae:8b:37:9e:1b:db:f8:90:e2:c9:ac:fd:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89a6feb58e232159b874f98055ef65277f193d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:fc:41:14:4f:90:80:3d:ad:58:90:61:4e:
6b:64:5c:41:eb:53:01:28:f3:0a:cf:f5:ad:5d:12:
cc:ad:f6:99:ee:1f:45:fb:81:d8:be:71:6a:c0:ee:
1b:2a:b9:c9:e8:fe:a9:a7:4b:29:ab:26:5b:60:e3:
79:4a:56:c4:96:0c:67:04:d6:68:b5:65:c2:9e:da:
bc:50:93:4b:6a:a5:2e:e7:c5:7c:1e:06:51:1d:c0:
fe:32:d9:95:62:cd:01:ba:42:1d:ff:76:c5:d8:53:
e6:5a:a0:d9:22:3c:c8:69:9a:8f:2f:e8:d6:c3:98:
01:a1:7d:6a:ee:41:93:8c:b5:3a:ad:d4:13:09:40:
93:eb:25:9a:f4:f0:7d:0b:c8:bc:7f:6b:3f:7e:a1:
e0:db:bc:0c:5f:88:b8:33:a1:d6:60:be:e2:39:aa:
c6:17:61:12:b7:08:5d:a3:1d:72:81:51:ae:fe:97:
83:61:d5:2f:8b:cd:9a:a1:f9:cf:db:e2:98:e5:43:
87:3a:5d:62:f6:9b:8e:d8:df:be:6c:54:3a:5e:80:
54:00:57:df:95:0b:1d:20:ce:e2:62:bb:6e:f4:da:
6e:97:97:52:aa:a9:e3:2b:cb:c0:67:f7:69:30:f2:
45:db:2f:e0:65:d1:f6:a8:2d:4b:40:df:a3:2a:fb:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:6F:EB:58:E2:32:15:9B:87:4F:98:05:5E:F6:52:77:F1:93:D8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qJpv61jiMhWbh0-YBV72Unfxk9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0a:b1:c1:b5:a8:cc:da:ba:20:17:af:8e:1a:14:b5:5d:72:
c1:8b:a9:02:d0:e1:73:80:2d:6b:34:52:d5:da:05:bd:9a:f7:
5f:f9:7e:24:d2:21:37:47:23:f6:1a:25:e0:30:9a:e6:30:5f:
61:a6:d1:77:bc:46:13:54:ba:88:84:23:e3:a4:56:97:c1:38:
84:0f:f2:8e:be:14:c0:bd:6f:51:d5:84:f0:60:3f:fc:60:24:
95:8e:f9:7e:28:c9:b3:cf:6b:81:f6:a4:3f:3b:46:5f:f7:23:
e1:a6:4d:98:06:7c:10:aa:a8:c1:f1:16:b4:5b:24:22:9a:57:
12:31:cc:df:88:b9:e8:d1:60:87:5a:12:98:81:33:5f:16:eb:
a6:de:1a:0c:fc:21:04:f5:80:2d:96:2e:e1:eb:d4:28:b1:77:
c3:f0:70:16:ee:2c:22:4f:19:e2:ec:83:ea:d0:4a:46:9a:4c:
47:e0:0f:3a:1d:88:3c:9b:9e:4f:97:9c:8e:78:e8:7d:89:24:
59:07:a1:09:01:60:23:bc:75:f2:23:f5:b1:ef:f9:8b:f3:5c:
53:d6:0d:5b:07:7e:f7:8e:ce:cd:fc:f0:12:fa:b5:f8:54:db:
e2:91:66:44:49:00:43:8f:8c:2c:27:9d:1c:c3:b5:d2:02:a4:
e6:4c:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client