Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rTr8Ax0IROLrFimny5ZJUB_tRXM.roa
File: rTr8Ax0IROLrFimny5ZJUB_tRXM.roa (raw, json)
Hash identifier: yRJQGcMSG4N370Y/MmWul9qXSHHHjzUR+zeUnSh6oog=
Subject key identifier: AD:3A:FC:03:1D:08:44:E2:EB:16:29:A7:CB:96:49:50:1F:ED:45:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195A8DA19FB5ADB0AE737726D6B42BF3050
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rTr8Ax0IROLrFimny5ZJUB_tRXM.roa
Signing time: Tue 18 Mar 2025 10:43:40 +0000
ROA not before: Tue 18 Mar 2025 10:43:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 151.243.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:da:19:fb:5a:db:0a:e7:37:72:6d:6b:42:bf:30:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 18 10:43:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad3afc031d0844e2eb1629a7cb9649501fed4573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:88:ff:9e:13:b2:30:40:c7:92:bf:a2:d7:
0b:47:a9:c1:2f:24:15:9d:9c:3b:ce:e3:59:37:46:
67:58:6f:da:4e:47:33:01:ed:ab:21:4d:d9:27:63:
ea:bb:f3:21:db:e6:10:e4:73:16:9c:5d:78:a8:72:
83:bc:82:9d:c9:ea:2c:ea:32:b6:0a:5f:10:65:db:
a8:68:5d:c2:1b:05:be:7d:91:c3:fd:da:7d:2c:b7:
c0:18:50:e6:73:9a:da:69:a8:b6:6a:ac:31:0c:f4:
d6:18:0d:fa:c8:46:e9:f9:c6:7e:ef:c1:dd:41:78:
5e:fc:63:41:c1:78:fd:c2:b0:51:b2:7b:10:9b:5d:
a8:b8:61:5a:bc:ea:2e:7f:87:9b:e6:79:89:e7:44:
13:c0:a6:ab:35:35:aa:d9:01:61:d9:00:f3:35:bc:
ef:16:35:80:6e:53:79:27:cb:f1:ae:6e:24:bc:9a:
9e:35:fb:9d:f0:2b:e4:69:a0:cc:ae:3f:b4:8b:60:
28:5e:50:9c:1a:48:66:b7:9a:97:44:21:e1:37:04:
ab:0b:34:90:a5:af:01:61:9d:f8:90:ad:19:dd:56:
cd:4b:a4:98:01:34:68:14:79:52:1c:83:89:ef:bb:
e4:34:94:90:85:9c:e8:89:9c:20:cf:93:6f:97:32:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3A:FC:03:1D:08:44:E2:EB:16:29:A7:CB:96:49:50:1F:ED:45:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rTr8Ax0IROLrFimny5ZJUB_tRXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.206.0/23
Signature Algorithm: sha256WithRSAEncryption
12:0c:e6:be:1a:62:fb:de:5f:8c:eb:eb:c5:89:82:ba:a9:ee:
a6:2b:f2:49:60:e3:c1:53:d2:b7:9d:1d:78:12:aa:3e:01:96:
01:2c:4f:f3:76:57:52:f9:7b:94:63:2b:24:a7:2a:35:a8:c2:
7d:0d:18:87:17:e5:36:d0:83:ee:49:e5:17:d5:d5:cf:36:f3:
be:ab:60:82:79:e8:5d:4d:8f:c1:19:34:66:8c:ea:f9:f9:ac:
43:65:8e:65:e3:00:f1:69:53:3e:36:58:ba:87:01:c8:8f:5b:
12:5b:30:13:7a:38:c6:29:b1:78:ef:57:d8:a2:df:2e:3b:57:
91:d5:65:90:10:08:ab:45:22:db:5a:18:c4:1e:71:b0:65:07:
4e:83:8f:8e:4b:94:d7:ed:8a:86:30:19:df:64:c0:eb:83:c1:
a6:52:6b:a0:a7:64:63:b9:97:2a:25:fc:d0:0b:47:aa:8e:2a:
11:2d:c0:40:18:33:00:b4:a5:22:40:57:22:29:fd:d0:4f:0c:
30:4e:4e:4a:31:e5:10:7d:06:e7:2d:71:32:d5:5f:20:cc:8b:
d9:9c:4c:5a:69:ec:83:f1:b2:e1:00:9b:4b:d5:40:d8:62:4e:
47:87:5c:d7:6b:6e:cb:dc:87:ab:67:db:c6:a6:12:dc:c4:45:
93:53:ff:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWo2hn7WtsK5zdybWtCvzBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzE4MTA0MzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDNhZmMwMzFkMDg0NGUyZWIxNjI5YTdjYjk2NDk1MDFmZWQ0NTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD2I/54TsjBAx5K/otcLR6nBLyQV
nZw7zuNZN0ZnWG/aTkczAe2rIU3ZJ2Pqu/Mh2+YQ5HMWnF14qHKDvIKdyeos6jK2
Cl8QZduoaF3CGwW+fZHD/dp9LLfAGFDmc5raaai2aqwxDPTWGA36yEbp+cZ+78Hd
QXhe/GNBwXj9wrBRsnsQm12ouGFavOouf4eb5nmJ50QTwKarNTWq2QFh2QDzNbzv
FjWAblN5J8vxrm4kvJqeNfud8CvkaaDMrj+0i2AoXlCcGkhmt5qXRCHhNwSrCzSQ
pa8BYZ34kK0Z3VbNS6SYATRoFHlSHIOJ77vkNJSQhZzoiZwgz5NvlzLn6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK06/AMdCETi6xYpp8uWSVAf7UVzMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvclRyOEF4MElST0xyRmltbnk1WkpVQl90UlhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/POMA0G
CSqGSIb3DQEBCwUAA4IBAQASDOa+GmL73l+M6+vFiYK6qe6mK/JJYOPBU9K3nR14
Eqo+AZYBLE/zdldS+XuUYyskpyo1qMJ9DRiHF+U20IPuSeUX1dXPNvO+q2CCeehd
TY/BGTRmjOr5+axDZY5l4wDxaVM+Nli6hwHIj1sSWzATejjGKbF471fYot8uO1eR
1WWQEAirRSLbWhjEHnGwZQdOg4+OS5TX7YqGMBnfZMDrg8GmUmugp2RjuZcqJfzQ
C0eqjioRLcBAGDMAtKUiQFciKf3QTwwwTk5KMeUQfQbnLXEy1V8gzIvZnExaaeyD
8bLhAJtL1UDYYk5Hh1zXa27L3IerZ9vGphLcxEWTU/9O
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:40 2025 by rpki-client