Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rcwK1kfW5a8bu0uRdr3ggHMmUw4.roa
File: rcwK1kfW5a8bu0uRdr3ggHMmUw4.roa (raw, json)
Hash identifier: XbKUTbtBbVhLRxj5hzBXsGeCBeBk8/UokRxOTmL71Kc=
Subject key identifier: AD:CC:0A:D6:47:D6:E5:AF:1B:BB:4B:91:76:BD:E0:80:73:26:53:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019734E51836338F597F5C528D90E101CD5F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rcwK1kfW5a8bu0uRdr3ggHMmUw4.roa
Signing time: Tue 03 Jun 2025 08:25:18 +0000
ROA not before: Tue 03 Jun 2025 08:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 151.242.86.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 19:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:e5:18:36:33:8f:59:7f:5c:52:8d:90:e1:01:cd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 08:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adcc0ad647d6e5af1bbb4b9176bde0807326530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:0d:87:e7:5d:b8:70:f7:f4:cb:2c:c9:89:
25:23:c1:64:48:05:2b:e4:18:74:a7:6a:24:79:17:
9d:18:d6:ce:d8:06:d5:ce:ef:89:62:b3:cd:34:0e:
6d:49:41:a4:c2:70:0b:6f:d3:22:c4:e3:15:fb:45:
4d:7a:03:41:86:b3:da:4b:db:5e:d9:b6:96:48:cf:
a3:0a:93:1f:11:57:11:27:e4:fa:f7:24:ae:9c:bb:
19:e5:f8:82:e7:bf:a2:cf:96:75:f8:cb:f7:bf:45:
12:f3:df:3b:ac:9b:59:10:ba:6f:b3:a4:3c:0b:4a:
ef:69:11:28:dd:20:b7:73:ef:04:86:73:39:89:a8:
67:e7:8c:b1:33:37:8d:d2:45:60:26:73:2f:43:97:
b5:4f:9e:da:4a:68:03:ce:56:92:51:54:11:80:05:
51:bf:df:75:20:dc:c7:8d:3c:3f:9e:8e:a1:6e:4e:
65:9e:df:01:75:f1:49:42:29:43:37:19:27:14:e5:
f1:e0:c4:60:ab:c5:cb:69:9f:8b:c4:a0:2e:c3:21:
54:09:1e:20:16:73:28:2e:c4:7a:b6:84:d5:9c:e7:
14:df:67:98:c1:65:88:06:94:c0:cb:9b:60:da:35:
f0:ba:75:7f:18:ed:e3:db:69:44:3d:aa:f0:f5:04:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:0A:D6:47:D6:E5:AF:1B:BB:4B:91:76:BD:E0:80:73:26:53:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rcwK1kfW5a8bu0uRdr3ggHMmUw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.86.0/24
151.243.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:82:7a:24:6f:f7:c2:25:c1:b8:a4:35:4d:74:96:5c:78:11:
f2:71:e9:7e:09:2e:3d:34:bb:ec:d5:4a:52:60:6c:6a:d9:5a:
7f:dd:02:3d:13:68:eb:1c:46:5d:d1:df:84:a1:59:f9:01:0c:
0c:5d:51:72:e4:3c:2c:62:a5:33:97:f6:77:bd:01:35:a9:c1:
2a:48:11:92:f1:34:e7:67:7c:59:25:97:3d:7a:f7:b1:87:b1:
94:7a:cf:77:0b:7d:e8:51:41:6d:ed:b2:41:8c:f1:bd:79:c6:
bb:56:0f:69:a8:cd:c8:42:cf:78:ff:b3:2c:ee:74:30:52:3a:
2f:0d:f4:c5:f6:14:b6:92:b2:82:3c:59:f8:25:8b:d0:f7:42:
1d:55:4e:29:09:ff:46:89:2b:0b:d3:15:e8:6b:a7:e0:f1:62:
7e:a1:f7:a8:1e:c9:93:1d:65:24:0c:bc:aa:ec:3e:4b:b0:a7:
ba:d8:26:7e:1c:b5:a4:f4:c6:4d:75:55:cd:31:89:e9:47:e6:
98:a8:78:8c:73:60:df:48:a0:70:6f:2c:65:37:7a:22:48:87:
97:29:3c:82:bd:39:88:91:19:9e:2d:22:24:fa:17:50:f9:e4:
a8:b6:59:7e:0c:16:f4:b3:11:3d:9a:af:4a:8c:8b:6f:8b:73:
fc:38:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:47:24 2025 by rpki-client