Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/staP_6j4tNjRzoo5F-rIR8uANwg.roa
File: staP_6j4tNjRzoo5F-rIR8uANwg.roa (raw, json)
Hash identifier: 6DwL21svrEiNBb9BQ9/INw+Y8krdctTf1qd6uZDt8io=
Subject key identifier: B2:D6:8F:FF:A8:F8:B4:D8:D1:CE:8A:39:17:EA:C8:47:CB:80:37:08
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F928AF267EBF20F76A95604BED15F82E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/staP_6j4tNjRzoo5F-rIR8uANwg.roa
Signing time: Thu 22 May 2025 18:01:55 +0000
ROA not before: Thu 22 May 2025 18:01:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47741
IP address blocks: 151.245.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 19:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:28:af:26:7e:bf:20:f7:6a:95:60:4b:ed:15:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:01:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2d68fffa8f8b4d8d1ce8a3917eac847cb803708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:e9:ea:25:95:5a:31:50:5d:cb:da:42:9f:
2c:8c:17:40:00:05:2f:fe:d7:d9:b1:cb:bc:eb:db:
f9:2a:64:43:03:b9:78:5d:59:32:a6:6f:37:c6:e8:
a2:0a:5b:fd:fa:4a:4a:e5:8e:eb:df:49:20:46:21:
07:ae:13:3e:e4:81:ec:3b:25:e6:2b:0a:5f:f6:c0:
fd:95:e9:5b:68:6b:37:0f:2d:b1:6f:33:96:c5:49:
5e:41:75:38:d3:46:b5:c8:f0:c0:d1:b6:1d:70:a1:
fe:88:ca:d4:6d:ca:e3:9d:af:c4:00:c1:7a:65:01:
c5:fa:08:2d:1e:e4:f3:39:1b:f6:c5:c5:0b:3e:68:
c7:4f:78:e3:e4:3a:b8:ae:bf:5b:20:61:64:a2:fd:
7d:37:6f:96:f9:29:57:4d:9c:54:42:56:67:9e:53:
05:cc:e7:ff:62:79:d2:06:74:2a:84:b7:59:2c:0e:
84:48:f4:63:06:e3:7f:d0:5e:f7:ee:9a:3d:07:13:
87:b5:2c:db:5c:97:dd:0a:67:82:ca:30:35:ca:bc:
9f:14:9b:88:98:85:0c:cd:7f:07:c5:af:ae:c9:72:
a8:3d:3b:57:3e:d6:f6:b5:5c:a2:fb:3e:c8:a1:10:
d5:63:b3:ae:d9:83:1f:e2:a4:42:24:5f:83:ec:83:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:8F:FF:A8:F8:B4:D8:D1:CE:8A:39:17:EA:C8:47:CB:80:37:08
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/staP_6j4tNjRzoo5F-rIR8uANwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
98:59:67:58:2b:84:c2:a0:6e:2e:9c:c3:3a:a4:d1:8d:56:02:
4a:76:25:0c:6e:a9:40:ba:5b:20:34:40:cc:33:4c:e2:db:f0:
42:6e:08:c7:35:c2:9a:6e:d1:f6:ec:cb:b5:62:0e:4d:73:df:
9d:d9:2f:d6:ff:ac:42:92:8d:f7:a7:7b:05:3b:18:3c:a2:84:
6b:8e:06:63:11:7b:7d:c5:d1:f6:3e:2f:48:f6:6a:20:e7:2d:
3b:e1:dd:90:45:b0:cc:5e:bf:b7:2a:2e:82:1a:49:17:fd:ae:
4a:f5:c9:3b:e2:d1:2c:88:17:b4:da:ea:55:99:06:33:78:4e:
f9:4f:db:74:e7:5d:0d:38:72:20:1c:83:af:ef:80:1c:c7:fa:
a4:0d:ce:96:e4:0d:2c:18:50:c9:f1:5d:95:50:54:a4:d2:1b:
2f:e8:5d:ff:88:a3:a9:2b:ca:5b:cb:ad:bd:83:e7:f5:92:bc:
d5:f9:e0:d0:06:aa:14:9f:c8:30:e0:7b:4b:7d:19:e2:93:cc:
9c:7c:d9:00:d7:4e:13:0c:7c:05:77:c8:6c:29:cc:31:26:b4:
42:d9:c2:2a:84:5f:89:1e:66:72:a3:bf:7b:1c:ad:ae:5b:b5:
48:f5:b4:2c:1f:bb:9e:30:32:2a:29:00:7f:ef:9c:ed:a4:1c:
02:a7:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:39:53 2025 by rpki-client