Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v8uSIrYmrAaJZke9G_O6Uzx7JHE.roa
File: v8uSIrYmrAaJZke9G_O6Uzx7JHE.roa (raw, json)
Hash identifier: vrzPCG8u0WBC2cv6agM1UUepnpyJfy0rFeJViJB+lyo=
Subject key identifier: BF:CB:92:22:B6:26:AC:06:89:66:47:BD:1B:F3:BA:53:3C:7B:24:71
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019710537CE30DAD10A97425D181937BF752
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v8uSIrYmrAaJZke9G_O6Uzx7JHE.roa
Signing time: Tue 27 May 2025 05:59:56 +0000
ROA not before: Tue 27 May 2025 05:59:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 151.242.180.0/22 maxlen: 22
151.242.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:53:7c:e3:0d:ad:10:a9:74:25:d1:81:93:7b:f7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 05:59:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfcb9222b626ac06896647bd1bf3ba533c7b2471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:3a:05:cc:12:2d:3c:cc:1e:05:ce:de:83:
c1:60:36:31:2e:ef:b2:72:a3:b5:2e:be:bc:cb:17:
eb:8d:bf:ce:d1:c0:80:22:64:52:a3:d0:7d:13:31:
ff:dd:09:a5:2a:b4:95:af:44:9d:8e:26:de:94:42:
35:68:f9:70:9e:30:e5:4b:39:77:97:9c:6e:01:c6:
36:1e:c4:b9:df:1d:c6:fd:ae:62:16:f5:77:76:8a:
60:bc:71:d0:aa:6f:b2:8a:db:27:81:a3:9d:a2:2e:
83:31:66:7f:19:e9:2f:fa:6f:85:cf:bb:e1:e5:a9:
82:f2:0c:7a:02:31:f1:16:4b:62:56:a9:69:5c:a4:
cd:51:a4:ef:6e:73:b1:96:e3:f0:88:f3:4c:e6:80:
58:b1:b3:a2:6f:64:b3:ac:75:e8:2f:1d:93:91:84:
a2:9f:e8:7b:67:61:2e:a8:18:b6:15:08:af:cc:bc:
22:09:a9:e2:93:d0:51:25:72:db:93:91:5d:f1:0c:
8a:2e:2e:21:76:64:56:df:0c:bc:c7:88:f4:e0:a1:
86:0c:3c:2d:9f:02:63:25:f9:f0:0c:69:05:13:b7:
ec:a2:bd:cc:cf:17:30:9c:68:1d:11:b0:a3:3d:9a:
0e:65:63:3b:98:4b:b1:e2:9c:b0:1b:54:2b:0c:1b:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:92:22:B6:26:AC:06:89:66:47:BD:1B:F3:BA:53:3C:7B:24:71
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v8uSIrYmrAaJZke9G_O6Uzx7JHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
151.242.255.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c3:e3:08:a9:ae:f9:c8:3a:a2:55:c5:31:39:0b:e4:ae:1d:
cb:e1:be:1b:90:eb:a3:6a:f6:f2:b1:64:0d:48:d9:67:84:60:
74:d8:b0:a5:64:20:31:4c:41:95:52:12:64:bd:e4:1a:c5:01:
08:da:51:6a:e9:54:aa:03:55:69:2a:7e:ef:9a:d0:60:ac:51:
43:d8:79:d9:a1:f4:49:9d:fb:df:09:22:78:63:04:84:d1:00:
b4:ab:1d:a8:09:ae:d2:33:7e:fe:2b:5b:82:c8:c7:16:5d:b7:
db:22:1c:ae:a3:b7:bc:fc:58:40:b7:9c:6a:ed:8c:94:97:e5:
89:79:1d:28:ac:7d:50:07:f5:93:b6:90:bb:7c:2c:6c:76:20:
d5:c7:bc:e0:3a:b1:1c:18:cd:79:e4:76:72:2f:4f:8f:21:1d:
08:bb:59:74:c8:6f:6f:03:c9:79:78:b5:e2:8f:61:47:64:27:
40:3d:68:0d:13:22:15:e5:a6:8c:de:be:eb:f6:41:dd:f1:d5:
34:d6:d3:40:06:86:4e:28:28:c1:89:07:d7:d8:cf:80:cf:78:
35:f9:60:d9:84:5b:21:1f:3c:30:cc:df:c8:01:40:fe:db:af:
3f:b3:32:ca:7a:64:fd:03:dd:8e:d3:1b:2a:d5:dc:8b:2c:cf:
67:5c:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:36 2025 by rpki-client