Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x_er9kOFE0IbD8UnGhhHrGtmSPE.roa
File: x_er9kOFE0IbD8UnGhhHrGtmSPE.roa (raw, json)
Hash identifier: uwjJStSpHLZECDPFts5qyBSN9KBIH3wZGg2vSvQGAcQ=
Subject key identifier: C7:F7:AB:F6:43:85:13:42:1B:0F:C5:27:1A:18:47:AC:6B:66:48:F1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01951D933A8389EA1C7816E1B5A30C9761D2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x_er9kOFE0IbD8UnGhhHrGtmSPE.roa
Signing time: Wed 19 Feb 2025 09:39:02 +0000
ROA not before: Wed 19 Feb 2025 09:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49678
IP address blocks: 151.243.82.0/24 maxlen: 24
151.243.84.0/24 maxlen: 24
151.243.86.0/24 maxlen: 24
151.243.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:93:3a:83:89:ea:1c:78:16:e1:b5:a3:0c:97:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 19 09:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7f7abf6438513421b0fc5271a1847ac6b6648f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:9e:50:06:22:66:9f:d1:52:c1:57:ce:ba:
cc:0a:5e:4a:c9:01:51:d9:2f:56:f0:af:ae:c1:a9:
36:31:ca:d7:a8:41:52:1b:c3:19:d7:f4:af:10:70:
17:a8:92:64:31:26:bd:ab:21:32:5c:f7:1b:e6:a5:
f4:6f:df:73:d6:c8:63:70:02:ef:90:1e:d4:c2:38:
f5:34:cb:8d:a5:14:b3:e0:88:e7:80:e3:8b:a7:0d:
ed:c0:4a:48:eb:e1:73:00:2b:5b:69:0a:34:e2:d7:
55:bd:9a:7c:a1:05:c0:81:6a:9f:2c:ea:c1:51:c9:
e0:f8:e1:79:b6:16:f7:a2:f1:ba:ce:cc:10:f3:6e:
75:36:df:70:8c:1a:02:c2:0d:f0:e6:0f:9e:69:af:
b1:4c:9d:b5:9d:2c:5b:36:b3:fe:56:f1:2a:3c:5a:
c5:f8:56:5a:97:14:64:f0:23:14:c1:ed:d4:35:77:
8d:fd:73:88:f0:97:50:e4:60:37:06:16:3f:62:40:
c1:85:b9:b1:ee:f5:90:26:43:2e:18:fb:6b:37:91:
96:61:8a:37:98:b7:da:c9:5f:eb:2e:16:68:a4:6b:
71:ce:56:e9:da:ac:ba:15:ad:21:22:fc:ed:b5:af:
3a:b3:38:64:fe:5a:e0:61:f2:1e:58:6b:01:4b:2c:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F7:AB:F6:43:85:13:42:1B:0F:C5:27:1A:18:47:AC:6B:66:48:F1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x_er9kOFE0IbD8UnGhhHrGtmSPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.82.0/24
151.243.84.0/24
151.243.86.0/24
151.243.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5b:2d:12:39:56:fe:75:9e:9d:29:d6:a3:9d:1f:71:f1:2e:
49:48:5d:8d:32:5e:81:b8:39:69:06:a2:36:0f:6e:7c:3f:c1:
e6:eb:d9:23:fd:a7:45:4b:ed:dc:89:93:6c:e0:4d:f7:c9:8a:
9c:c1:5c:9a:91:c5:fb:68:52:0d:0a:fb:a6:e6:c1:b9:cf:a6:
ec:e5:a5:e7:8e:b2:a8:3e:37:da:d7:c2:dc:83:7b:8c:cd:b5:
21:bc:cc:67:4a:1a:9a:12:86:79:6a:30:60:3f:3c:0a:54:0c:
13:50:d8:2f:5d:9f:c5:6f:3e:74:20:51:03:01:c4:62:c7:e9:
76:2d:63:7d:2f:a2:23:c6:b6:79:8d:eb:69:da:14:5d:c7:52:
9b:b8:4e:5b:da:31:00:2b:d6:8d:c2:65:60:ce:aa:39:09:ad:
14:97:db:83:26:f2:37:e2:94:1a:07:08:5d:be:da:88:e9:b6:
e8:ec:ac:e3:a9:c4:62:92:50:f4:b0:d3:3a:26:4a:47:54:a8:
7a:7e:f8:bd:21:c9:92:9f:aa:6d:8d:4c:8c:bd:a2:cf:01:65:
90:a2:7c:5c:5b:40:e0:05:63:37:d2:ae:99:f3:86:10:a1:57:
e2:1e:69:e2:f2:fa:6e:83:85:93:ba:d6:02:e5:5a:87:9a:61:
b2:43:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:37 2025 by rpki-client