Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ye8OaR9tT4UwbI4TSWpGwFX3hb8.roa
File: ye8OaR9tT4UwbI4TSWpGwFX3hb8.roa (raw, json)
Hash identifier: EtH+0dfmRoLu7ykiczx4w+AswTwNz+LRkv3jfC/uxtY=
Subject key identifier: C9:EF:0E:69:1F:6D:4F:85:30:6C:8E:13:49:6A:46:C0:55:F7:85:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F932C30BD3A456FA9244FA10D244DEFC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ye8OaR9tT4UwbI4TSWpGwFX3hb8.roa
Signing time: Thu 22 May 2025 18:12:55 +0000
ROA not before: Thu 22 May 2025 18:12:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213495
IP address blocks: 151.243.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:32:c3:0b:d3:a4:56:fa:92:44:fa:10:d2:44:de:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9ef0e691f6d4f85306c8e13496a46c055f785bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:93:37:99:34:75:de:28:0d:73:b2:dc:6b:
20:44:24:d1:71:1e:fc:d4:cf:d6:c8:5e:dd:1b:b5:
95:4e:df:8a:51:e9:25:c5:b9:fa:d8:ba:b8:90:5c:
6f:61:4e:bb:dc:d8:65:e8:a8:32:c0:c7:dc:57:ea:
81:6d:d7:09:a5:c1:06:00:81:c7:7e:ac:6a:f0:c8:
66:ab:a6:05:d3:b0:d2:2e:64:04:4f:73:4e:ef:6d:
49:3f:64:b8:81:20:de:0d:2b:c2:18:55:cb:a5:2c:
0b:cf:1d:51:b4:8a:92:d2:4b:09:d4:69:33:62:49:
88:b3:55:45:ec:62:06:95:2f:f7:46:b3:e9:81:82:
d5:19:34:1b:23:67:ca:91:6d:ff:9a:2f:b3:ea:74:
85:10:2c:8c:72:d5:7b:08:ed:61:8d:8e:1f:0e:14:
c1:91:2c:23:c7:67:01:0e:50:ad:ce:8a:5c:c2:95:
10:11:b1:65:24:6b:01:2f:3a:5b:61:1b:b9:40:d8:
7b:66:61:50:58:1b:c1:53:58:44:72:50:7a:41:d8:
d9:eb:58:71:ea:60:8a:cb:3c:c9:40:2a:21:05:cb:
f7:e4:09:82:6e:5b:29:f4:10:f8:0a:5b:04:8e:6e:
9a:b9:76:1e:71:7d:44:9a:66:3a:1c:4b:66:52:05:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:0E:69:1F:6D:4F:85:30:6C:8E:13:49:6A:46:C0:55:F7:85:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ye8OaR9tT4UwbI4TSWpGwFX3hb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:26:ce:56:57:8c:4d:8b:2b:02:06:7e:72:ea:a2:83:85:7f:
de:24:9d:7a:38:f0:4f:ed:62:72:2a:8d:76:2e:a8:d4:59:5e:
f4:4b:1e:3c:c1:4b:d2:9a:4a:fb:19:73:a2:70:87:2a:33:63:
43:f6:7a:c3:30:0f:c0:6a:a9:8f:c6:13:8f:d5:2d:93:07:e1:
43:4a:e2:47:8b:49:f8:9d:4e:3c:c7:6b:c3:b1:0f:d4:19:0d:
65:e0:06:49:2a:fb:c5:5f:47:1d:18:51:7d:10:f8:1c:d4:34:
dc:51:3a:6c:5a:69:c1:96:0e:db:bb:c9:56:39:38:e4:15:84:
4f:2e:d7:2f:3a:51:03:ea:c5:ac:cd:e8:47:78:88:ec:37:cb:
2d:ee:f0:d8:a5:33:af:69:5e:35:6e:f5:ac:2a:81:e0:d0:e4:
2d:7a:8c:54:f2:34:7c:20:09:28:d1:15:f5:b1:c4:6e:c2:20:
11:f6:58:20:c4:64:14:d3:f1:f6:b6:57:3e:c9:3e:14:33:f6:
5f:8b:6c:e4:72:c2:8a:77:9c:ae:d1:94:2c:92:c0:1d:cb:2b:
c2:51:4f:3c:5f:ac:cf:74:08:a1:a0:8e:96:c5:1a:c0:bb:1c:
32:21:d3:95:1f:9e:62:68:50:5d:ec:f5:28:6a:9e:b1:01:d0:
8c:88:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:11:44 2025 by rpki-client