Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z11NBONnlX0nmNSdySVqNM0z0lo.roa
File: z11NBONnlX0nmNSdySVqNM0z0lo.roa (raw, json)
Hash identifier: xbqOp9LuBEKFG2MGHZRVa3yP5dSoSmxT4GWMY6707w0=
Subject key identifier: CF:5D:4D:04:E3:67:95:7D:27:98:D4:9D:C9:25:6A:34:CD:33:D2:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019686DE7FEFA5D5A0EE3E6BCFCB113D9CF0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z11NBONnlX0nmNSdySVqNM0z0lo.roa
Signing time: Wed 30 Apr 2025 13:24:10 +0000
ROA not before: Wed 30 Apr 2025 13:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151964
IP address blocks: 151.242.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:de:7f:ef:a5:d5:a0:ee:3e:6b:cf:cb:11:3d:9c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 13:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf5d4d04e367957d2798d49dc9256a34cd33d25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:34:6d:0f:8f:12:e3:6f:ac:7a:d5:ea:dd:
6a:ee:d5:f1:66:6f:70:90:96:1a:c6:0d:23:82:27:
09:30:b4:99:38:d1:0e:e4:0c:ba:e7:bd:b1:25:63:
4e:9c:67:a4:5e:1c:e5:94:72:b1:97:13:60:ac:fa:
b7:13:96:54:0b:2b:08:ce:8a:e7:44:05:8c:82:94:
2a:bd:62:52:13:d4:1a:b9:c5:8a:05:88:e2:99:31:
ff:91:e3:7a:27:97:25:d6:7e:52:e6:fa:33:df:a3:
25:98:04:ea:f2:36:a7:ef:7b:93:66:89:52:3a:f9:
31:f7:ad:0c:4e:f3:af:05:a0:e6:d7:cc:ba:e7:8d:
14:7e:c6:c9:ed:ee:bd:3c:d2:02:50:56:26:51:e8:
ec:89:87:2d:9e:9a:f6:38:58:cc:f8:70:65:b0:78:
9d:49:27:68:3e:75:f8:16:e1:17:20:ac:22:8b:f7:
45:71:0f:61:13:98:dc:cb:17:e9:dc:00:36:5d:c2:
a0:16:b5:40:dc:4c:75:9d:d8:a8:57:7a:bb:8c:73:
6a:85:54:67:2d:c8:f8:f0:cc:4c:92:a0:a4:79:d3:
41:a1:a4:9e:e2:40:ee:22:d8:30:c2:86:c0:08:38:
18:f0:ee:e2:19:52:04:ba:4f:3f:fe:f1:ab:4a:a7:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5D:4D:04:E3:67:95:7D:27:98:D4:9D:C9:25:6A:34:CD:33:D2:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z11NBONnlX0nmNSdySVqNM0z0lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cd:27:9d:ef:8a:61:59:82:67:af:bf:6f:b8:3e:07:5b:84:
83:87:40:08:24:9b:b4:08:a8:79:4b:23:da:da:fd:2c:5a:6f:
b4:28:53:f1:86:77:5d:da:df:82:41:c4:01:e9:7e:ae:1c:39:
5d:f3:bd:46:f3:b2:c2:82:39:c6:57:55:f4:f0:38:46:5a:57:
36:93:73:f3:b6:5f:95:a8:31:03:d8:99:12:e8:c2:f6:78:6c:
d7:34:66:d1:a7:75:51:af:ec:10:d7:17:47:f8:95:fe:e2:01:
2d:b2:60:8a:68:77:11:69:38:4f:e5:d1:5e:b9:04:e5:05:92:
f9:68:8a:8b:da:db:fc:c3:74:50:e5:83:bf:3a:aa:6b:c2:5a:
54:a4:ff:f4:fd:57:cb:2d:2c:71:6f:d1:ce:5d:61:92:cf:22:
19:da:6f:fa:24:2d:1b:0c:22:77:5f:ca:31:3e:4c:af:f7:f3:
d1:4f:43:07:d0:f7:a6:3c:81:a2:8a:4e:23:fd:0f:96:2b:dc:
36:1e:2f:23:ca:92:d5:96:7f:5e:13:ea:61:a1:58:91:55:5e:
09:e8:19:39:dd:68:78:8a:af:f4:c9:00:3c:9d:a4:66:b4:52:
e4:44:b1:27:d1:60:6f:29:a7:d6:e1:e9:10:87:ac:00:b6:2e:
23:19:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:06:00 2025 by rpki-client