Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zpbSoirsQfbtF1MQirEdDEM2Fss.roa
File: zpbSoirsQfbtF1MQirEdDEM2Fss.roa (raw, json)
Hash identifier: MOxXyZS0PKQvL2t6vyMeXXdgvsgCO46Apa5RQyUYuz4=
Subject key identifier: CE:96:D2:A2:2A:EC:41:F6:ED:17:53:10:8A:B1:1D:0C:43:36:16:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01951851669910519D25BE50A99583360445
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zpbSoirsQfbtF1MQirEdDEM2Fss.roa
Signing time: Tue 18 Feb 2025 09:09:02 +0000
ROA not before: Tue 18 Feb 2025 09:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55701
IP address blocks: 151.243.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:51:66:99:10:51:9d:25:be:50:a9:95:83:36:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 18 09:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce96d2a22aec41f6ed1753108ab11d0c433616cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:cd:99:ce:cc:43:db:28:d0:1e:75:de:94:
0a:69:f4:79:f6:3e:e7:31:33:a4:aa:a7:ed:0b:89:
31:a9:10:f3:01:38:e5:86:31:f1:8c:f3:c3:63:bb:
aa:af:3f:3c:fa:ad:7d:3c:1f:b9:e1:f2:76:a0:4a:
88:73:89:78:9c:8e:9d:63:a4:be:0b:7a:b5:17:d9:
72:bf:fc:2b:6b:d3:2f:b8:f8:4a:2c:df:63:64:e1:
72:ab:53:84:e2:b3:c0:02:9d:b0:d2:78:5c:3d:8d:
b8:fe:7f:49:90:fd:e9:b4:6b:87:90:af:e3:8d:d6:
7b:8f:5c:14:67:1d:54:1b:37:61:df:b0:f0:66:a4:
87:1b:fd:e6:a0:76:6f:17:65:52:93:54:11:4d:91:
18:4b:ce:88:ee:67:d0:30:4f:17:f4:1a:fd:c2:de:
b0:5d:90:b7:64:94:71:f3:82:b2:ae:f0:ea:53:f5:
48:bf:2b:8d:6d:33:b0:2c:31:a1:b2:9b:94:17:34:
bf:9e:5a:63:35:80:dc:9e:1d:a1:d0:a3:52:89:19:
f4:24:78:fa:72:7a:db:0e:85:9b:ab:d1:9e:f2:c0:
45:5f:4c:bb:2d:40:81:57:ab:e1:fb:5f:8a:c9:f3:
26:38:42:ec:ff:07:26:24:4a:1a:7e:8f:56:88:3f:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:D2:A2:2A:EC:41:F6:ED:17:53:10:8A:B1:1D:0C:43:36:16:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zpbSoirsQfbtF1MQirEdDEM2Fss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:22:f8:9a:cd:48:3e:61:17:9c:69:ab:f5:7e:c5:a1:ce:c5:
fe:00:a7:e3:0f:89:6c:39:dc:38:93:50:04:2c:46:fb:c1:fb:
c5:5b:6d:2d:18:dc:a2:e1:55:04:ce:0c:eb:c9:c4:92:26:79:
52:5a:6c:76:22:fb:44:19:bc:4d:21:a2:22:1e:12:0b:89:62:
30:3c:83:9e:03:f7:28:6d:80:4c:e1:b0:6c:8c:f7:a3:9f:97:
6a:f2:a2:73:53:00:bc:c1:27:f7:ad:3e:2a:22:22:73:01:22:
51:44:48:03:27:01:8e:c2:d9:06:e5:5f:c2:72:a4:9c:ce:06:
ce:c8:63:a6:e9:ba:42:e4:2e:94:2f:bd:31:ae:bb:a2:5e:c7:
0c:0b:7a:4e:95:de:72:f8:60:6c:1f:ee:b5:bd:da:ee:55:bf:
b3:92:89:5e:2c:62:e4:60:a8:a6:9e:91:f5:2a:74:e6:73:8a:
69:c7:0a:01:2a:ba:d7:44:ad:e0:df:45:55:50:47:71:c1:41:
65:cd:9c:0d:cc:35:fd:f2:d8:b6:03:d9:7e:3f:bd:58:4e:fe:
e5:3b:56:0a:c8:33:94:d1:2b:b1:6e:cf:45:1d:a4:77:dc:2b:
51:05:69:bb:e1:a6:95:e2:44:5b:60:24:78:6b:8c:c9:d1:58:
f3:40:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:47 2025 by rpki-client