Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa
File: 4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa (raw, json)
Hash identifier: t6dpamgt2/zryHABiVBySA6efg8g99Jt9uTQJoGynjc=
Subject key identifier: E2:7F:1B:37:A8:07:43:EE:E0:B7:6F:D4:2B:2A:5F:42:B1:C3:9E:11
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 0195A0583387856418E5D257A4A4022E4316
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa
Signing time: Sun 16 Mar 2025 19:04:49 +0000
ROA not before: Sun 16 Mar 2025 19:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211101
IP address blocks: 151.0.40.0/21 maxlen: 32
151.0.56.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:58:33:87:85:64:18:e5:d2:57:a4:a4:02:2e:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Mar 16 19:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e27f1b37a80743eee0b76fd42b2a5f42b1c39e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:01:20:f8:5a:6e:bd:63:9d:fc:c6:a5:f0:
2b:4f:04:86:43:9f:94:b2:89:10:5e:59:fb:36:0b:
5a:88:69:6d:ee:7b:29:e8:2b:97:8c:eb:a0:d2:56:
4c:33:3d:c8:03:7d:31:fd:31:94:c7:91:a9:c7:5b:
e8:5e:fd:b9:89:21:23:85:ed:53:ff:41:eb:26:55:
c2:13:41:60:85:0c:1e:0b:ff:b8:9e:4d:8c:ae:83:
e1:21:bb:91:86:50:a5:ce:a7:46:8a:cb:d2:2f:db:
fd:11:cf:6f:45:d6:72:ae:1a:34:1b:55:14:0c:f3:
8e:c4:2f:3e:64:82:d2:65:48:d4:a4:9d:16:04:36:
08:d4:05:0c:1f:ac:83:0f:fa:a9:e6:8a:74:27:d5:
29:5a:a0:ac:c3:0c:75:ad:48:f1:50:79:4c:e5:1e:
36:80:b1:bb:7e:d7:87:09:c9:e6:df:f5:44:de:69:
9f:56:e6:8b:18:06:96:46:8a:aa:50:e4:3d:c7:6e:
c5:c5:05:44:58:ad:53:20:43:18:5e:8a:24:e2:fb:
c0:4d:d8:5d:60:05:c4:87:fc:af:b9:77:6a:61:df:
3d:5d:52:0a:20:ec:05:07:0b:6a:6b:7c:8f:b6:6a:
ae:a0:3e:d6:52:0d:f6:5d:cd:69:b1:3c:a2:cf:d0:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7F:1B:37:A8:07:43:EE:E0:B7:6F:D4:2B:2A:5F:42:B1:C3:9E:11
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.0.40.0/21
151.0.56.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:f5:a9:c2:0c:58:dd:fd:bb:08:df:17:d1:2c:52:4e:4c:e7:
66:d8:a9:db:f4:32:33:84:39:47:ec:00:a5:ff:9f:95:14:2a:
9b:00:27:ff:a9:6a:26:f1:1f:cf:29:2d:a5:36:00:5e:ae:ef:
10:f6:1d:21:a6:02:b7:e9:26:59:9f:20:fe:c6:cf:03:8f:54:
4f:07:a5:7f:a1:39:de:fd:18:3c:98:cc:27:4c:db:db:89:0b:
f2:50:51:e9:b0:34:34:1c:6c:6f:f0:24:2b:75:f7:84:91:b0:
84:e4:16:b6:60:15:1c:fe:7e:2a:99:94:02:48:96:4e:5d:d0:
4e:45:4e:ca:3c:c5:87:f6:a6:de:62:d7:23:10:29:fd:3c:fa:
8b:73:d7:e9:ce:19:ef:a8:fb:d5:f6:62:c8:ea:b1:8d:d6:01:
92:eb:fb:51:3b:18:0a:23:b4:5d:85:12:51:4b:3f:bd:75:36:
f9:ae:d7:4e:c0:57:c4:69:83:01:ae:84:e5:11:be:ab:9e:3c:
fd:44:88:63:7b:7c:b8:91:c5:d4:05:2c:d0:a7:3b:71:9e:d6:
50:fc:74:64:a7:7d:96:43:25:02:90:3e:ab:4c:d3:a9:17:ca:
cc:3d:87:4a:17:62:4e:b1:95:a6:d4:16:9c:03:c1:bb:f2:5e:
30:c0:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:03:16 2025 by rpki-client