Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/AuXuqMc9mu2lFbNTpcS6T8R2pEM.roa
File: AuXuqMc9mu2lFbNTpcS6T8R2pEM.roa (raw, json)
Hash identifier: P8qTa1egfb9O9a+bif2mg+3ltldpnNBhutzi47y2bg8=
Subject key identifier: 02:E5:EE:A8:C7:3D:9A:ED:A5:15:B3:53:A5:C4:BA:4F:C4:76:A4:43
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EF866A0671FAC280AEDBCC5809AE9
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/AuXuqMc9mu2lFbNTpcS6T8R2pEM.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35621
IP address blocks: 151.237.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f8:66:a0:67:1f:ac:28:0a:ed:bc:c5:80:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e5eea8c73d9aeda515b353a5c4ba4fc476a443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:4b:78:61:21:09:1f:69:b7:65:28:73:22:
ee:47:76:18:66:0d:32:be:57:42:f4:39:93:87:88:
a4:4d:41:08:6b:61:4a:8e:fc:66:f9:ca:78:08:2b:
75:a4:2c:fc:28:ac:1d:77:67:20:d3:07:56:f4:eb:
53:aa:e1:a7:ba:a5:a4:5c:0f:3c:f3:9b:f8:76:56:
fe:39:3e:b9:65:a4:cc:4b:c9:09:b0:b2:eb:f3:54:
30:94:20:00:c7:90:70:0a:56:81:39:ca:75:0e:ef:
a9:fd:c7:20:e7:c2:02:a9:98:60:2e:95:9c:2d:2e:
42:f1:6a:82:83:4f:f0:6a:1a:6d:bf:e3:54:64:ac:
00:76:fe:f3:20:15:20:2a:f1:0a:c6:49:0f:10:4d:
87:a5:d5:e4:e5:d9:d3:0e:3b:3e:93:84:c8:16:51:
1a:c2:9f:0f:ab:f5:4d:03:6d:d7:65:1f:8e:01:9f:
27:22:24:57:70:99:03:d7:0f:0a:5e:e0:9b:09:a2:
ca:a2:78:d9:f6:ab:15:e0:83:c6:e6:20:17:3f:ab:
16:67:e0:a8:60:e3:e7:ce:88:90:67:37:09:e1:d7:
69:c3:2d:2a:3b:14:16:00:66:5c:8b:e0:28:a8:ed:
ea:bc:83:e4:df:a7:f1:f2:9e:a6:16:33:04:49:05:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:EE:A8:C7:3D:9A:ED:A5:15:B3:53:A5:C4:BA:4F:C4:76:A4:43
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/AuXuqMc9mu2lFbNTpcS6T8R2pEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:bf:a8:92:07:a6:3d:90:77:03:f5:e9:c8:48:c5:a1:4b:e0:
f0:fa:5d:df:20:d8:fc:1e:01:12:6c:a9:2e:bd:6e:c0:18:ba:
a8:69:08:b7:d6:d4:c2:24:df:eb:a9:8e:b5:ee:47:cd:f9:80:
bd:6b:4b:93:ac:7d:53:d7:10:a8:7a:38:2c:30:e3:0e:ac:74:
f8:69:65:4a:4f:2d:9b:b7:36:b4:64:95:e3:10:04:c1:cc:5f:
28:c0:9c:ed:bd:63:c9:f5:bc:90:0b:b6:ff:35:bd:f4:68:46:
6d:18:83:6f:f3:2c:a0:8d:56:8f:de:f7:0b:97:82:e6:29:ca:
6b:20:2b:95:d1:b0:6c:d1:ba:8f:7e:c2:8f:f0:ca:e8:01:f1:
dc:25:ca:3e:18:84:a2:48:f9:c4:30:2b:21:d6:6a:88:c6:42:
b7:d6:68:b8:c3:c9:5b:9a:82:9a:45:29:26:70:99:45:89:d5:
26:88:1b:c1:f6:db:fd:63:18:63:5c:46:3d:ad:bd:c5:58:62:
b5:dd:34:0b:c8:d5:16:55:3b:c5:64:45:de:7b:4b:8a:8f:21:
d8:68:9b:c5:15:75:8f:0b:92:10:1b:12:a4:ba:62:96:f9:d5:
a4:28:ba:31:8c:2d:09:66:61:06:25:e1:24:6b:81:fd:66:b1:
ab:37:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:47:49 2025 by rpki-client