Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0FQ63Vow3YSryHtp4nJUu2Hr-7c.roa
File: 0FQ63Vow3YSryHtp4nJUu2Hr-7c.roa (raw, json)
Hash identifier: fht7ALkqho6y+wJ8vj86BHE/ZMZ9nmkP9RZIZOcIawE=
Subject key identifier: D0:54:3A:DD:5A:30:DD:84:AB:C8:7B:69:E2:72:54:BB:61:EB:FB:B7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197C47F8FD6AB0AEAF0FBEE4061F308FCFE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0FQ63Vow3YSryHtp4nJUu2Hr-7c.roa
Signing time: Tue 01 Jul 2025 05:39:43 +0000
ROA not before: Tue 01 Jul 2025 05:39:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211407
IP address blocks: 151.242.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:7f:8f:d6:ab:0a:ea:f0:fb:ee:40:61:f3:08:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 05:39:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0543add5a30dd84abc87b69e27254bb61ebfbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:16:c9:c9:3b:33:60:b6:48:9e:e7:b5:86:
f5:a0:13:79:74:5d:61:57:ad:4d:a5:a4:b5:55:f6:
11:4e:1e:c4:36:9e:11:51:26:e8:43:28:71:7c:da:
62:f2:f9:ee:b3:78:7b:74:fe:fa:fc:d3:bf:fa:4b:
af:10:bc:3d:c9:47:2a:c1:44:be:95:35:3e:c7:c1:
b9:a9:23:cd:53:ca:62:ba:30:ad:e3:fb:16:d2:a0:
e9:2d:21:7b:a8:11:d4:bc:b2:49:40:ba:9a:68:81:
42:36:09:fa:0a:97:41:d5:b5:a4:75:b9:a0:7c:da:
1f:e4:f0:7f:db:30:0b:ca:9d:c0:75:c3:87:05:01:
87:e4:dc:89:18:d2:72:1f:67:cd:57:6f:01:88:d9:
2a:f3:ff:98:5c:48:2f:6a:f9:a0:6e:ae:3f:fd:da:
38:80:44:fe:a2:cf:6f:91:ad:7c:36:db:72:03:b3:
4f:e5:9a:0a:ce:eb:90:a1:be:72:cf:62:d2:d1:1b:
55:35:da:e6:e4:39:b1:8c:b2:47:da:0a:41:05:c7:
03:48:29:e9:cc:72:46:dc:6c:35:08:70:a6:5f:8f:
94:5e:28:47:a0:58:5b:4c:5c:36:0f:ba:81:b6:97:
cf:31:70:dd:0d:c4:f4:ff:8c:76:4d:7e:5f:dd:50:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:3A:DD:5A:30:DD:84:AB:C8:7B:69:E2:72:54:BB:61:EB:FB:B7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0FQ63Vow3YSryHtp4nJUu2Hr-7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c6:04:d9:bb:78:a0:25:b2:ff:f7:d5:db:6a:60:14:39:ed:
5a:e3:ee:cc:96:1a:45:2b:40:d7:2d:20:63:e9:6b:58:e3:22:
34:07:91:41:47:f0:47:4a:f7:94:ed:b8:71:cd:2f:07:8a:c0:
93:a0:c2:43:9c:f8:4b:06:a0:cd:c8:f5:9f:bf:cc:21:20:7d:
5b:4e:9c:c5:46:38:40:d1:87:5b:7f:db:15:aa:8b:6a:e3:52:
8b:5d:86:af:5d:2a:af:02:75:89:b5:ef:e0:89:32:f6:63:ba:
dd:9d:5a:75:4d:4e:82:82:12:46:ef:b5:1d:9d:80:ab:90:86:
c2:c0:35:a9:a4:1a:f3:f3:57:cb:96:ba:c7:ea:41:e1:3f:c7:
92:21:5c:07:70:c8:6c:07:80:8a:57:09:cf:76:72:fd:9a:1a:
34:db:2a:0b:cc:d9:e2:46:66:ba:e3:63:87:d8:93:d9:a5:d7:
a8:19:03:54:da:43:da:87:a4:fe:1e:c2:f0:40:3d:1a:3f:24:
ca:7d:55:32:c7:21:fb:cd:d1:19:eb:12:c8:33:c1:cb:3b:8a:
b2:4c:09:ec:0f:50:d6:8f:4f:47:c1:67:f0:e1:9d:49:c4:e7:
c4:e5:13:ca:0e:5c:35:16:50:04:6c:9b:d3:80:23:1c:44:d2:
d2:6c:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:59:53 2025 by rpki-client