Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0Ijv_ZrMztVAquREvRAYpN2cpvc.roa
File: 0Ijv_ZrMztVAquREvRAYpN2cpvc.roa (raw, json)
Hash identifier: A6EsL+6c/knUm4lqSsvTg40R5V8IFQUDT5cvgVsY3qw=
Subject key identifier: D0:88:EF:FD:9A:CC:CE:D5:40:AA:E4:44:BD:10:18:A4:DD:9C:A6:F7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A932A63323B15152A55AA13DAD7ED530
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0Ijv_ZrMztVAquREvRAYpN2cpvc.roa
Signing time: Wed 07 May 2025 05:23:10 +0000
ROA not before: Wed 07 May 2025 05:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 151.242.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:32:a6:33:23:b1:51:52:a5:5a:a1:3d:ad:7e:d5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 7 05:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d088effd9accced540aae444bd1018a4dd9ca6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:f9:84:06:af:2b:e5:c9:2a:f1:0b:5c:e3:
9e:5e:f0:c2:a4:37:04:e6:79:5b:ec:b5:1f:85:23:
d4:1f:c3:ee:7e:eb:b6:d0:45:0e:bd:18:b1:08:c1:
ed:71:5b:ac:f0:42:da:ea:54:8b:96:72:7e:3d:4a:
bc:25:54:88:37:ee:ba:e7:67:9c:00:83:c6:cd:aa:
2d:75:32:97:79:21:d9:52:99:a5:78:08:79:b5:94:
5f:6f:34:f9:23:6d:6c:a0:7e:fb:37:5b:66:0a:47:
84:d0:ef:02:60:9d:20:c3:2e:85:49:9b:2e:e4:ea:
9a:02:56:e3:38:c0:c3:3d:0e:76:a1:75:4b:a9:a1:
f0:31:97:93:0d:91:03:c3:44:9d:fd:64:36:1b:c2:
8a:76:cf:c9:81:e7:67:46:88:92:d8:1b:1a:7e:ad:
57:92:81:b9:36:46:76:9b:d7:94:5d:9d:6b:cb:b3:
95:6c:c5:b1:dd:de:f9:b9:a0:67:15:90:70:f9:00:
4a:df:9d:5b:fe:6b:4c:7c:4d:34:85:6a:0e:78:45:
06:da:45:b0:b5:34:6b:03:b2:6d:ed:34:ff:d4:f9:
68:2d:5d:ea:d0:25:74:47:ab:9e:56:39:90:52:fa:
b4:8d:fd:8f:a3:94:7a:b6:22:b7:b5:90:fa:40:14:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:EF:FD:9A:CC:CE:D5:40:AA:E4:44:BD:10:18:A4:DD:9C:A6:F7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0Ijv_ZrMztVAquREvRAYpN2cpvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:49:aa:70:6f:58:a7:88:49:99:bf:29:ac:e4:12:4e:78:da:
49:f3:11:7a:9b:9f:d7:56:9c:a4:38:c9:13:a8:ad:29:d0:eb:
37:b0:3c:77:63:0b:4f:5e:77:65:21:d8:49:a7:18:24:61:46:
91:95:70:17:7f:c6:66:e8:59:9c:ee:a5:e0:05:bd:20:e1:d6:
f6:37:08:e9:83:5c:41:a7:ca:3e:4e:a5:78:2b:3b:49:b3:a8:
12:7f:c4:2f:5c:d7:1a:25:e6:f7:0d:13:c3:53:e3:f7:63:b1:
9f:2e:43:95:da:8c:44:28:d1:8a:ea:b5:19:f6:38:fb:66:37:
e7:f2:57:e5:97:10:b7:e8:c3:94:42:de:fc:ae:fe:35:7a:65:
6f:25:4d:e9:58:b9:82:8a:78:38:76:0a:91:f1:ba:aa:09:c2:
6b:82:8f:1b:09:be:24:fb:73:75:c6:58:20:18:08:f8:4d:22:
c8:10:2f:7d:05:3d:d4:fd:2a:b6:39:2e:c5:50:6f:ee:84:e9:
32:cc:e0:f1:8b:b1:8f:2d:f0:fa:89:b7:e2:ee:7a:0b:ed:93:
de:7a:57:eb:ad:be:ba:bc:41:36:30:f7:1d:48:e9:64:53:e0:
77:7b:7e:cb:bd:50:27:40:c0:e4:42:31:4d:24:69:93:ca:e8:
69:15:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:21:13 2025 by rpki-client