Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-gH1dggj0rfRtfkKgxJubEVmzWg.roa
File: 1-gH1dggj0rfRtfkKgxJubEVmzWg.roa (raw, json)
Hash identifier: B4DEEYtzFdqJWpqKdE2EEDbiBD1MhIkvOq7UNjudGKA=
Subject key identifier: FA:01:F5:76:08:23:D2:B7:D1:B5:F9:0A:83:12:6E:6C:45:66:CD:68
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A535D65B74FD393EDC641379103F29DE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-gH1dggj0rfRtfkKgxJubEVmzWg.roa
Signing time: Tue 06 May 2025 10:48:11 +0000
ROA not before: Tue 06 May 2025 10:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 151.242.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:35:d6:5b:74:fd:39:3e:dc:64:13:79:10:3f:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 10:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa01f5760823d2b7d1b5f90a83126e6c4566cd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:28:3d:c4:2e:cf:7e:5e:48:7a:0f:ff:b3:
1e:00:26:65:0a:f6:1a:97:b2:fe:21:e9:b2:a0:19:
6a:f5:49:8f:3b:90:db:7c:5f:ab:ae:85:d2:8f:a9:
36:97:89:56:f6:6f:fe:d7:7b:45:0e:d8:78:a2:e3:
f9:84:8e:69:f1:2f:96:4c:19:3d:9d:91:65:f7:6d:
24:e4:08:41:e3:c4:6e:e9:7b:4b:3d:21:dc:f0:a1:
1a:08:f4:ef:e2:b7:4b:d8:f1:26:ff:e3:88:ef:4a:
4a:2a:00:b4:db:94:20:ee:e9:50:19:74:3b:ed:7c:
2b:b1:7e:ab:ed:06:b4:ae:9f:7e:84:59:77:8c:7a:
52:b8:4e:9f:9e:87:a8:fc:08:8c:0a:b5:16:ca:1a:
45:37:43:07:57:f3:3b:ca:1a:1e:a6:c3:c9:29:49:
40:4f:43:97:9c:08:b6:49:2d:d8:16:9d:da:c3:96:
1f:f3:c0:d0:50:73:f3:40:0c:ed:af:b2:0f:65:78:
77:54:9e:94:18:d5:89:cb:e4:83:f5:64:d4:79:dd:
86:e6:5a:68:e2:22:d7:ec:63:a9:2a:57:0a:1c:18:
d4:41:a1:c4:a4:50:e1:87:a5:f3:e0:b1:00:5e:e7:
a0:ce:e2:76:81:0b:e7:78:29:e3:e2:fb:ec:d2:59:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:F5:76:08:23:D2:B7:D1:B5:F9:0A:83:12:6E:6C:45:66:CD:68
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-gH1dggj0rfRtfkKgxJubEVmzWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.148.0/24
Signature Algorithm: sha256WithRSAEncryption
97:98:f4:a0:97:4e:d9:37:26:e4:2f:b6:85:55:92:56:27:92:
10:7a:d9:73:11:e6:90:ae:bb:ba:5b:d5:99:37:06:e7:7f:60:
9c:2a:7e:e4:c5:a9:63:b1:9b:19:19:e1:28:20:8b:67:b6:d0:
be:f7:ea:20:c5:80:1a:72:66:aa:66:34:39:3a:f7:63:21:2d:
19:2b:86:83:2b:c0:b8:58:50:9c:43:e8:c9:86:f9:0a:ab:2a:
62:c5:c2:cf:4f:71:c2:44:85:56:66:59:ac:6a:3e:95:87:14:
bb:87:eb:c3:86:5f:68:0c:bd:f2:42:32:20:a3:33:3b:2e:ff:
90:b4:5c:60:ff:f8:cc:bb:19:2e:d7:cb:61:bd:81:6b:21:8c:
16:59:51:54:f7:6a:ca:a4:41:a8:37:39:3a:df:bc:e7:e2:fa:
5e:a8:f8:94:3f:78:4c:b5:68:cd:fe:74:6b:58:82:df:31:9c:
a4:a9:c2:c0:08:49:d8:b2:0b:50:77:4b:1e:e3:03:f5:9f:88:
f7:36:13:01:e5:3b:11:f7:fc:18:39:32:7c:aa:b5:5f:05:2d:
36:12:03:ab:03:14:8c:d8:af:be:66:1f:62:d4:f1:f4:2c:2c:
6c:a3:6e:2f:ab:b3:9a:a7:82:91:cb:fe:d6:37:a7:80:83:de:
06:7b:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:35:10 2025 by rpki-client