Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5YlF6Olzu-AnqQFITkB0R4Qszx0.roa
File: 5YlF6Olzu-AnqQFITkB0R4Qszx0.roa (raw, json)
Hash identifier: eIZJa4try2e8GlG5jpQH4H6vrpTUcAUNn06EWk48CAA=
Subject key identifier: E5:89:45:E8:E9:73:BB:E0:27:A9:01:48:4E:40:74:47:84:2C:CF:1D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197C04AE48770D355C61D7ABF13C6B151DA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5YlF6Olzu-AnqQFITkB0R4Qszx0.roa
Signing time: Mon 30 Jun 2025 10:03:43 +0000
ROA not before: Mon 30 Jun 2025 10:03:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9294
IP address blocks: 151.243.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:e4:87:70:d3:55:c6:1d:7a:bf:13:c6:b1:51:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 30 10:03:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58945e8e973bbe027a901484e407447842ccf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:2d:3d:cb:23:3f:f1:1d:b9:b7:65:fd:3d:
a3:a8:0b:63:5d:91:d0:8b:a9:f0:12:d7:9e:f3:d7:
a2:18:11:fd:7c:2f:b7:a6:eb:c8:cf:77:1f:49:ac:
27:39:4b:66:2c:00:51:02:d3:06:bf:98:c9:92:74:
04:3b:13:ca:a9:3b:85:d0:09:84:71:c5:e0:c0:ea:
ed:2b:33:40:40:f6:e1:7a:26:89:51:df:07:1d:96:
1d:d7:25:12:e1:fd:ba:7f:42:4b:3c:25:eb:65:41:
63:eb:9e:15:e9:8e:5d:8b:72:1e:e4:3e:66:29:4a:
bc:3b:6e:d0:c4:db:2e:f1:e3:48:d8:76:34:03:ca:
1b:9c:b5:49:17:f1:9a:61:2a:90:bf:9e:9f:b2:d5:
a9:b2:3a:6a:f4:70:ca:a6:35:1f:d2:7c:9c:15:59:
8e:e6:63:b4:08:87:19:03:75:5e:eb:3d:de:6b:77:
18:5f:3a:5c:5d:d3:94:26:7f:ce:d0:2a:a6:c6:3f:
32:6b:85:31:4a:c3:30:d4:b8:4e:40:c7:f8:0a:5d:
bc:bc:9e:ef:56:ef:1f:a8:e6:a8:3d:30:ef:66:b9:
46:c9:5e:f5:01:62:66:14:71:02:52:03:a8:0a:c9:
07:27:bc:a0:29:33:d3:70:c3:5a:7e:08:36:8a:de:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:45:E8:E9:73:BB:E0:27:A9:01:48:4E:40:74:47:84:2C:CF:1D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5YlF6Olzu-AnqQFITkB0R4Qszx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:9c:f7:f3:20:fb:3e:77:3f:f9:bb:6e:d1:54:21:66:bd:9a:
4f:a8:e5:87:bb:db:58:7e:b6:d4:ec:e7:ef:ba:41:88:1b:c3:
87:43:d2:df:7e:b3:8f:bf:36:94:d1:00:22:fc:66:b5:f8:87:
69:19:ac:ef:30:93:1b:4e:79:26:c3:7f:a3:3d:ab:d3:7c:ed:
92:72:04:19:bb:1c:95:a9:12:44:92:80:3f:d0:f4:1a:8b:f1:
f2:25:a0:ae:88:23:86:09:c0:25:de:4b:f2:d1:e4:e5:21:ae:
ab:37:5a:b8:e9:a7:53:9e:41:30:70:4e:1c:5f:10:0d:e8:bd:
54:08:75:8d:4c:10:6e:01:97:18:c7:90:bc:35:b1:fb:06:dc:
54:56:98:0f:0e:e8:b7:05:1a:83:a6:3e:56:80:2d:ec:49:64:
ee:fd:14:cc:9a:9d:47:4f:2b:65:8a:29:59:cb:78:0c:5c:3c:
60:ba:a4:f8:7f:2c:f6:e1:0d:d6:9e:e6:08:aa:3f:85:a8:6c:
2d:20:bd:bf:7e:b4:63:72:77:a0:71:e4:95:41:03:ef:33:69:
43:72:4e:c9:9d:9c:ac:50:91:cb:e3:c9:06:69:43:d5:74:11:
09:d1:44:3d:ef:39:6a:6f:12:e0:1a:22:58:52:ef:cb:76:87:
98:65:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:10:25 2025 by rpki-client