Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/65fPZ5XIkPRqi0r9rJZh1skhuqM.roa
File: 65fPZ5XIkPRqi0r9rJZh1skhuqM.roa (raw, json)
Hash identifier: OD7XVIlrFiHNdAnBZaezBENNB2zPtcA2j9/rhvF0ZdE=
Subject key identifier: EB:97:CF:67:95:C8:90:F4:6A:8B:4A:FD:AC:96:61:D6:C9:21:BA:A3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A433A76195B2F125CC2D365211074551
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/65fPZ5XIkPRqi0r9rJZh1skhuqM.roa
Signing time: Tue 06 May 2025 06:06:10 +0000
ROA not before: Tue 06 May 2025 06:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56594
IP address blocks: 151.242.43.0/24 maxlen: 24
151.242.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:33:a7:61:95:b2:f1:25:cc:2d:36:52:11:07:45:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 06:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb97cf6795c890f46a8b4afdac9661d6c921baa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:d4:b3:7a:bf:7b:75:a0:9f:e4:25:1a:c5:
12:26:a5:75:03:53:19:2a:24:3f:83:ea:d1:1a:46:
b8:62:f6:80:fd:e9:87:45:ab:ef:de:4c:c8:7f:a0:
15:36:a7:a1:f9:9e:49:84:16:67:5b:62:6c:bc:d8:
0e:f1:c9:37:84:82:d3:a8:f5:41:bc:d0:c8:65:bc:
d3:46:2b:44:8c:ce:7a:e7:2d:4e:0f:9e:cb:80:0d:
bd:fb:22:e4:b4:6f:f9:df:d1:11:f0:df:73:b2:9e:
74:b0:fc:af:2f:12:d2:bd:14:b2:6a:14:02:75:5e:
ef:5c:df:b9:f5:86:9a:12:2a:d0:df:c6:6a:2e:0c:
47:3b:f6:1b:91:05:41:14:12:77:22:98:a4:15:56:
fc:23:e4:ba:7d:10:93:ed:96:d6:3c:a4:31:38:8e:
27:51:f7:2f:a6:57:a4:36:60:0e:fb:e2:0a:de:50:
e0:1a:b2:b3:a4:5d:de:16:a4:3a:6c:2b:04:21:d2:
60:ee:bf:7d:b3:dc:78:0e:b6:74:98:f2:02:17:4c:
32:ec:10:c0:e5:0e:cf:41:15:87:de:15:cb:ab:29:
b4:28:6f:f3:66:5c:eb:e6:ef:f6:fb:17:22:4c:4e:
0d:04:88:07:b3:a7:b0:80:c0:d2:b3:26:79:ae:a4:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:CF:67:95:C8:90:F4:6A:8B:4A:FD:AC:96:61:D6:C9:21:BA:A3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/65fPZ5XIkPRqi0r9rJZh1skhuqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.43.0/24
151.242.69.0/24
Signature Algorithm: sha256WithRSAEncryption
51:31:5b:7c:16:da:cc:51:95:91:cc:dd:ea:a6:8a:4c:f0:de:
a4:22:61:4c:11:02:85:ff:e8:a9:14:cc:6a:fc:2b:cf:4c:12:
4c:cb:1f:99:0a:59:01:f9:4f:10:bc:8b:c8:7d:42:cb:c3:b4:
25:8e:2e:13:9a:81:87:5e:54:07:df:3e:c4:81:4d:dc:56:35:
bf:ac:0f:f4:38:c7:fd:0f:01:a1:44:12:23:05:25:98:a6:85:
27:0e:42:4b:6e:62:a7:f6:bf:54:54:ea:0b:cb:68:d5:57:ed:
0e:14:57:f7:85:07:15:46:3f:04:30:c3:41:c5:ad:55:83:2d:
0c:75:a8:fb:d6:e2:58:f2:1f:56:d3:ce:13:c9:42:6a:4d:1a:
82:3f:19:2c:a5:6d:68:69:5c:7d:6a:14:31:a4:72:cd:dd:71:
2c:11:e0:37:01:8c:e8:1e:37:14:76:29:f6:9b:ef:d1:e1:31:
b5:e5:53:4b:b6:ae:05:d0:1e:ce:85:5b:a4:5a:c3:58:cd:8e:
48:41:88:a6:fe:25:ad:e4:c7:19:91:88:57:ef:20:20:16:e5:
33:89:bc:95:e7:c6:fb:bb:ea:d6:45:8e:f4:38:d6:19:db:21:
12:cb:b9:20:25:fe:38:d1:91:8f:47:0d:91:c9:67:0d:df:03:
ff:e2:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:11:43 2025 by rpki-client