Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7DJdgC9haMEqZofCQzfQHotQr6c.roa
File: 7DJdgC9haMEqZofCQzfQHotQr6c.roa (raw, json)
Hash identifier: H5KW+i5JTXOOTzzz8MIVQ9jZ0S+Sd32btJFmhsnN/3w=
Subject key identifier: EC:32:5D:80:2F:61:68:C1:2A:66:87:C2:43:37:D0:1E:8B:50:AF:A7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196CD3F2AA4859B2D8709D0A2AA7621D5D0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7DJdgC9haMEqZofCQzfQHotQr6c.roa
Signing time: Wed 14 May 2025 05:23:11 +0000
ROA not before: Wed 14 May 2025 05:23:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399044
IP address blocks: 151.242.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:3f:2a:a4:85:9b:2d:87:09:d0:a2:aa:76:21:d5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 14 05:23:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec325d802f6168c12a6687c24337d01e8b50afa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:fa:8f:ef:a8:f7:17:59:23:4d:d9:55:05:
e1:87:42:7c:3c:a1:25:85:a3:b7:09:d6:a7:37:83:
0b:a8:94:eb:05:0d:f9:36:f2:a0:49:29:11:57:ac:
c1:e2:82:c5:20:97:34:b4:05:b7:25:1d:aa:5a:2c:
9f:be:92:05:c7:2f:a4:a9:62:10:6c:63:91:0e:eb:
43:59:a6:91:dc:de:45:08:ea:25:44:4f:0e:7d:fc:
6c:41:05:47:45:b2:c8:ab:f0:f7:dd:10:28:c5:a9:
c4:78:e5:e8:90:91:b0:28:07:67:b3:bb:77:d5:29:
61:4e:98:01:d1:1c:79:e0:33:bc:18:ad:0b:ad:42:
bf:71:79:18:6a:15:25:a5:66:8b:51:b0:cf:5c:32:
5d:ef:1f:a1:05:58:6e:e9:37:e1:a1:6b:c7:f7:83:
d2:62:c2:08:f1:0c:90:d4:68:2f:9f:a9:bd:4b:2d:
4d:87:00:65:b6:e0:d1:df:1b:c2:fc:1a:f4:ae:88:
f9:2c:fe:b4:ce:f3:4b:b0:7d:81:5c:85:fb:7b:c6:
6f:10:2e:84:76:0f:83:eb:ee:2e:67:0c:92:2c:91:
6d:34:c5:a8:ca:fc:fd:7d:00:d9:6c:2e:62:78:b8:
59:99:de:39:91:f4:20:f1:27:ee:b1:b1:d8:6c:f9:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:5D:80:2F:61:68:C1:2A:66:87:C2:43:37:D0:1E:8B:50:AF:A7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7DJdgC9haMEqZofCQzfQHotQr6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.50.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8c:1e:45:4c:1d:de:ff:d5:ee:54:d6:ea:84:70:ae:f6:a7:
24:5d:32:d8:34:d5:5e:76:66:4e:76:3e:92:fd:9a:ca:1d:d9:
e5:00:1b:74:86:4d:0b:c3:38:0c:22:a4:ec:c1:52:f9:79:dc:
c9:69:25:70:91:23:3c:06:3f:ac:b6:52:4f:16:db:4f:ad:d9:
00:9e:e2:4e:c8:86:45:e1:c2:d5:eb:1a:3e:0d:5a:e4:20:06:
1e:62:cc:73:3c:dc:72:3b:94:9e:fd:00:70:a5:38:13:30:ed:
12:87:78:47:61:9c:87:97:29:d7:26:65:3f:2e:7a:53:c0:b0:
38:f0:d6:57:4f:9e:90:e7:e9:af:5b:e6:1e:40:ec:44:e5:2b:
c5:a5:7c:3d:17:27:cd:09:d6:d8:ba:ac:7d:ed:0c:95:ea:b6:
e9:17:a5:be:18:e9:60:06:29:67:c0:0e:f9:4e:4e:f8:10:f1:
8f:33:75:f1:b9:0a:04:1b:67:4a:01:af:ec:cf:b0:5d:8a:47:
2b:24:84:cb:52:b6:5a:33:aa:48:dc:80:39:5e:5e:b9:63:b0:
bd:86:fe:3c:0f:22:b7:44:98:b0:aa:59:eb:6b:7e:bc:0d:ef:
2d:0f:84:c2:e6:bb:65:23:83:27:35:9e:7b:78:ae:1a:8f:91:
f9:e9:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:59:45 2025 by rpki-client