Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7F2wY2OKi7PXnXTbSMj7_CRiLFk.roa
File: 7F2wY2OKi7PXnXTbSMj7_CRiLFk.roa (raw, json)
Hash identifier: aryKwMm7rKdlAaDKfQ5fmsnBfGLEK0SI0XtCsVyVj9U=
Subject key identifier: EC:5D:B0:63:63:8A:8B:B3:D7:9D:74:DB:48:C8:FB:FC:24:62:2C:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01967AF3F8D32071DFDEE18A452659258649
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7F2wY2OKi7PXnXTbSMj7_CRiLFk.roa
Signing time: Mon 28 Apr 2025 05:52:11 +0000
ROA not before: Mon 28 Apr 2025 05:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 151.241.5.0/24 maxlen: 24
151.242.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:f3:f8:d3:20:71:df:de:e1:8a:45:26:59:25:86:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 28 05:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec5db063638a8bb3d79d74db48c8fbfc24622c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:73:58:0e:cb:dc:f0:13:0c:59:82:64:6d:
38:db:b2:49:54:77:07:bf:e7:dd:a1:f3:b6:43:2f:
76:66:81:af:98:4f:d2:0a:fc:0f:ea:21:43:4f:51:
70:87:95:33:fe:6c:d4:4b:be:87:c1:b7:01:3c:62:
97:7b:9e:8c:8d:d0:d9:53:48:a6:4b:29:3c:d2:83:
cc:c8:db:ff:2f:f4:bf:b4:8e:34:dc:16:67:fb:55:
d7:b5:68:81:40:fc:1e:0b:b0:41:5e:0e:4f:5f:ab:
82:1b:c6:96:ce:2f:44:fa:9c:7f:2c:12:51:6c:35:
2b:87:a1:83:57:f4:c0:e5:0d:a8:b5:b3:85:25:33:
cc:ac:6c:f3:c4:53:e3:bb:8b:4e:da:40:9f:b8:49:
cd:fc:2e:2a:48:dc:c8:a7:e8:c4:eb:1c:14:60:9e:
96:62:97:9b:4e:7f:37:38:3d:6d:d4:b7:d5:d8:60:
98:1d:3b:d4:21:0e:5f:01:3f:af:95:a9:28:ec:a3:
f1:a9:b3:91:a9:90:eb:9b:d0:1f:dd:c1:b5:4b:b0:
37:83:af:ef:f6:1d:03:76:b3:5d:41:50:37:3d:be:
57:53:94:8b:7d:91:93:c3:88:97:36:81:17:6a:1e:
b2:92:fb:eb:bf:a1:db:47:d4:96:32:45:32:1a:37:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:B0:63:63:8A:8B:B3:D7:9D:74:DB:48:C8:FB:FC:24:62:2C:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7F2wY2OKi7PXnXTbSMj7_CRiLFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.5.0/24
151.242.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4e:93:e0:ab:e4:a7:80:1d:3d:25:4e:51:83:67:6a:e6:95:
98:a3:0e:25:90:92:44:72:39:cf:4e:bc:82:5b:e4:ce:8e:08:
8b:6e:71:ce:bf:93:d7:34:41:e1:56:b6:92:b7:f8:70:96:5c:
56:0c:9b:e0:8e:8b:15:67:3b:5a:d3:c1:95:e4:b3:80:eb:66:
30:e1:3c:18:0d:e3:e8:b5:02:d7:dc:a4:5d:fa:de:3e:82:a3:
aa:a7:3b:f6:00:1b:0b:32:46:29:6e:79:69:c8:64:e4:56:00:
80:6a:ca:ab:19:c8:66:a4:6a:9e:d9:7f:a2:22:af:26:51:f6:
e5:c8:2d:0f:b7:6a:ce:0b:55:2f:5e:37:75:38:f0:1f:44:11:
c9:c5:7f:43:9c:6b:06:56:74:ee:d0:b2:f9:ca:68:8c:b6:05:
a2:2e:d3:f3:26:9e:8a:17:c4:21:7a:76:28:11:33:cb:8d:f0:
17:7e:72:7d:d1:ad:e5:d4:3f:fc:46:ae:9a:d8:d5:0e:cf:21:
c1:a1:41:e8:9e:4e:57:e8:a4:af:f8:75:ca:14:ec:bc:36:0c:
dd:05:6e:c8:7b:30:59:3c:75:5d:b1:f2:13:12:f8:16:e6:1b:
32:e0:33:cf:41:a8:2f:3f:bb:f0:d3:07:53:ad:ca:9a:a4:59:
48:22:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:15:24 2025 by rpki-client