Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7xKWtB_skWxsZ8umGK6jpKiyz74.roa
File: 7xKWtB_skWxsZ8umGK6jpKiyz74.roa (raw, json)
Hash identifier: 3PIuk0fE9wcUXcT3ZRfsFwUAKkP1NGB6pf/qgzMPscM=
Subject key identifier: EF:12:96:B4:1F:EC:91:6C:6C:67:CB:A6:18:AE:A3:A4:A8:B2:CF:BE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A535D6C0117F34D717844C7E44CE6A47
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7xKWtB_skWxsZ8umGK6jpKiyz74.roa
Signing time: Tue 06 May 2025 10:48:11 +0000
ROA not before: Tue 06 May 2025 10:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209414
IP address blocks: 151.242.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 20:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:35:d6:c0:11:7f:34:d7:17:84:4c:7e:44:ce:6a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 10:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef1296b41fec916c6c67cba618aea3a4a8b2cfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:fe:32:58:93:cc:1b:46:82:93:be:09:5a:
72:c5:33:12:af:b4:e9:d9:e2:21:e4:a7:2c:a0:30:
4c:7c:0c:ab:6b:e6:e0:f1:84:9f:7d:6d:f6:f7:26:
24:0c:23:ba:81:8e:61:0a:f0:f0:7f:8a:e0:38:bc:
8f:77:2c:51:12:a0:4e:95:91:90:54:03:30:26:54:
9b:48:5b:7e:9b:5b:61:fc:54:b4:63:5c:bc:05:3d:
14:c1:62:fc:e8:38:d0:7e:f7:b2:ee:dc:ac:d0:06:
bd:4b:db:62:44:8b:d7:0c:8a:1d:dc:d7:16:f1:0d:
12:0f:03:73:9f:e3:29:93:38:81:4f:d5:6e:98:0b:
ad:b8:aa:89:b7:b5:d4:4e:45:b7:1d:81:d8:e5:72:
55:87:db:74:63:52:5e:84:61:0c:4c:4d:0c:a7:86:
78:0a:21:3c:15:1b:9f:85:f3:1f:df:89:06:e2:e5:
cc:cb:4e:8e:6c:8b:57:43:67:f7:c6:8a:ad:e1:a2:
0a:de:f7:0d:aa:c7:cd:4a:7f:af:eb:94:26:fe:6a:
20:73:5c:1b:99:45:4a:6c:3e:58:dc:fe:86:73:a6:
fe:a8:b4:34:a0:11:a1:7f:30:b6:c9:ff:e8:45:16:
6d:38:7c:a4:92:98:b2:75:51:a6:02:cc:83:8e:4b:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:96:B4:1F:EC:91:6C:6C:67:CB:A6:18:AE:A3:A4:A8:B2:CF:BE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7xKWtB_skWxsZ8umGK6jpKiyz74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.99.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fb:67:a6:d3:a7:a0:ef:dd:68:f3:b0:34:af:8c:21:bf:a5:
27:fd:c6:3c:f8:a3:a2:bc:60:ef:41:a7:20:a9:4e:f0:fa:6b:
c7:50:6d:a8:44:56:55:c0:da:dc:8d:ce:c7:f2:94:28:c8:46:
9c:00:98:fd:35:ca:9c:42:b2:8f:c0:0e:8b:91:ff:94:ba:9b:
e7:92:c1:8b:dd:98:8f:fd:a3:7c:6b:ed:c7:9e:d8:78:f7:bc:
64:64:7b:b4:07:20:3c:0b:69:0c:eb:e0:01:8e:63:15:6c:a8:
4a:6a:e9:da:aa:0f:6f:2c:77:30:53:aa:a6:d4:b4:96:0d:13:
80:be:4b:3b:19:20:1e:d5:e8:4e:88:9b:5f:5b:b5:ba:62:9a:
a9:6e:74:ad:57:46:0c:46:e5:76:0d:58:92:f8:b3:10:7d:08:
14:7e:13:64:ba:6b:ea:11:7a:bd:ca:a0:6c:67:51:fc:c3:a5:
14:15:d6:a4:43:c7:d5:ab:61:5e:4e:38:e8:81:c8:20:09:25:
a4:ba:3c:6e:8d:23:10:62:eb:e3:61:f6:5d:fd:32:2b:e2:da:
ca:5e:21:8f:4f:f9:0c:8a:6f:8a:bd:05:72:7f:e5:4f:4b:b7:
0a:75:3e:70:7b:d3:7b:40:29:fa:9a:48:4a:bd:24:00:05:df:
c3:bb:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:46:31 2025 by rpki-client