Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8iDF7aBPihPU_f9Kvlna2wEXyZc.roa
File: 8iDF7aBPihPU_f9Kvlna2wEXyZc.roa (raw, json)
Hash identifier: aNAZBdKjiebQ5z4P4w21DObhxwmbb+V+k5qaW7I9b2c=
Subject key identifier: F2:20:C5:ED:A0:4F:8A:13:D4:FD:FF:4A:BE:59:DA:DB:01:17:C9:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D57B04AF381991747EBACEADC56E057D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8iDF7aBPihPU_f9Kvlna2wEXyZc.roa
Signing time: Sat 23 Aug 2025 05:51:05 +0000
ROA not before: Sat 23 Aug 2025 05:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 151.241.161.0/24 maxlen: 24
151.243.93.0/24 maxlen: 24
151.244.233.0/24 maxlen: 24
151.244.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:7b:04:af:38:19:91:74:7e:ba:ce:ad:c5:6e:05:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 23 05:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f220c5eda04f8a13d4fdff4abe59dadb0117c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:09:d3:82:11:6e:41:0e:32:61:a6:8a:1f:
4e:2a:35:0e:42:9f:dc:92:56:3b:23:53:90:f8:d9:
ec:d4:f1:b0:e4:0f:c9:49:fc:f2:0b:ee:f0:9b:3b:
5d:25:bf:6e:fa:ea:0f:ec:41:84:b1:c0:12:9c:9c:
e1:14:d1:bd:03:50:aa:38:54:1b:40:3d:75:3e:18:
cf:60:e3:58:db:2c:25:4a:64:d1:31:09:ec:e8:09:
68:01:43:5f:91:12:9f:61:c4:d6:e4:10:d6:3f:a3:
86:51:2c:91:33:87:b0:50:50:1f:4b:18:34:c9:48:
54:ac:83:35:45:a4:88:4c:ff:c6:33:ba:1a:d4:5f:
8f:74:8a:32:3c:56:9d:31:e0:ab:f0:e3:d7:5e:44:
04:24:3d:09:43:59:ec:0a:5f:ea:62:b9:de:07:71:
68:e3:53:63:f4:17:1a:4b:e4:a2:19:bb:b2:28:18:
bf:c5:f3:dd:2c:f4:4a:e4:3a:a7:1b:b7:35:df:64:
45:8e:26:1e:3e:f8:34:cd:87:94:30:c4:fe:02:c6:
55:0d:68:a1:e7:5e:d7:b0:7a:95:3f:cf:25:fa:60:
6f:61:cb:e5:2e:9c:a8:de:7c:0a:6e:cc:6b:e7:20:
a7:94:ca:b7:00:82:05:f6:d5:8b:d2:fd:b8:dd:2f:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:C5:ED:A0:4F:8A:13:D4:FD:FF:4A:BE:59:DA:DB:01:17:C9:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8iDF7aBPihPU_f9Kvlna2wEXyZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.161.0/24
151.243.93.0/24
151.244.233.0/24
151.244.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:47:a5:e1:6a:b8:86:b2:70:3f:6e:5b:18:a2:5c:d3:76:34:
a3:8a:18:3f:7e:50:3e:5c:aa:4a:a2:29:61:14:52:64:c0:c4:
32:1d:b1:98:60:9f:27:1e:c3:f3:b6:60:94:45:27:d9:59:40:
5d:ac:88:99:c7:dc:47:53:75:a6:5a:72:96:ee:e1:da:2d:3d:
70:b1:c5:3d:54:fd:8e:68:db:b8:1f:82:9c:64:f4:df:2e:a2:
41:04:f0:59:ae:6e:bf:36:83:c3:32:45:90:76:8c:15:47:b6:
3b:ba:69:04:b3:a9:fd:ca:e4:eb:ef:db:23:2d:a5:ac:f8:b4:
5b:dd:5d:76:12:05:a0:1a:1c:e3:51:7a:4a:b1:5b:4e:84:0f:
b3:9a:99:c8:09:e0:48:83:43:d9:b1:80:8a:31:fb:40:ef:3d:
b2:11:3c:0b:ae:0f:4d:1c:e8:44:fb:d0:e4:36:3b:bd:1c:2c:
13:5b:b8:0a:ea:48:86:1e:3d:38:8f:12:2c:7f:11:32:2b:80:
b9:79:af:f4:ae:51:c7:7f:d8:4b:20:43:ec:6a:66:85:33:49:
38:63:cc:33:dd:de:60:c9:b1:cd:f2:bb:86:cd:83:ba:e5:cd:
1c:b2:63:c6:c9:65:20:6c:50:62:de:ae:5c:c4:cc:ee:cb:a1:
8b:ea:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:14 2025 by rpki-client