Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AUZjpl4BAMahtZqqr8UdpTeBPHs.roa
File: AUZjpl4BAMahtZqqr8UdpTeBPHs.roa (raw, json)
Hash identifier: pdD8HWOFohxss57nunBYjabRYuEr1PesuNkYlNUhO8Y=
Subject key identifier: 01:46:63:A6:5E:01:00:C6:A1:B5:9A:AA:AF:C5:1D:A5:37:81:3C:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01987998BF974C6CB95C7CE97C8C56B301A8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AUZjpl4BAMahtZqqr8UdpTeBPHs.roa
Signing time: Tue 05 Aug 2025 09:38:30 +0000
ROA not before: Tue 05 Aug 2025 09:38:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149766
IP address blocks: 151.244.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:98:bf:97:4c:6c:b9:5c:7c:e9:7c:8c:56:b3:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 5 09:38:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=014663a65e0100c6a1b59aaaafc51da537813c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:f8:d6:65:c2:f9:c8:66:37:61:58:a4:43:
82:9b:6a:d8:bc:9c:05:9a:a2:0a:35:df:02:50:9a:
bf:f6:e1:d3:66:53:15:6d:5c:f5:b7:9f:46:79:80:
b6:19:53:34:0e:5a:7f:4e:d2:c6:39:93:20:84:13:
7a:af:fc:ac:1e:a5:d0:94:72:f7:e9:99:5e:60:33:
95:6b:32:5d:12:8f:d6:af:a7:fa:cb:66:d7:2e:ba:
70:ef:06:7b:1f:17:53:cc:43:55:ab:1d:1b:d9:e0:
4e:c6:01:32:b6:97:d0:4a:a2:6b:f3:d6:2f:d3:97:
56:28:cc:86:15:4c:79:bb:65:85:43:1d:23:06:4e:
51:94:4b:92:95:87:a2:ff:42:df:c3:fb:be:fb:85:
4d:4a:8f:f5:c2:c6:b6:12:96:49:42:2c:04:82:0d:
a1:19:aa:76:55:b6:1f:b7:3f:48:9f:c1:a1:a0:8b:
49:5d:c9:84:7a:07:5a:17:73:5c:3f:44:c3:d9:cc:
4d:2c:c3:c5:a5:3d:2e:0c:72:c9:9f:bd:53:0a:ae:
4c:3f:86:e9:d6:2b:ef:8d:dd:0d:ef:ae:2c:1b:b8:
36:d9:9f:95:42:d2:fc:2f:df:45:84:d2:52:65:c0:
9d:53:64:64:79:45:53:15:f8:9a:dc:7a:8e:df:cf:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:63:A6:5E:01:00:C6:A1:B5:9A:AA:AF:C5:1D:A5:37:81:3C:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AUZjpl4BAMahtZqqr8UdpTeBPHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.255.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6c:12:a4:49:11:de:dd:8b:77:34:5c:18:d6:66:0b:2a:ff:
61:ae:59:e8:d3:40:d0:3c:95:bd:46:31:31:ee:51:2c:2e:2b:
d9:31:94:17:1f:99:65:ad:0c:8c:aa:2f:db:6a:66:7b:a1:07:
ce:a0:d2:b2:85:18:82:b5:69:11:10:75:4a:20:b4:17:c1:f2:
5f:b7:8e:80:a2:12:6b:f5:bc:9f:fa:50:11:0e:3a:f3:e8:e4:
d9:38:bd:fa:74:a6:cd:a3:ef:ea:de:c1:db:8e:f8:d4:9e:0b:
be:47:0e:41:b1:75:31:dd:e6:93:e7:bc:54:f4:5e:34:fe:85:
56:23:79:57:03:61:69:d4:55:b2:b1:07:1f:e1:98:9a:2e:c5:
f2:ae:5c:3c:b1:25:ac:5a:3d:d1:f9:6d:dd:26:b5:d7:65:c8:
af:00:ee:dd:f1:d0:2a:49:89:be:00:27:dd:93:7f:db:44:7d:
b6:4c:c1:33:87:ba:9c:5d:76:53:33:2e:ea:b5:5a:81:cc:91:
fe:c9:f6:ca:df:ba:e9:c6:51:81:ea:93:5a:e6:60:18:18:7a:
22:b1:be:0b:fa:04:ec:9a:7d:74:2f:a0:f6:14:0d:c8:d7:ae:
aa:71:5d:e2:08:de:29:5f:6e:51:3d:9d:e6:85:92:aa:e2:4e:
de:bf:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:49 2025 by rpki-client