Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bx0ogxnDfkCuflO-5skhoJ9YZ2I.roa
File: Bx0ogxnDfkCuflO-5skhoJ9YZ2I.roa (raw, json)
Hash identifier: PDEpZB9+gPI0xVYWQQooajRmDRqE0gLovTSoFKpOIjo=
Subject key identifier: 07:1D:28:83:19:C3:7E:40:AE:7E:53:BE:E6:C9:21:A0:9F:58:67:62
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198B1905F88AB79E69A48ADA6EC3A959EFA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bx0ogxnDfkCuflO-5skhoJ9YZ2I.roa
Signing time: Sat 16 Aug 2025 06:28:05 +0000
ROA not before: Sat 16 Aug 2025 06:28:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151336
IP address blocks: 151.241.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b1:90:5f:88:ab:79:e6:9a:48:ad:a6:ec:3a:95:9e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 16 06:28:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=071d288319c37e40ae7e53bee6c921a09f586762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:35:13:e9:42:6b:30:26:ee:dd:9b:50:3a:
59:b7:11:5b:57:5b:cf:2b:b9:90:c9:70:2f:6e:cf:
d7:05:55:bd:bc:56:e5:f0:dc:b6:3a:ab:1c:9f:56:
13:25:36:ca:94:47:50:42:c6:7c:54:36:ab:47:2e:
d4:c1:39:ea:33:70:60:95:b4:5d:7d:27:56:f7:9e:
6d:aa:64:70:b7:26:2f:fb:1d:1b:00:c1:d9:fa:0a:
ab:34:36:58:6b:48:0f:36:78:24:a5:91:34:8d:f8:
aa:f5:fa:43:95:80:31:01:06:07:f5:0f:b7:8b:76:
60:3a:93:f7:7e:b5:4d:95:9e:b8:87:6a:ac:f6:65:
c9:f6:e5:0b:c7:c4:4b:d8:85:71:9f:6a:f3:20:85:
ec:aa:a9:ae:3b:bd:f9:83:26:6a:b3:83:6f:c5:bc:
ca:41:73:a7:4f:5a:3c:39:73:ec:35:54:c5:67:4f:
d8:ea:29:69:65:15:f3:88:3b:9d:b8:f2:da:8c:bc:
7f:eb:23:a3:29:60:19:ad:54:94:1c:32:8e:ba:6c:
76:11:c4:52:b2:3a:6d:13:36:53:cc:e7:98:bc:22:
e1:20:a3:a5:3c:eb:bd:04:73:b1:23:6f:5d:49:e0:
e2:75:d3:78:33:47:45:6c:30:c7:8f:15:2b:c8:14:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:28:83:19:C3:7E:40:AE:7E:53:BE:E6:C9:21:A0:9F:58:67:62
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bx0ogxnDfkCuflO-5skhoJ9YZ2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.28.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a3:ab:5f:a3:3c:20:3c:2a:33:b8:9d:3c:d6:c1:cb:2b:f2:
06:11:d4:61:88:0b:92:29:44:5f:e1:2e:ac:7f:6b:f6:55:d2:
b7:2f:e7:66:ab:0e:1e:9e:e7:c4:f1:a8:10:d7:c1:a1:eb:7f:
27:fc:f9:d7:99:6c:7a:28:a9:59:2c:e9:d6:8e:17:4a:6f:f0:
c7:24:6c:06:54:24:a0:7b:48:58:43:ca:88:d6:8a:9a:3f:17:
d4:fe:ad:85:e3:c4:d6:e5:82:24:e4:f2:8f:7e:4c:c8:54:24:
65:19:1c:74:75:29:04:28:90:0b:cf:78:3d:d3:4a:ce:ce:6c:
16:fa:53:2d:88:16:36:24:64:58:c9:89:a1:03:71:5d:9e:42:
01:85:41:9f:0a:5d:b7:c2:45:7d:d3:f0:d8:3c:12:19:e2:1b:
49:3a:2d:bb:bc:e1:da:1d:41:0e:45:7c:42:44:6c:72:a5:5e:
72:bf:c2:d5:13:ff:60:e9:07:87:78:07:2c:f6:7d:91:79:9a:
bc:d4:a3:83:bf:9e:ae:12:19:c3:b1:59:3c:ac:f8:7d:9f:4e:
72:7c:74:76:8c:43:c8:9a:40:75:a4:27:85:7b:6d:b2:26:1f:
cd:50:ab:78:b7:64:b7:a1:bc:f6:70:46:1b:56:df:3c:ca:f1:
5a:c8:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:39:30 2025 by rpki-client