Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DU_gYdqawiOx9CALbEuBaCMrRcs.roa
File: DU_gYdqawiOx9CALbEuBaCMrRcs.roa (raw, json)
Hash identifier: DjcI2NrQRl0HM5UIlI2YI28ZKsefdbJyZnspkujKXqk=
Subject key identifier: 0D:4F:E0:61:DA:9A:C2:23:B1:F4:20:0B:6C:4B:81:68:23:2B:45:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198C751880C06873A72987D6C7B8B9F75BD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DU_gYdqawiOx9CALbEuBaCMrRcs.roa
Signing time: Wed 20 Aug 2025 11:51:05 +0000
ROA not before: Wed 20 Aug 2025 11:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 151.243.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:51:88:0c:06:87:3a:72:98:7d:6c:7b:8b:9f:75:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 11:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d4fe061da9ac223b1f4200b6c4b8168232b45cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:59:79:b8:03:a7:ec:5f:f9:f8:80:26:f4:
2f:a5:b8:cd:75:ae:59:86:32:fd:c8:4a:8c:43:d2:
14:4d:7e:d8:dc:46:73:16:cc:02:27:1a:d9:ea:28:
03:98:32:3d:a1:24:95:72:5c:f3:ad:66:62:e0:16:
51:f5:95:47:ef:b4:2f:bd:73:bc:05:16:32:4e:92:
bc:97:6a:59:0c:bc:c3:d9:35:f0:a9:18:a7:0b:c6:
36:cf:0e:e7:89:c4:37:7e:c6:a3:09:4e:a1:8e:a4:
15:58:a0:9e:7b:9e:d1:c5:39:94:56:62:b9:c7:3d:
10:97:63:90:60:88:5b:5c:1b:0f:ab:5a:4e:4a:3d:
5a:27:c9:ca:12:fa:37:d8:b9:39:3a:9a:48:44:aa:
ec:61:2e:f6:a9:b5:c3:9c:0b:02:09:3d:e4:39:57:
ff:26:db:c8:9e:a1:41:82:ac:76:ec:a7:86:90:54:
16:75:9e:60:db:dc:3e:b0:ad:a2:9e:b0:e6:82:c0:
e4:cc:58:d4:fe:b4:81:96:00:c2:87:b7:e9:ef:a6:
1a:4b:62:61:92:3a:f2:a8:36:16:c9:a0:66:74:df:
61:fb:41:3b:ae:cd:77:86:3b:fd:c5:95:3e:ec:4d:
68:23:e0:66:ca:da:f1:09:9c:24:4b:b8:bc:6f:64:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:E0:61:DA:9A:C2:23:B1:F4:20:0B:6C:4B:81:68:23:2B:45:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DU_gYdqawiOx9CALbEuBaCMrRcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.102.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a7:92:a8:b6:ae:7a:2a:33:d5:1c:04:56:28:80:6d:c1:0a:
02:e9:70:85:c1:94:d4:e9:63:de:6e:05:86:21:6f:7f:c8:44:
90:1b:ed:c7:3f:ab:11:98:40:6c:51:03:bb:21:88:19:78:78:
88:56:e3:1e:21:8e:67:7b:73:e8:be:f3:c7:cb:c0:44:6e:94:
3b:a3:90:95:8c:d0:f2:10:b1:17:6f:10:b3:35:e1:24:9e:01:
33:6d:07:73:ab:da:f8:ae:79:ab:5a:df:24:7b:4e:4e:e8:60:
fc:68:9c:9f:c1:87:62:c9:cb:21:e9:47:6d:35:c5:21:0a:ff:
c7:7a:97:1c:17:db:ff:08:b0:82:a0:f4:0d:49:fe:b2:40:e6:
6f:28:4e:ef:f4:43:23:98:d2:33:6c:e9:ad:17:76:2b:87:95:
80:6e:29:d3:b7:f4:a2:c2:d3:25:21:b9:e7:35:25:b4:41:12:
7f:7f:d5:d7:a6:54:96:56:4f:8b:06:4f:28:75:c2:af:f9:0d:
e4:73:a6:36:dd:78:72:5a:bb:20:a5:36:73:72:93:2e:f4:5a:
52:e3:f5:05:b8:a9:ae:a9:29:12:08:14:70:6f:a5:f3:14:d6:
1d:c6:69:ed:76:cc:0e:c0:eb:25:c6:b3:e7:af:5c:38:ca:e7:
03:15:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:43 2025 by rpki-client