Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DkRFDNaYKzTysGr49QR5MVYe5hw.roa
File: DkRFDNaYKzTysGr49QR5MVYe5hw.roa (raw, json)
Hash identifier: tFhE31lh3KuPLHf4GTY99awZ5YAMfPy2Rb3VO26BCBs=
Subject key identifier: 0E:44:45:0C:D6:98:2B:34:F2:B0:6A:F8:F5:04:79:31:56:1E:E6:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196AABA7DE0E62129715C89CDDF289587F1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DkRFDNaYKzTysGr49QR5MVYe5hw.roa
Signing time: Wed 07 May 2025 12:31:10 +0000
ROA not before: Wed 07 May 2025 12:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13122
IP address blocks: 151.242.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:ba:7d:e0:e6:21:29:71:5c:89:cd:df:28:95:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 7 12:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e44450cd6982b34f2b06af8f5047931561ee61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:1a:b9:5d:e5:22:e1:91:37:7f:63:4c:6c:
c3:de:eb:9c:86:0a:2a:ea:bc:f8:56:f7:a3:63:09:
36:47:e2:af:a6:c9:52:0c:16:6f:bc:b4:fe:a4:b7:
96:5f:03:d9:4d:97:69:3c:93:c9:f8:3f:c0:26:1e:
0a:29:46:53:7d:48:05:9d:cd:20:78:01:d0:7b:63:
f0:94:16:56:b7:51:d9:a3:c1:14:72:d8:04:2b:79:
6f:4a:e1:63:70:26:d1:a5:a9:f5:f7:f6:c8:db:4d:
5a:ff:45:2b:c4:4a:1f:47:f7:41:07:9a:a9:c5:76:
76:8b:1f:38:b3:6c:ff:cc:64:3e:dc:48:aa:72:b9:
d8:83:d8:d8:b7:95:5f:60:0c:86:c3:29:f7:64:96:
7d:9e:d3:b8:c7:9f:f2:e2:5b:ea:88:63:c9:5b:74:
86:0c:04:c5:13:82:4c:e7:53:51:83:5f:58:27:c0:
26:15:42:13:9c:c0:2b:69:f3:ff:8a:6c:65:1c:b0:
33:d0:32:b5:91:a5:3e:c1:2a:e3:37:23:21:0a:eb:
40:87:cb:ce:02:b5:e2:9f:43:9e:20:56:98:2b:fd:
6d:06:c0:75:24:90:78:9a:6e:dd:ca:5d:41:39:11:
f3:96:21:cb:76:b5:78:f7:a3:b1:7b:2b:6e:01:a7:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:45:0C:D6:98:2B:34:F2:B0:6A:F8:F5:04:79:31:56:1E:E6:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DkRFDNaYKzTysGr49QR5MVYe5hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.28.0/24
Signature Algorithm: sha256WithRSAEncryption
05:bb:7d:78:8c:4b:0c:b3:60:22:f7:98:ca:f5:75:db:f4:3e:
54:da:82:bc:6c:3d:8c:e1:c8:60:69:c5:d7:63:4e:dc:ff:ae:
3e:39:f2:8e:f1:83:2a:7f:4e:99:74:66:28:de:98:d6:73:4c:
06:91:12:fc:c9:ff:77:cf:03:5a:72:7a:b7:c7:de:8d:16:7e:
aa:12:91:34:15:c8:78:bf:d1:04:56:2c:21:83:4d:ee:ee:64:
84:02:0f:0e:24:85:94:d2:60:c1:c4:09:9e:8f:2a:91:8d:87:
e0:35:5f:ce:f9:3a:21:80:e6:11:2d:9c:21:b5:88:89:a8:d5:
46:61:79:a3:ca:0e:86:b6:98:31:bd:2e:7d:e0:28:fa:70:81:
9f:58:26:7b:d8:38:ec:ab:ba:3f:19:c6:fd:cc:40:c4:ab:82:
a3:f1:b1:21:54:c3:8a:aa:a1:aa:e4:26:10:a7:25:88:f1:e8:
04:37:fb:58:c5:e0:17:d6:83:a9:b4:7b:78:c9:02:d5:42:5f:
45:c7:fc:f1:72:47:fa:bf:7d:c0:1c:b4:91:3f:e9:f8:4a:d3:
ea:78:9f:22:56:17:f4:4e:cf:3f:d4:eb:c0:92:6d:17:8e:57:
15:84:08:e1:12:9f:68:3a:6e:25:9a:dc:71:1c:c5:bc:f2:15:
74:64:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:19:35 2025 by rpki-client