Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EeqXc3ATVDHpXruai5R51PLuEkQ.roa
File: EeqXc3ATVDHpXruai5R51PLuEkQ.roa (raw, json)
Hash identifier: 2ZetZ1+tVGHQSFSHJnfDS235GawQXtueT4XB9u1gj+A=
Subject key identifier: 11:EA:97:73:70:13:54:31:E9:5E:BB:9A:8B:94:79:D4:F2:EE:12:44
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01978C51D8E49F6FBF106A10C6F60F401B04
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EeqXc3ATVDHpXruai5R51PLuEkQ.roa
Signing time: Fri 20 Jun 2025 07:51:03 +0000
ROA not before: Fri 20 Jun 2025 07:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 151.244.14.0/24 maxlen: 24
151.244.44.0/24 maxlen: 24
151.244.50.0/24 maxlen: 24
151.244.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:51:d8:e4:9f:6f:bf:10:6a:10:c6:f6:0f:40:1b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 20 07:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11ea977370135431e95ebb9a8b9479d4f2ee1244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:b1:6f:e2:7f:f2:43:3f:f2:10:6a:c9:98:
5a:69:72:35:57:44:52:0c:46:b6:3a:0b:b5:ef:8f:
2c:56:12:23:ab:5f:36:0a:d7:63:2a:dc:de:40:33:
2d:7f:a9:16:b5:bc:6b:2e:44:97:30:20:b5:5c:47:
75:d0:cc:62:96:32:02:d7:46:3b:45:38:a8:ac:ab:
48:38:da:49:ba:48:9a:ed:fb:d7:3e:30:1b:63:a8:
dc:5d:f6:56:10:b7:77:17:86:ce:43:7b:25:65:c2:
66:99:eb:b0:55:d4:cc:26:95:73:fa:4b:c3:85:2a:
5d:bf:88:5a:10:e8:17:50:0c:c0:ee:52:05:5d:63:
02:20:ba:44:25:29:8b:56:ed:05:31:c7:cb:2c:65:
f6:67:50:47:78:99:43:b7:75:e1:c9:e4:52:ba:a3:
b6:f6:a9:33:0e:b5:80:bb:cc:63:58:5b:4c:52:80:
92:16:57:f3:44:37:6b:e0:1a:55:88:1c:96:08:d6:
59:3d:8c:95:2b:e3:a1:89:58:a3:c8:c5:b4:a0:b5:
46:bb:ec:dd:bc:57:39:a2:c8:ec:0c:dd:c4:b7:98:
cd:78:b9:7d:2a:38:2f:23:41:07:1d:57:49:0e:ae:
1a:43:0a:40:1e:04:fa:28:41:ed:1b:2b:ba:66:f3:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:97:73:70:13:54:31:E9:5E:BB:9A:8B:94:79:D4:F2:EE:12:44
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EeqXc3ATVDHpXruai5R51PLuEkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.14.0/24
151.244.44.0/24
151.244.50.0/24
151.244.85.0/24
Signature Algorithm: sha256WithRSAEncryption
54:00:0c:4a:b3:d2:97:93:2e:b6:d8:49:51:69:df:84:6c:c1:
bb:24:25:16:5c:37:ad:04:43:2f:0b:3a:79:ba:7c:51:ea:01:
4c:e2:a5:62:6d:87:83:41:bf:41:76:d7:89:b6:78:c3:b9:bc:
15:d5:ca:d5:aa:bf:99:ea:2c:8c:bf:bd:3e:91:6b:d9:4d:61:
82:9d:2d:4a:3e:f7:6f:a4:f0:76:a8:2e:0d:0a:5b:ec:65:e2:
05:6c:e6:b5:0e:bd:24:f8:6f:9d:4f:28:82:69:aa:7b:18:30:
8d:32:7f:4b:a9:be:b7:ae:1a:f2:cb:11:f3:3d:49:53:72:5e:
11:6a:4f:33:1e:7b:13:d6:51:65:cf:5c:86:d1:09:7b:0d:79:
51:fe:d7:e4:fb:d6:47:c5:ff:30:54:b3:e1:13:62:a2:4e:4a:
3e:62:99:6e:d8:4d:ce:fe:35:ce:ae:fc:f7:d4:df:c0:9a:92:
5f:35:1c:2f:a5:95:0a:51:06:bc:5f:26:55:cb:8e:63:98:ce:
e2:09:8d:f8:43:b8:83:29:e1:83:05:ed:7d:86:1d:26:24:9e:
cd:5f:ac:5e:ff:1f:15:4c:e2:fe:10:79:4c:cc:66:39:43:d9:
c5:04:1e:ca:d2:1c:48:26:49:04:51:29:a0:6d:2f:0c:02:c5:
6d:0e:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:30:10 2025 by rpki-client