Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FrZMGnCraDKs4uiGKpCJON1xW7o.roa
File: FrZMGnCraDKs4uiGKpCJON1xW7o.roa (raw, json)
Hash identifier: +oO76npaXg3jb/TxTKZJMfQDpUprSoYqAcZMGbsrox8=
Subject key identifier: 16:B6:4C:1A:70:AB:68:32:AC:E2:E8:86:2A:90:89:38:DD:71:5B:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01968507EA0B37134E2CBFFDB1E31A4D21A4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FrZMGnCraDKs4uiGKpCJON1xW7o.roa
Signing time: Wed 30 Apr 2025 04:50:10 +0000
ROA not before: Wed 30 Apr 2025 04:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209675
IP address blocks: 151.242.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:07:ea:0b:37:13:4e:2c:bf:fd:b1:e3:1a:4d:21:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 04:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b64c1a70ab6832ace2e8862a908938dd715bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:23:c4:4f:42:2e:dd:4a:23:51:e1:8d:6a:
4c:2d:fb:24:3b:bd:bb:25:cf:b4:a1:95:d5:29:89:
12:8d:56:03:2c:65:d0:f4:f7:c2:93:0d:0d:40:51:
eb:91:ea:11:b6:91:fb:95:a4:f1:06:08:49:58:d3:
b5:d1:13:12:a4:6f:9e:20:da:01:74:bd:9f:ea:b0:
9a:51:c7:dd:df:8c:c4:9e:c9:cd:e4:d8:61:e5:b1:
c6:9f:d7:4b:01:fc:40:04:5c:36:a2:f9:cf:8f:9c:
54:77:8d:28:24:ff:6c:0e:b0:e8:34:74:12:6f:0f:
c8:7a:e5:c2:22:1a:dd:fb:c6:72:86:20:72:97:44:
df:2b:21:f9:1a:c8:fb:7d:42:2c:6e:db:a3:7d:19:
c8:15:2c:ba:bc:87:5c:2b:9f:90:82:ab:d9:9a:28:
cc:4d:50:15:68:96:52:8e:15:37:ab:af:44:9e:96:
9d:59:de:9f:2f:e6:87:f6:a7:bc:17:de:16:f8:be:
6b:97:e3:e5:db:3c:2d:03:50:9a:46:79:7a:30:69:
e1:29:9d:67:c7:c6:2c:cd:f3:92:16:fb:48:65:65:
5d:c9:a1:0c:57:1c:f0:da:24:01:26:8b:20:65:92:
37:0f:2c:86:52:8f:b7:85:13:8e:b4:f8:03:bf:57:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B6:4C:1A:70:AB:68:32:AC:E2:E8:86:2A:90:89:38:DD:71:5B:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FrZMGnCraDKs4uiGKpCJON1xW7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.157.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d2:6c:e1:56:41:19:00:b4:85:3d:e3:ee:44:45:da:82:9c:
3e:3b:77:ab:39:4a:fc:d9:80:e1:31:23:72:f4:42:26:56:b4:
16:ad:ec:4c:a3:2d:b4:7c:db:c4:ca:a3:a3:02:b8:91:cf:22:
d4:50:d4:23:16:21:66:b4:9a:bf:d6:8d:ed:ad:18:1a:3d:d2:
1b:4a:1e:e2:f5:82:2e:2f:60:ea:8d:04:a7:3d:5a:aa:a2:0e:
02:a3:b3:6f:56:eb:03:27:e0:88:f0:49:d9:9d:2a:cc:32:5a:
f1:cf:9b:30:82:34:64:ef:d2:f7:ee:27:c0:3b:87:ad:24:4a:
51:77:79:aa:28:b6:cb:8c:d2:82:c0:5a:fc:e2:d2:3f:23:56:
49:18:4e:5a:be:7a:3f:b3:42:24:02:c4:b9:49:fc:70:c9:1c:
7c:c0:b3:4a:e3:56:9d:10:2b:f8:ee:0f:6f:ec:6e:b7:ec:2b:
e7:d4:6f:47:a9:9a:6d:33:02:b9:93:ef:86:5a:35:2a:74:a1:
29:63:8c:f6:a9:d9:62:2f:bc:4e:ff:e9:e1:04:99:90:a1:0d:
70:06:2d:1b:ef:c2:d0:83:e8:7d:03:79:aa:94:52:1f:97:29:
f9:a0:98:4b:3b:4e:c3:0b:0d:b1:8d:5f:49:67:9c:3d:2d:5f:
f8:cc:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:18:55 2025 by rpki-client