Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Fu2OlLY4gk0JJEaMtMITt_7GzvI.roa
File: Fu2OlLY4gk0JJEaMtMITt_7GzvI.roa (raw, json)
Hash identifier: CKO2owOpjWvMQb6Xy6BUK4B1MGcgU2En0AtDL+G1I5A=
Subject key identifier: 16:ED:8E:94:B6:38:82:4D:09:24:46:8C:B4:C2:13:B7:FE:C6:CE:F2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977378169DD95A0A876F47342E075178EB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Fu2OlLY4gk0JJEaMtMITt_7GzvI.roa
Signing time: Sun 15 Jun 2025 12:02:19 +0000
ROA not before: Sun 15 Jun 2025 12:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 151.240.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:78:16:9d:d9:5a:0a:87:6f:47:34:2e:07:51:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 15 12:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ed8e94b638824d0924468cb4c213b7fec6cef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:26:09:75:dc:ec:66:b6:34:f9:f7:17:d1:
bf:48:c1:a1:90:ba:51:84:ba:65:65:26:c9:c5:b2:
97:b7:a4:28:04:15:89:f8:13:7a:6e:fe:35:bb:0b:
2f:21:61:86:75:44:b5:ef:72:8f:f9:e6:fd:e6:c2:
cc:41:7d:7b:a8:bc:71:23:a0:21:4e:9c:e4:13:33:
5b:9c:26:f1:b6:b1:de:01:ce:74:9d:e8:41:b9:b9:
92:85:05:cf:c5:7c:37:b6:f8:84:fe:7b:c1:34:97:
8e:02:d0:70:8f:a7:57:76:f4:b9:92:b4:b5:65:af:
46:1d:14:d9:4a:f4:25:18:42:18:61:2d:2f:30:92:
7a:44:3a:86:ee:58:4c:41:94:86:14:18:af:ee:bd:
76:f4:d2:08:2b:91:78:aa:df:0d:44:4a:fc:b5:19:
5d:97:eb:48:c8:70:12:70:8c:e2:26:cf:fa:a2:23:
49:4b:9a:32:d7:5e:d2:35:f8:b8:54:6b:73:17:9e:
20:d5:80:d0:77:5e:e3:e8:f5:ee:b0:16:46:20:f7:
4b:f2:48:ac:41:f8:4d:93:9f:ff:6b:f2:6e:53:13:
c1:d0:7b:0c:cd:c7:fe:d9:cf:74:e4:29:70:d9:73:
c3:ec:3b:1d:06:35:c1:00:7c:ea:70:86:e7:01:f6:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:8E:94:B6:38:82:4D:09:24:46:8C:B4:C2:13:B7:FE:C6:CE:F2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Fu2OlLY4gk0JJEaMtMITt_7GzvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:01:aa:dc:52:be:a2:b9:b9:c5:6c:1d:8b:12:67:e0:6c:f2:
83:11:3c:7e:9a:72:44:24:75:61:b5:de:5e:dd:2c:56:f7:c8:
59:dc:31:fc:5d:3d:a2:a8:a7:33:6e:5d:5b:36:0f:3a:9b:10:
37:f6:76:a8:98:35:57:d4:f7:87:f1:d9:00:d7:4f:8b:98:49:
f2:a2:38:7f:69:c3:58:92:bc:15:08:3b:44:f5:ef:73:70:a5:
be:d4:09:6d:51:ec:62:31:4e:83:9b:3d:09:6d:05:35:5e:a2:
4a:ab:3d:16:9a:30:1c:5c:b5:bd:41:b1:db:12:fc:f1:46:8e:
f5:d8:19:8a:44:44:f6:1c:53:b1:54:79:0d:86:84:4f:23:5a:
4f:cd:4f:83:7b:ca:ce:ac:51:4f:29:91:b6:f2:e2:39:a3:31:
3d:c9:61:d4:4b:2a:2e:44:fc:43:4f:c7:84:92:8b:dd:a3:26:
96:35:63:99:e7:fe:35:f9:54:a6:ef:07:57:50:4d:93:1e:4b:
fc:8f:1f:3a:c2:7b:56:97:ae:3c:9d:12:e2:1a:c7:15:e9:22:
5f:78:64:65:38:cb:ee:2a:83:34:1a:ee:a3:ec:75:77:58:2b:
f2:cf:1a:87:9b:1f:51:b9:b0:a1:eb:be:54:31:6e:32:df:35:
66:53:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:30:10 2025 by rpki-client