Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LQp1m_b2PlAj7OM1yUuCb6BB7E4.roa
File: LQp1m_b2PlAj7OM1yUuCb6BB7E4.roa (raw, json)
Hash identifier: hl1H/qgFB4N4t2vKw9sMiOTFTSio1EgCpxNTjID0epI=
Subject key identifier: 2D:0A:75:9B:F6:F6:3E:50:23:EC:E3:35:C9:4B:82:6F:A0:41:EC:4E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B4F6801012C8024E4B286936218A4836
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LQp1m_b2PlAj7OM1yUuCb6BB7E4.roa
Signing time: Sat 28 Jun 2025 05:15:42 +0000
ROA not before: Sat 28 Jun 2025 05:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215114
IP address blocks: 151.240.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b4:f6:80:10:12:c8:02:4e:4b:28:69:36:21:8a:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 28 05:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d0a759bf6f63e5023ece335c94b826fa041ec4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:7b:ad:9a:ec:78:c3:11:57:d4:04:bb:f3:
a8:2e:f4:66:ed:d8:66:87:01:08:8a:e2:d6:37:32:
8e:fd:8a:48:8d:36:ca:04:62:37:50:5d:34:77:3d:
6e:e7:d0:51:aa:41:92:89:87:50:96:61:a3:bc:c2:
bb:cb:a9:20:4d:4d:8e:fd:c4:be:ac:a6:b5:36:1d:
d5:7f:96:68:d5:38:b9:ab:fe:8f:62:cc:ae:d2:92:
7a:6a:0a:d9:af:f3:43:4e:a4:07:e9:8b:4f:b5:55:
48:18:51:16:08:6f:b2:70:03:4f:5c:30:d3:c0:38:
d5:1d:51:fa:74:68:31:5b:8c:09:7f:12:76:1c:a4:
f0:db:ae:25:c8:1f:83:c7:85:57:48:50:a0:79:14:
b8:b6:12:c5:48:52:04:70:39:f7:90:35:c1:36:84:
20:e5:2b:30:c6:4f:70:5f:ef:9d:fa:4d:b1:1e:60:
a9:4a:32:25:2f:73:e5:94:8e:75:b7:5d:8e:74:a6:
67:bc:e0:82:a8:14:4b:85:75:b2:86:90:c7:a9:5d:
82:6d:40:aa:41:9e:07:1e:00:33:20:2e:9a:6f:28:
37:0c:3e:57:cb:85:81:7b:9e:f0:bc:d0:dd:bc:8e:
c5:ec:70:54:4e:3e:d6:59:57:fa:a5:b5:58:88:84:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0A:75:9B:F6:F6:3E:50:23:EC:E3:35:C9:4B:82:6F:A0:41:EC:4E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LQp1m_b2PlAj7OM1yUuCb6BB7E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6a:a7:69:be:5a:38:5a:ce:b0:20:55:ed:54:95:f9:73:0a:
c6:97:99:5e:f0:5a:60:bd:bf:d8:5f:ec:6a:70:57:ce:2a:86:
9c:32:9c:6d:40:ff:f6:bd:4b:19:6e:2c:18:f7:52:3a:b3:eb:
cf:11:b9:9e:27:c9:f5:b5:fd:8f:79:b5:83:1e:c1:ac:35:78:
a9:80:49:3c:b4:7c:07:dd:f4:d7:34:70:d0:21:4b:ed:8a:37:
9e:0a:70:b2:f6:8c:db:43:47:ca:a0:ff:85:6e:21:6d:e0:89:
0d:30:e5:71:c4:3e:74:fd:91:43:cc:18:bd:f9:c2:82:eb:93:
20:e9:5e:e4:12:7a:03:2e:82:51:ad:ae:3a:e4:a3:56:9d:60:
3b:ed:41:6f:1e:40:eb:2b:1e:58:35:9d:49:c1:a8:8a:20:03:
72:44:5c:a0:d3:0f:5c:e6:fc:67:53:8a:fe:89:d0:80:55:80:
3a:a9:4a:2a:03:33:fb:50:fd:8c:d0:e4:da:94:07:3c:c0:10:
9a:40:50:30:d7:42:bc:05:81:62:5c:b3:de:68:9c:0b:05:62:
4e:21:9e:76:8d:2d:ce:0e:29:5f:cf:16:11:af:12:08:38:09:
49:3d:d3:db:3e:cc:af:a4:c7:c8:87:7b:bd:ba:f4:9f:39:18:
68:d7:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:23 2025 by rpki-client