Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Qdov6VwrKXUuwI7Y1RbIxyRe8bQ.roa
File: Qdov6VwrKXUuwI7Y1RbIxyRe8bQ.roa (raw, json)
Hash identifier: knAoL9RegkX/QGaqxW4Oesm4vl3dn8MM6ia4MhMcH/k=
Subject key identifier: 41:DA:2F:E9:5C:2B:29:75:2E:C0:8E:D8:D5:16:C8:C7:24:5E:F1:B4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A98421C566D464E20012796CCC7A19A1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Qdov6VwrKXUuwI7Y1RbIxyRe8bQ.roa
Signing time: Wed 07 May 2025 06:52:10 +0000
ROA not before: Wed 07 May 2025 06:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 151.242.118.0/24 maxlen: 24
151.243.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:84:21:c5:66:d4:64:e2:00:12:79:6c:cc:7a:19:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 7 06:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41da2fe95c2b29752ec08ed8d516c8c7245ef1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:93:8e:cf:04:42:d3:21:d5:31:a2:98:c0:
ba:89:48:69:d1:49:ff:1f:0e:ce:18:ee:9c:4e:da:
d0:39:83:21:94:11:34:55:5c:12:f4:52:d2:97:7d:
d0:ea:a2:bd:1b:5b:36:ae:40:38:d5:e8:04:7f:19:
cd:36:c1:7f:8b:c4:48:24:3b:64:f0:61:cb:2d:ed:
a1:2a:b3:1d:a0:68:48:10:1f:dc:68:1f:82:53:27:
5c:3e:fb:16:a5:2d:e3:3c:4d:36:b2:11:5e:7b:0f:
da:3c:a0:43:b6:89:1c:77:65:76:f6:4c:f3:7c:21:
4b:ff:40:2c:ea:4d:d1:96:66:2b:0e:37:b0:46:86:
90:f9:5b:82:9c:de:00:48:7d:41:2e:33:3a:04:65:
4f:9b:06:93:4b:c3:b5:c3:ca:06:28:dd:85:62:68:
02:3c:8a:e7:79:c1:f0:55:65:ae:04:c9:77:f9:28:
1e:85:d3:90:23:55:84:9e:06:db:de:96:12:a2:a9:
2c:76:05:7d:9d:ef:7a:ab:68:bf:58:a1:37:0d:3d:
59:aa:6c:b5:f8:57:cc:a4:d8:eb:ca:a5:db:10:52:
40:af:48:e0:3b:f6:44:46:84:59:e5:bb:74:df:65:
35:65:b4:a1:d8:a5:5a:ce:92:29:c5:48:7a:21:ba:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:2F:E9:5C:2B:29:75:2E:C0:8E:D8:D5:16:C8:C7:24:5E:F1:B4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Qdov6VwrKXUuwI7Y1RbIxyRe8bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.118.0/24
151.243.100.0/24
Signature Algorithm: sha256WithRSAEncryption
65:51:ee:99:80:6f:e6:9b:d7:a6:11:6e:e6:4b:25:19:76:3e:
05:7e:a1:26:c0:13:ff:59:b2:06:db:53:5d:b9:53:dc:56:fd:
e9:10:8d:aa:77:47:ac:f0:39:80:cb:7a:07:d7:f0:15:07:48:
c4:c5:d7:5a:2c:5c:df:2f:bd:f9:d1:4c:57:ac:89:a3:40:7d:
23:9c:ce:56:57:12:89:1a:45:18:48:b7:e1:8e:52:93:3c:48:
34:b1:d8:66:a5:08:df:3e:8b:72:b6:b9:34:ea:55:d4:38:83:
98:d4:a6:b6:49:e5:3b:df:1a:51:2c:87:42:52:0b:20:bd:54:
bb:02:40:d7:5a:f3:90:4b:bf:eb:d6:54:c4:c4:71:ff:da:d6:
70:1e:11:09:0c:f5:f5:c9:fb:2b:98:6c:d7:1a:fe:b6:b7:7f:
0d:4c:44:28:26:ff:28:fb:ae:54:02:e1:0d:aa:bb:ef:d0:6e:
07:d8:cb:6a:66:70:1a:d5:5a:df:81:f5:5f:78:90:c9:d9:e4:
06:73:af:26:38:02:4d:e2:41:51:73:a5:3b:ad:f9:ff:ba:e5:
ab:54:14:b3:a2:d5:95:b7:a8:4c:0e:97:ef:8f:5f:1b:22:42:
e2:33:d3:d7:23:07:07:03:09:a3:b9:84:8d:68:f0:ac:cc:84:
e9:7d:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:53:59 2025 by rpki-client