Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RaYjSpt1wg7HKZlEvRVMbNNLn-c.roa
File: RaYjSpt1wg7HKZlEvRVMbNNLn-c.roa (raw, json)
Hash identifier: OFSAUyT3rlDcRJCTGwXKOGWonMMh+gEVLVKy2QqK9bE=
Subject key identifier: 45:A6:23:4A:9B:75:C2:0E:C7:29:99:44:BD:15:4C:6C:D3:4B:9F:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A91CAC854E011143D8E51CF6154C4EAB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RaYjSpt1wg7HKZlEvRVMbNNLn-c.roa
Signing time: Wed 07 May 2025 04:59:10 +0000
ROA not before: Wed 07 May 2025 04:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 151.242.119.0/24 maxlen: 24
151.243.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1c:ac:85:4e:01:11:43:d8:e5:1c:f6:15:4c:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 7 04:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45a6234a9b75c20ec7299944bd154c6cd34b9fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:36:3d:a7:fe:d6:c7:7f:d7:cf:97:9c:53:
85:1e:ee:b3:f7:7a:9d:30:97:a3:57:fc:d7:dd:62:
6a:f0:47:ae:ad:63:00:5e:29:7c:f4:12:98:e5:c2:
a6:78:3b:ad:93:a0:c6:8c:96:90:da:b9:2f:05:17:
02:76:0d:e5:c0:93:15:26:56:5c:60:53:04:db:dc:
b4:a9:54:47:10:49:a9:88:5f:26:54:fc:50:b3:56:
f8:8d:3c:47:b0:2f:9d:68:3b:16:35:e6:9c:5c:24:
4d:d4:37:4c:15:7d:e6:e4:f1:01:3b:61:54:8b:c1:
4e:9c:c7:ca:f0:d8:0e:f7:fd:e0:b0:9f:79:e7:37:
b4:d4:8e:56:56:dc:fa:cd:b6:b5:fe:a8:30:d4:1a:
85:f2:fc:46:1f:f4:c2:26:48:84:6c:14:ad:38:b6:
f6:76:f6:03:67:3f:50:f1:36:e5:58:db:7d:17:fc:
ea:6e:dd:3d:ad:14:8e:8a:66:14:34:fc:34:94:02:
a1:51:db:47:f2:81:73:64:4f:46:a2:22:b1:0b:ea:
99:6f:0a:c6:bd:b6:c2:33:c9:9c:7d:f1:95:90:6f:
60:c1:40:52:ae:b1:5a:17:db:9d:bc:91:80:3e:60:
76:d0:13:72:33:fb:17:d6:38:40:52:8d:62:cd:a7:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:23:4A:9B:75:C2:0E:C7:29:99:44:BD:15:4C:6C:D3:4B:9F:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RaYjSpt1wg7HKZlEvRVMbNNLn-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.119.0/24
151.243.81.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b5:25:30:61:5c:e3:e1:78:c4:ef:0e:93:e9:ba:03:7a:1d:
c2:e5:15:12:bc:24:1f:1d:e6:03:94:d3:40:78:9f:be:58:77:
e3:5e:1b:1c:a5:05:71:48:06:33:b8:12:5f:18:3e:b2:9d:a4:
ba:5b:f3:62:74:da:c9:38:1c:25:08:9c:1d:da:41:ff:55:a6:
c4:d1:0a:c5:38:79:af:dd:8e:18:65:1f:2e:7b:60:c8:5b:3f:
3b:f4:27:a4:62:27:c8:e8:26:78:2b:62:1f:68:34:d4:8f:83:
66:e6:4a:5c:4f:38:63:04:4d:91:73:ac:8a:c8:02:e9:d4:65:
ff:3d:8e:c3:02:b6:d6:a0:75:bd:b6:39:27:84:7a:72:5f:c4:
a1:61:7b:47:5c:0e:9b:50:5c:eb:0f:41:88:ea:cc:c5:33:ab:
c8:0d:49:9a:cb:64:cb:1e:8b:41:51:10:d3:fc:cd:86:90:1f:
89:55:ac:a2:f7:2f:d8:e2:fa:aa:a8:d6:66:26:c7:46:c8:b0:
ff:33:73:72:d2:2f:6d:8b:dc:6e:ca:0a:7f:bf:53:9d:b2:93:
cb:99:b4:8d:86:ee:ef:b4:7f:82:a8:c4:96:fe:c8:b2:0e:cc:
58:4e:0d:2a:8e:33:f3:fe:ba:7e:c5:5a:99:b4:0f:aa:2d:36:
34:b7:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:43 2025 by rpki-client