Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfDHsdRTqWBaYQZoub8pw_P4FJM.roa
File: RfDHsdRTqWBaYQZoub8pw_P4FJM.roa (raw, json)
Hash identifier: x8cZnXLZcM9RmUWQXzKG36Fi8qYiAZnH8f+ZONI/lIM=
Subject key identifier: 45:F0:C7:B1:D4:53:A9:60:5A:61:06:68:B9:BF:29:C3:F3:F8:14:93
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977378FD9355D161E8249EEFB77C32034B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfDHsdRTqWBaYQZoub8pw_P4FJM.roa
Signing time: Sun 15 Jun 2025 12:03:18 +0000
ROA not before: Sun 15 Jun 2025 12:03:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 151.243.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:78:fd:93:55:d1:61:e8:24:9e:ef:b7:7c:32:03:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 15 12:03:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45f0c7b1d453a9605a610668b9bf29c3f3f81493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:cc:69:49:36:90:8c:4b:4c:5d:b6:28:fe:
40:c1:7c:34:78:06:19:bf:2d:c1:a4:c7:7b:6c:1d:
a9:0c:b2:9c:6d:9c:46:1a:1b:ad:ad:eb:87:4a:1d:
51:88:b1:08:6b:64:c3:a9:c2:d5:1c:cb:6b:d9:73:
80:92:e9:b0:07:f9:d9:bd:d7:5d:9c:c2:09:4b:73:
ef:5f:97:f7:3b:6c:c3:e2:41:b4:39:17:6e:36:67:
96:3a:02:25:f4:c1:89:70:87:80:c7:3e:4a:bc:2e:
59:6e:0a:2e:af:cd:36:3d:b3:57:16:e9:39:d6:6e:
de:d2:1d:25:00:63:87:ac:b6:53:b0:06:69:43:d2:
81:e0:bf:5c:07:f7:1a:eb:ea:43:88:48:13:13:02:
91:0f:bd:de:1e:4e:cf:98:08:a0:eb:e5:5f:a3:7e:
ab:f2:10:1b:ac:bc:9e:6a:d2:c2:a1:9f:c8:92:be:
c4:f2:de:c7:ec:a7:a7:c8:4c:d5:57:70:73:89:f6:
dd:ed:af:f3:ce:64:df:d5:90:01:ab:6c:ad:2f:59:
e4:05:61:5d:9c:08:a0:f4:32:52:78:9c:38:47:28:
90:a9:3e:80:5d:de:76:42:85:73:01:a0:3a:2b:44:
16:94:24:99:5d:8d:b0:90:8e:5b:ce:8b:50:12:1f:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:C7:B1:D4:53:A9:60:5A:61:06:68:B9:BF:29:C3:F3:F8:14:93
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfDHsdRTqWBaYQZoub8pw_P4FJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.127.0/24
Signature Algorithm: sha256WithRSAEncryption
32:24:14:46:08:19:8c:41:0b:d9:63:35:32:be:9e:ba:64:3f:
29:b3:df:94:5c:13:90:9e:ed:24:22:f1:a3:88:64:4c:17:85:
84:79:d7:7f:fe:3c:e5:75:c4:8a:e6:dc:b5:7b:70:37:f6:9e:
ef:d4:a7:70:dd:d8:b3:34:2f:60:b3:e0:c0:cd:2c:a3:db:24:
e2:47:0f:7e:bd:cb:59:09:23:5b:42:07:ff:bd:29:0c:e3:be:
23:3b:05:96:20:a1:80:eb:4c:d3:ba:f4:f8:ec:7d:29:a0:02:
ae:33:c7:3f:ea:4e:b1:a6:a2:bc:12:66:0e:55:a2:d7:91:b2:
dc:37:c7:d7:8c:c8:f5:c3:6b:b2:a2:07:20:d0:e1:c2:7a:16:
61:07:c4:17:f5:e8:0a:73:cd:e0:50:df:b5:7a:5f:1d:88:e9:
c0:ee:12:e6:71:e5:ec:42:7f:9e:0a:73:fb:fd:a7:0f:d8:f2:
3b:9c:16:9c:6f:6e:4d:38:ab:f8:5c:7c:c9:58:94:7d:47:97:
a5:84:48:be:a8:9c:61:36:61:5f:d1:6b:7b:ca:fe:15:f6:52:
ed:11:85:d4:02:d7:db:99:84:67:28:0e:41:cd:de:56:61:55:
a5:66:c8:37:e7:8e:32:7f:c3:76:39:17:fd:4e:75:f9:40:38:
8e:3f:b3:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdzeP2TVdFh6CSe77d8MgNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjE1MTIwMzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWYwYzdiMWQ0NTNhOTYwNWE2MTA2NjhiOWJmMjljM2YzZjgxNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW3MaUk2kIxLTF22KP5AwXw0eAYZ
vy3BpMd7bB2pDLKcbZxGGhutreuHSh1RiLEIa2TDqcLVHMtr2XOAkumwB/nZvddd
nMIJS3PvX5f3O2zD4kG0ORduNmeWOgIl9MGJcIeAxz5KvC5Zbgour802PbNXFuk5
1m7e0h0lAGOHrLZTsAZpQ9KB4L9cB/ca6+pDiEgTEwKRD73eHk7PmAig6+Vfo36r
8hAbrLyeatLCoZ/Ikr7E8t7H7KenyEzVV3Bzifbd7a/zzmTf1ZABq2ytL1nkBWFd
nAig9DJSeJw4RyiQqT6AXd52QoVzAaA6K0QWlCSZXY2wkI5bzotQEh+Z/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXwx7HUU6lgWmEGaLm/KcPz+BSTMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUmZESHNkUlRxV0JhWVFab3ViOHB3X1A0RkpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/N/MA0G
CSqGSIb3DQEBCwUAA4IBAQAyJBRGCBmMQQvZYzUyvp66ZD8ps9+UXBOQnu0kIvGj
iGRMF4WEedd//jzldcSK5ty1e3A39p7v1Kdw3dizNC9gs+DAzSyj2yTiRw9+vctZ
CSNbQgf/vSkM474jOwWWIKGA60zTuvT47H0poAKuM8c/6k6xpqK8EmYOVaLXkbLc
N8fXjMj1w2uyogcg0OHCehZhB8QX9egKc83gUN+1el8diOnA7hLmceXsQn+eCnP7
/acP2PI7nBacb25NOKv4XHzJWJR9R5elhEi+qJxhNmFf0Wt7yv4V9lLtEYXUAtfb
mYRnKA5Bzd5WYVWlZsg3544yf8N2ORf9TnX5QDiOP7Oe
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:40:45 2025 by rpki-client