Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SYIXzKRcdI8MSQbYjKMMXucrqCk.roa
File: SYIXzKRcdI8MSQbYjKMMXucrqCk.roa (raw, json)
Hash identifier: qENfdcl7LYG3V5V/7qpw5AyAdZeYoLFMEmeDIrxnxlE=
Subject key identifier: 49:82:17:CC:A4:5C:74:8F:0C:49:06:D8:8C:A3:0C:5E:E7:2B:A8:29
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197C04AE594B970D7DD9A032CF89BF875CB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SYIXzKRcdI8MSQbYjKMMXucrqCk.roa
Signing time: Mon 30 Jun 2025 10:03:43 +0000
ROA not before: Mon 30 Jun 2025 10:03:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 151.242.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:e5:94:b9:70:d7:dd:9a:03:2c:f8:9b:f8:75:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 30 10:03:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=498217cca45c748f0c4906d88ca30c5ee72ba829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:a3:84:b3:2c:61:fb:26:c8:34:04:ca:99:
e9:a1:bf:4a:f5:ea:06:a8:ff:23:60:1d:3a:ae:e8:
5f:9b:b3:64:19:be:6e:29:13:cb:df:d7:f9:43:68:
3f:47:d9:25:0c:de:80:2e:37:96:5f:35:a4:33:e6:
e4:90:94:84:68:dd:0b:aa:2e:f3:a8:85:ab:e9:8d:
01:18:af:8c:39:a2:1d:ed:d7:d6:07:8e:4d:3a:c7:
a2:38:f2:7d:ae:0d:61:f0:48:b5:8c:1d:71:00:30:
8e:7e:34:47:45:39:f2:92:58:7b:60:3f:e8:30:65:
be:5c:6f:02:c3:89:a5:00:7f:ce:56:df:6b:81:38:
3a:4e:f4:08:f3:f6:84:4f:43:64:05:01:de:03:f0:
69:e0:cd:d4:c7:79:2d:52:dd:b2:03:53:3f:51:8f:
bc:ec:ce:ae:c8:b8:5d:f4:c9:af:c1:09:6c:a1:d4:
d9:a3:fb:04:71:47:ed:2e:8e:31:d9:fb:dd:8e:12:
58:cb:4f:a8:63:18:c9:4e:ea:b3:7b:e8:5f:c9:18:
3c:45:1f:9a:fb:45:d4:0a:07:15:42:01:ef:f9:8f:
eb:10:e9:7a:1c:65:88:67:78:59:5d:02:8f:d4:00:
cd:0f:a8:08:db:3d:b2:3e:70:f1:11:77:70:77:69:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:17:CC:A4:5C:74:8F:0C:49:06:D8:8C:A3:0C:5E:E7:2B:A8:29
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SYIXzKRcdI8MSQbYjKMMXucrqCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:51:bc:c9:6e:c6:c9:0f:c8:a0:d5:60:54:19:6f:d1:48:2d:
ea:18:0d:3f:b1:31:92:36:7a:81:8e:27:66:cc:61:36:22:cd:
53:6a:ca:c3:0a:f8:24:57:89:27:00:00:fc:d7:0a:1a:a2:27:
82:c1:7c:15:37:38:aa:ab:2a:69:24:0d:d0:72:32:52:07:84:
57:28:cc:4e:32:0a:57:03:8a:9e:c0:85:2b:24:7e:b4:8e:c5:
24:b8:f1:ae:a2:74:13:8e:52:4d:42:09:43:68:9a:12:ca:45:
eb:e5:91:2c:2f:06:d6:f2:c9:d6:17:58:a9:9d:38:01:ff:5d:
b1:65:30:e0:c2:ee:3f:e2:36:e6:45:68:bb:05:d1:76:ca:8d:
56:18:21:57:ba:74:c5:d5:8d:69:43:e5:28:bf:01:82:96:55:
35:60:7c:c3:f8:86:6a:0f:79:ac:c8:4f:88:e7:45:7f:36:26:
ca:49:13:61:3c:bc:a2:35:17:d7:59:d1:a1:e0:04:da:58:2b:
2b:ec:12:48:b2:d2:75:ca:15:4e:8a:d2:ba:7a:f8:ca:33:b0:
65:4e:39:e2:ae:7a:53:9a:93:43:65:6d:c4:90:4a:e3:3a:72:
9a:9c:e9:ce:5f:91:dc:e1:9a:ee:44:7d:b7:8a:fe:9f:b2:5b:
d6:75:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:36:45 2025 by rpki-client