Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WjttuZ2-Qu-lFLPWS-1q37AkRDk.roa
File: WjttuZ2-Qu-lFLPWS-1q37AkRDk.roa (raw, json)
Hash identifier: 0oWkn3HpxatPXMATWIo/1khPVB34HeP9NDulXNPu72U=
Subject key identifier: 5A:3B:6D:B9:9D:BE:42:EF:A5:14:B3:D6:4B:ED:6A:DF:B0:24:44:39
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197CB44A4F76937DC71AD112B568BDE7870
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WjttuZ2-Qu-lFLPWS-1q37AkRDk.roa
Signing time: Wed 02 Jul 2025 13:12:42 +0000
ROA not before: Wed 02 Jul 2025 13:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199432
IP address blocks: 151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:44:a4:f7:69:37:dc:71:ad:11:2b:56:8b:de:78:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 2 13:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a3b6db99dbe42efa514b3d64bed6adfb0244439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:ae:62:c2:3d:73:59:24:ec:73:6f:25:fa:
be:2f:3c:d6:33:1e:e9:c0:43:e1:24:4c:4e:a4:3e:
71:22:c7:e2:5c:9f:42:b3:ac:1e:75:98:ac:ee:44:
9b:d4:5e:10:ee:b9:ac:e6:c2:c8:0b:0e:c3:d6:95:
54:69:b5:69:9b:d9:ef:9e:94:42:25:1b:18:34:e8:
b6:34:e5:4a:e4:53:a1:2d:1c:07:80:80:55:b9:4e:
0b:f9:a8:5d:8d:17:c7:60:8a:5f:75:b0:40:51:41:
46:fd:b7:f4:a3:57:66:e0:82:29:ec:09:d0:1b:81:
48:6b:ba:68:88:b5:6b:aa:d1:00:ad:8f:b3:94:8c:
f2:da:aa:e0:7f:c7:83:48:52:7d:ba:5c:2d:a8:94:
4b:45:96:00:d3:25:ba:a0:b2:57:ef:d3:d9:ee:7b:
57:50:89:d9:a2:c3:6e:7d:2a:8f:d2:1a:71:11:22:
db:76:15:35:4b:32:25:b3:16:17:95:a4:80:2d:85:
ef:64:ec:c3:9a:f3:c4:03:fe:50:78:84:1d:fc:bd:
71:aa:a5:a6:e9:73:95:01:16:d0:37:d2:12:f4:8f:
2d:8c:8f:ef:6e:ae:eb:42:68:f0:ca:d7:b8:c2:b3:
d8:c5:7a:ee:7a:56:30:1b:9c:f8:1c:8f:89:8a:c4:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:6D:B9:9D:BE:42:EF:A5:14:B3:D6:4B:ED:6A:DF:B0:24:44:39
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WjttuZ2-Qu-lFLPWS-1q37AkRDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.131.0-151.244.133.255
Signature Algorithm: sha256WithRSAEncryption
6b:99:5d:2f:95:2a:58:b0:05:50:82:47:ae:77:b2:fb:f1:ef:
c0:af:24:f4:64:d7:cb:d0:9c:5d:d6:4d:5d:c9:35:52:80:44:
a5:cc:6b:16:72:db:a6:fc:c5:06:c6:1c:9b:3a:f1:a9:0f:e5:
23:4b:ea:70:55:96:90:99:9b:f4:f4:f8:ca:54:72:93:49:71:
ae:1b:ef:1f:77:e8:9b:06:84:80:6f:50:4c:04:78:0f:4d:40:
5f:b2:ec:2e:9d:f3:72:12:4e:c2:d9:4d:87:51:b0:2e:22:e4:
68:37:8e:28:75:53:53:56:a6:07:b9:fa:92:5e:5d:50:cc:dc:
99:61:77:81:e5:c2:13:be:60:4c:64:5a:62:c0:4a:8d:ac:b8:
d6:c6:a2:c5:d0:d4:2c:c4:22:db:d5:b5:05:93:dc:db:85:13:
21:20:2c:b4:a5:2d:db:52:39:1b:dd:c8:6b:f3:93:1a:21:27:
08:c0:d7:87:81:9d:e1:fe:c4:ba:16:eb:e3:a1:0b:11:e8:3a:
51:cf:d0:75:e7:7a:65:51:56:8e:26:6a:6e:87:c0:26:8f:fc:
33:ec:03:5d:40:91:6f:32:ed:8c:7b:1e:cc:3a:a3:f7:35:97:
19:c0:01:32:2c:a1:e4:35:1e:a3:64:0b:c9:76:23:bf:ee:a7:
bd:8a:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:55:04 2025 by rpki-client