Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y8wYHIoIWN7umW3Ly8_GSrR5roA.roa
File: Y8wYHIoIWN7umW3Ly8_GSrR5roA.roa (raw, json)
Hash identifier: Fb9fWtxRmJ1z7wHzz1/52YfejFnKr3fUBhI8cUX4mrk=
Subject key identifier: 63:CC:18:1C:8A:08:58:DE:EE:99:6D:CB:CB:CF:C6:4A:B4:79:AE:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019699C7D00C7594CDCD6DACCBC51AA8DC89
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y8wYHIoIWN7umW3Ly8_GSrR5roA.roa
Signing time: Sun 04 May 2025 05:32:11 +0000
ROA not before: Sun 04 May 2025 05:32:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272696
IP address blocks: 151.242.149.0/24 maxlen: 24
151.243.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:c7:d0:0c:75:94:cd:cd:6d:ac:cb:c5:1a:a8:dc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 4 05:32:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63cc181c8a0858deee996dcbcbcfc64ab479ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:83:38:7c:c2:80:cd:14:2f:d2:e2:aa:71:
ce:bf:ab:02:6f:ce:7c:89:d7:58:c1:e0:24:b9:f5:
1b:b7:d0:7f:0c:0c:ad:31:93:4a:e5:92:46:79:07:
12:57:2a:50:ab:83:b1:0c:55:5b:35:74:b7:24:dc:
d8:93:fb:a8:80:54:b8:9a:a2:f7:d9:e1:a8:6c:9d:
8a:78:64:d6:65:40:00:d3:95:6f:0b:19:7b:58:15:
bc:9a:6c:53:c2:08:c0:82:d5:f2:69:be:49:21:03:
98:d4:73:1e:06:2f:0c:ef:93:bf:cd:2f:af:d9:10:
e2:2c:51:54:43:e9:fa:b9:9a:53:a3:98:4e:49:60:
d5:36:80:e1:0a:ad:7c:e3:33:03:0c:96:3f:6f:95:
78:c9:c8:69:ed:1e:ab:e9:7a:7a:d1:43:3a:f2:05:
e5:ca:c0:75:71:24:37:0e:a4:25:93:de:4d:1e:bf:
fe:20:25:65:f2:6b:6c:2e:15:66:4b:f3:d7:13:95:
4f:ae:c4:0f:1d:1e:7f:24:8e:2e:67:4c:97:6b:1d:
f4:87:42:a4:76:66:f2:3c:30:e1:06:9c:b0:ca:34:
7a:60:31:15:73:a5:fa:8f:68:25:8d:6f:8c:dd:41:
64:d2:4e:7c:06:67:ba:61:91:ef:d9:47:4d:2a:33:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:18:1C:8A:08:58:DE:EE:99:6D:CB:CB:CF:C6:4A:B4:79:AE:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y8wYHIoIWN7umW3Ly8_GSrR5roA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.149.0/24
151.243.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:5a:79:6c:ee:8b:36:ee:5d:65:c2:67:7b:c3:12:fd:b2:b3:
fa:3e:f6:45:0b:f2:9b:1a:45:2f:bf:82:36:0e:a9:d2:7b:5e:
4b:0c:3d:b6:ea:51:1a:05:66:24:e1:a6:ab:63:0e:46:ca:57:
4f:4e:cb:aa:98:40:77:f7:2b:8b:4b:d2:a8:d1:a3:bf:fb:1b:
37:2c:7b:63:b6:01:ba:81:68:34:76:b0:d1:c5:b7:03:86:28:
d1:0a:d9:4e:64:07:5d:5d:8c:0f:97:38:f2:6c:f2:87:cb:ee:
90:92:fe:58:1b:05:50:33:d7:dd:d8:fc:e8:dd:6a:e4:39:34:
55:6c:02:ae:f6:d3:1a:a9:a9:eb:6b:f4:6d:fd:c5:3b:7e:ff:
ba:d7:b4:13:be:aa:87:ef:4f:9d:8a:19:7f:4d:99:c1:6b:85:
df:9f:b5:c1:f4:e5:27:7a:de:dd:bf:cd:4b:f6:61:1b:c9:aa:
63:66:09:07:2c:56:a7:62:82:7a:e9:62:e6:96:6e:74:45:50:
fc:3a:d0:b7:4f:e8:96:45:e2:8a:84:60:01:e1:5e:ac:2d:f4:
a6:49:08:62:2b:42:3c:24:9f:93:5a:83:fe:4e:a0:25:68:46:
21:c6:63:93:d4:e2:4a:2a:32:70:5f:7a:26:56:e3:56:e4:1b:
a4:3b:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:02:32 2025 by rpki-client