Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YUtOxqD317H__f5WgZRUcbtjxiI.roa
File: YUtOxqD317H__f5WgZRUcbtjxiI.roa (raw, json)
Hash identifier: igqx+giBDDx34uGHFI2hYdWyNAMA4R7tHOqu5Z4Vvvk=
Subject key identifier: 61:4B:4E:C6:A0:F7:D7:B1:FF:FD:FE:56:81:94:54:71:BB:63:C6:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197C4D3C82E2783BC11AA4DB0CB3D0A276C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YUtOxqD317H__f5WgZRUcbtjxiI.roa
Signing time: Tue 01 Jul 2025 07:11:43 +0000
ROA not before: Tue 01 Jul 2025 07:11:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214208
IP address blocks: 151.242.23.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:d3:c8:2e:27:83:bc:11:aa:4d:b0:cb:3d:0a:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 07:11:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=614b4ec6a0f7d7b1fffdfe5681945471bb63c622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:05:1c:ec:cb:2b:1f:95:7d:db:7f:20:a4:
32:a6:a4:00:0e:01:00:83:3a:ee:1d:48:64:f3:b6:
bc:b4:ad:ac:2f:dc:27:a6:a4:d9:bf:c3:35:48:8b:
3c:b5:9d:ab:6d:b1:c5:79:7c:23:d7:a9:bf:9a:f5:
b4:14:39:1d:43:fe:65:fc:44:dd:e6:fc:bc:6a:3c:
f2:06:62:99:f3:e0:b3:e5:84:ce:da:90:e6:08:6f:
46:26:e2:13:83:55:32:04:84:37:39:3c:06:20:06:
52:fc:81:85:74:ec:ee:65:fa:b2:9f:ec:f8:d4:f9:
4e:63:69:32:6b:d7:bd:fd:27:d7:79:76:78:a8:b1:
7c:7f:ad:d0:d2:bd:82:1c:d4:73:cc:b8:f2:13:2b:
84:04:fd:b2:86:c1:26:50:75:93:93:59:ad:c8:82:
a9:c2:37:f2:75:4b:da:5e:a5:7b:41:6c:38:94:12:
34:01:59:f1:c8:f4:b2:41:f4:64:30:b7:63:72:ea:
68:3e:0f:51:c6:b8:30:f1:c1:78:24:9e:81:d2:86:
12:3d:59:fc:f5:64:94:0c:ab:2f:8e:6c:95:f9:12:
58:f3:ee:9d:8c:b7:59:53:cd:fb:0c:bd:a8:08:af:
78:72:32:3f:26:4b:e1:fa:74:97:48:99:c3:f7:d1:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:4E:C6:A0:F7:D7:B1:FF:FD:FE:56:81:94:54:71:BB:63:C6:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YUtOxqD317H__f5WgZRUcbtjxiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.23.0/24
151.242.171.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a7:49:db:0d:6a:96:b6:96:83:55:84:0e:9b:6b:bd:95:2c:
f8:0a:e9:f3:e4:ab:98:1d:7e:9e:7e:1c:69:c9:91:cc:d6:29:
13:40:27:80:99:c6:d1:ba:20:95:51:24:c1:dc:80:86:4d:25:
cb:c2:b4:b8:cb:23:a2:3a:fe:fb:ce:5d:77:87:b8:83:08:25:
f8:dd:6f:d8:da:97:2e:cb:b8:5b:6c:30:fe:14:6c:04:ce:83:
d7:ce:a2:22:32:f9:9f:11:b3:df:10:b1:ff:69:51:b5:8b:8a:
0a:21:35:d9:0c:c3:e8:fd:6f:35:c8:22:56:aa:fc:86:6c:26:
88:7e:67:12:bc:a8:35:a5:3b:79:04:de:dc:3d:5f:08:15:48:
c0:2f:48:f7:7a:6e:5a:db:13:c2:cf:8b:b3:85:f5:b5:ac:9f:
69:c4:7b:d3:e0:14:d5:32:d7:b6:c4:95:e7:cc:01:80:ef:11:
23:e9:9f:9b:b7:02:c8:ec:97:f0:37:75:12:ad:87:8c:9f:a7:
25:06:bb:a1:0b:ea:40:05:63:c0:bf:50:d1:35:7d:98:92:ec:
6d:ef:2e:20:5a:d4:8d:5c:91:0a:53:22:72:42:bc:c0:09:20:
1a:26:a7:9d:4d:06:13:fe:c5:18:35:f9:1c:a2:3e:3f:d9:5e:
5d:13:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:10:22 2025 by rpki-client