Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y_MvvyK0yJ7rzfalKRCUhyFHamM.roa
File: Y_MvvyK0yJ7rzfalKRCUhyFHamM.roa (raw, json)
Hash identifier: qS50ZIh+KiZTX6xr+Ls5aI8CrBsR8M3hL7D6/KNG8zw=
Subject key identifier: 63:F3:2F:BF:22:B4:C8:9E:EB:CD:F6:A5:29:10:94:87:21:47:6A:63
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196B3DDA9C8E412B9D5BC863F08611202F4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y_MvvyK0yJ7rzfalKRCUhyFHamM.roa
Signing time: Fri 09 May 2025 07:06:10 +0000
ROA not before: Fri 09 May 2025 07:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209260
IP address blocks: 151.242.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:dd:a9:c8:e4:12:b9:d5:bc:86:3f:08:61:12:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 9 07:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63f32fbf22b4c89eebcdf6a52910948721476a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:e4:75:eb:ae:6c:2b:84:0d:12:97:75:83:
b6:93:61:14:81:0e:31:4f:64:86:68:51:be:8e:1a:
91:23:57:c1:8a:2b:ba:98:09:91:96:e0:c3:43:bf:
f2:71:29:e8:d4:63:80:79:ca:29:51:58:99:d7:25:
11:2a:f8:e1:d9:2c:d1:6c:bf:f4:81:57:19:e3:07:
ed:02:02:26:39:47:bf:5f:7a:cd:01:10:ed:2f:88:
3c:c4:cb:95:57:3c:3e:ee:99:3f:28:df:34:ca:3d:
22:eb:30:53:cf:3d:3f:9f:97:78:83:75:a2:44:a6:
89:a4:a9:97:77:87:63:a7:a9:20:65:f6:23:c0:76:
ab:84:6c:94:d6:96:ea:66:ac:e7:cc:23:b8:01:e0:
2d:c0:c1:a4:5d:c2:d9:b6:b8:9c:83:b8:97:d3:ff:
2f:c1:d6:76:fc:76:f3:24:d7:55:f8:7c:8c:1d:55:
ee:0c:a0:f2:ae:63:49:9c:7d:96:61:69:e0:e7:32:
7e:44:e6:4c:37:91:3a:e0:80:f8:30:84:92:05:1e:
0b:98:c0:13:eb:12:d4:2d:a0:c4:aa:af:27:da:76:
29:e4:3f:a6:88:f5:d3:fb:12:65:a9:d7:2d:2b:68:
b8:c2:be:77:e0:bc:e4:94:80:0d:11:a7:9c:7c:0a:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:2F:BF:22:B4:C8:9E:EB:CD:F6:A5:29:10:94:87:21:47:6A:63
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y_MvvyK0yJ7rzfalKRCUhyFHamM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.191.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fd:7b:72:98:3c:a4:c6:b1:57:ea:f1:2a:64:41:64:5d:70:
51:bf:60:a1:1d:f7:99:af:60:11:09:af:a8:86:ee:8f:84:36:
e2:ce:2e:32:53:f2:6a:76:c7:01:11:ec:b1:57:ef:10:d2:50:
cb:83:de:6e:a8:75:0e:6a:96:fd:0e:a4:ab:59:73:dc:63:9b:
ec:4a:86:63:54:00:15:52:45:33:56:1c:c4:0c:de:99:50:6e:
36:4b:4e:f3:8c:1f:54:33:e7:9d:20:cf:a1:5c:ea:8d:9c:a6:
17:c9:e3:96:f9:ac:8b:1b:cc:26:10:5d:15:4f:65:dc:bc:2a:
ca:10:a9:5b:54:e8:31:10:c3:51:51:62:e4:bd:d2:33:cb:d2:
5a:d2:22:89:11:30:1d:8f:8b:43:42:c3:c6:6a:2a:5f:ef:11:
c5:f9:a3:68:20:00:10:f2:50:1b:8b:33:cc:a9:50:ca:b3:c6:
68:31:af:08:7f:8b:3d:c5:84:3f:56:aa:a7:94:ef:62:af:ad:
58:e6:50:1f:f3:6f:a4:d5:4b:b4:0c:89:4e:c9:70:5c:d7:ac:
6c:e1:1c:7a:f1:2e:5d:36:18:46:17:39:4a:ff:fd:61:55:fa:
5f:93:64:64:96:c5:e8:f3:a5:cd:5a:93:6d:2d:5d:ff:3d:19:
a9:b5:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:14:01 2025 by rpki-client