Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yh8hIXGp9oxruC2ZtEM4W2tT3_Y.roa
File: Yh8hIXGp9oxruC2ZtEM4W2tT3_Y.roa (raw, json)
Hash identifier: daHWknOM3f+EeK1Xc0rcPSTiKYFRMhUYlE7EqLS3rYo=
Subject key identifier: 62:1F:21:21:71:A9:F6:8C:6B:B8:2D:99:B4:43:38:5B:6B:53:DF:F6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01979BA2238ECEBA7D9F7A64EF89054BB753
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yh8hIXGp9oxruC2ZtEM4W2tT3_Y.roa
Signing time: Mon 23 Jun 2025 07:13:03 +0000
ROA not before: Mon 23 Jun 2025 07:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 151.240.15.0/24 maxlen: 24
151.240.29.0/24 maxlen: 24
151.244.112.0/24 maxlen: 24
151.244.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:a2:23:8e:ce:ba:7d:9f:7a:64:ef:89:05:4b:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 07:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=621f212171a9f68c6bb82d99b443385b6b53dff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:45:88:77:c9:c3:79:fe:62:32:2b:f5:61:
bb:86:fb:6e:09:12:37:8c:90:5f:e5:a6:18:9e:da:
ec:41:cb:53:7e:58:9b:3e:04:f7:95:0b:8c:b6:36:
ad:58:fa:df:94:a1:ad:2a:55:97:5e:a2:8b:c3:55:
4e:15:aa:27:e7:31:a7:25:98:a1:a9:ce:83:d0:55:
8b:33:73:7a:28:d8:ac:53:c6:5d:87:e8:86:7b:65:
77:d3:05:b6:5c:8d:12:ec:25:62:72:ca:b2:65:15:
49:1a:ee:42:3b:44:f2:a0:22:cd:ad:9d:94:20:37:
e0:15:cf:0e:1a:6c:d3:63:28:fe:71:cd:72:a8:9c:
ac:60:b9:2f:e3:ea:1a:3a:ff:f8:68:4a:cf:43:0a:
d2:7e:de:15:dd:be:88:10:56:e4:bb:30:6e:7e:f0:
e7:98:a8:33:c1:b7:4c:33:3c:a9:5d:12:9e:fa:11:
83:cb:cf:2e:3d:a3:b8:94:ea:01:ba:52:f7:1a:14:
d8:2e:3b:a9:7d:5c:0f:3d:1b:4b:e4:da:59:8b:3b:
ae:08:49:a6:55:63:01:1f:4f:cb:ba:7b:32:18:49:
6d:f6:03:13:8f:63:77:27:61:27:09:be:e6:46:f1:
3d:fb:12:3d:88:a0:2b:2f:96:6e:87:d0:40:5e:70:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1F:21:21:71:A9:F6:8C:6B:B8:2D:99:B4:43:38:5B:6B:53:DF:F6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yh8hIXGp9oxruC2ZtEM4W2tT3_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.15.0/24
151.240.29.0/24
151.244.112.0/24
151.244.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:05:d2:23:c8:97:67:db:bc:4f:4e:01:5a:f5:8d:8f:55:98:
4a:61:dc:89:f0:d6:60:34:4b:6f:5f:fd:c8:32:21:7b:ab:3d:
4c:6d:93:17:a4:38:c9:ad:fc:f4:e7:f8:f9:c6:e9:b8:2c:59:
37:d7:95:2b:b2:7a:f6:7a:60:57:94:bf:31:50:30:84:b0:b7:
bc:22:e9:43:90:97:4c:55:33:ed:7d:c6:79:45:09:2e:86:d6:
ba:e1:25:c4:c9:27:01:50:50:ec:d4:10:b3:db:a7:d4:9e:a3:
8f:90:d3:7e:72:75:54:f2:3b:b2:9f:68:13:c5:dc:e1:b2:d6:
94:6a:99:8f:29:67:78:4d:93:9f:c3:9b:a0:c4:a2:13:b1:bc:
c4:3c:5b:d2:f8:74:8d:5f:85:d8:63:82:89:a5:06:5c:90:a6:
c6:94:82:a0:dc:65:a5:79:c3:7c:23:a1:1a:37:8d:ec:f7:4e:
77:3c:df:af:c0:53:2e:f5:bb:e3:78:fd:97:dd:11:b8:93:ea:
22:81:af:02:bd:9a:5e:82:1c:5c:54:29:77:dd:1b:00:c8:45:
47:42:32:27:1f:17:90:c1:27:1b:b4:47:0b:a3:c3:ae:bd:d2:
5d:19:7a:60:11:b4:11:1c:05:f1:fb:17:40:34:d0:34:8d:38:
9e:bb:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:08:18 2025 by rpki-client