Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/agpOeUASCc4y62BkiNCJ-tCBEpw.roa
File: agpOeUASCc4y62BkiNCJ-tCBEpw.roa (raw, json)
Hash identifier: f+11KGM/X8eU0irK970id75ovNABNdaFG/7ZchF3UF0=
Subject key identifier: 6A:0A:4E:79:40:12:09:CE:32:EB:60:64:88:D0:89:FA:D0:81:12:9C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01999FDAD8350CA9BD7059B3CE847A2577F6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/agpOeUASCc4y62BkiNCJ-tCBEpw.roa
Signing time: Wed 01 Oct 2025 12:59:03 +0000
ROA not before: Wed 01 Oct 2025 12:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 151.242.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:da:d8:35:0c:a9:bd:70:59:b3:ce:84:7a:25:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 12:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0a4e79401209ce32eb606488d089fad081129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:2b:7f:32:ea:8a:22:fe:ed:9b:53:8f:b1:
2d:10:dc:15:58:5e:aa:ef:76:d1:b1:94:73:bc:35:
81:00:6f:09:49:ec:6d:b8:40:d2:41:3e:c5:eb:40:
de:95:44:4f:f2:9e:04:5d:5a:f0:45:99:e0:f7:9f:
4b:26:cf:b7:fd:68:b4:73:cd:ef:97:df:1d:ec:5e:
c7:4c:83:c6:fe:c6:fa:44:b6:b4:9a:01:83:d6:2b:
da:fe:56:c1:1f:05:b3:d7:7c:7e:85:98:a3:49:9d:
73:d3:13:07:8b:2e:8b:06:24:5d:58:6a:02:52:15:
db:cc:c3:43:0d:6f:f4:09:27:76:13:a1:43:98:55:
5f:a5:20:3d:7a:40:92:76:36:c9:bc:6f:ba:c5:cf:
78:28:bb:60:a4:01:80:34:e7:de:9c:bb:07:45:08:
f9:98:17:50:4b:6d:d0:93:bd:29:88:de:a5:ba:2f:
89:27:2c:1b:d2:42:cd:1f:c1:04:01:a4:43:26:bf:
87:d8:f4:a0:61:ba:34:bc:48:dd:e6:37:40:88:b6:
31:5a:a7:90:aa:31:ec:ae:0e:ad:8f:4a:0f:62:27:
b8:8f:8c:2d:4b:ca:5b:3d:5f:54:18:52:cf:d2:e1:
24:30:a2:5f:f2:3b:eb:b6:e8:df:f7:a1:66:e8:5d:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:4E:79:40:12:09:CE:32:EB:60:64:88:D0:89:FA:D0:81:12:9C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/agpOeUASCc4y62BkiNCJ-tCBEpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.141.0/24
Signature Algorithm: sha256WithRSAEncryption
68:2e:27:ac:5e:55:e8:5a:bb:01:08:cf:bd:f6:37:37:37:f9:
44:5e:b1:72:d2:82:05:f4:02:ec:56:08:f4:9b:3c:ed:f9:b3:
db:5b:d3:11:ca:f3:4a:e0:eb:84:1d:39:3c:60:1e:6e:96:5d:
28:28:3b:3f:9e:5c:49:9e:ae:b8:a5:a8:6b:a7:1c:58:c4:c5:
67:e0:cb:85:d1:a8:f6:ea:78:74:2a:3d:ec:4e:b2:9a:e8:7b:
43:6d:7a:51:95:b9:13:1f:4f:a8:1e:8c:a5:2f:ac:bc:28:c8:
76:31:fd:48:62:df:13:da:1d:2f:c3:93:29:8d:ec:0f:43:00:
9a:38:ee:10:24:5c:81:d2:56:6a:91:6a:91:ca:b8:0e:18:21:
55:4d:c5:29:bd:e9:c2:25:9c:25:21:f9:5d:c8:c1:2d:4a:30:
0a:02:da:67:90:ed:74:cd:bb:e5:1a:d0:0e:ec:84:93:cb:31:
38:97:a7:68:b9:5e:98:72:37:a6:6f:19:90:e1:77:12:02:9a:
2e:4b:93:a9:b2:8a:c1:3f:07:46:65:83:fe:84:4d:1f:81:a3:
a8:dc:0d:94:ca:65:71:ea:f1:ff:68:83:e1:76:ea:c7:47:97:
b7:98:97:c6:3f:93:88:5c:56:f8:ec:4c:a6:79:4c:ad:03:1e:
af:ab:a7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:10 2025 by rpki-client