Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bX_dHJBxUKHc7csOODtLmUxBGWk.roa
File: bX_dHJBxUKHc7csOODtLmUxBGWk.roa (raw, json)
Hash identifier: gDAC5CasY45AaS6mbk+2RQyq/rpA84OMnS6NJ13n8aU=
Subject key identifier: 6D:7F:DD:1C:90:71:50:A1:DC:ED:CB:0E:38:3B:4B:99:4C:41:19:69
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196C4185559B72CFAF3E5EC69AA3B393E05
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bX_dHJBxUKHc7csOODtLmUxBGWk.roa
Signing time: Mon 12 May 2025 10:44:11 +0000
ROA not before: Mon 12 May 2025 10:44:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 151.244.77.0/24 maxlen: 24
151.244.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:18:55:59:b7:2c:fa:f3:e5:ec:69:aa:3b:39:3e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 12 10:44:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d7fdd1c907150a1dcedcb0e383b4b994c411969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:f6:d4:45:6d:16:78:4c:d5:f5:60:ce:e3:
21:e7:92:6d:be:7e:82:c8:60:7c:f4:aa:40:87:7d:
69:9e:3a:da:74:5e:e9:cc:a1:30:be:21:72:0f:a0:
ec:b3:e4:4e:60:e8:5d:d5:32:bb:95:9d:be:94:bb:
7e:1d:63:60:b5:fb:bc:ed:ae:54:f7:58:c6:67:10:
ed:f0:69:ba:ae:37:37:39:e6:c1:9d:45:89:d4:d0:
40:ca:f2:5a:94:cc:1d:6d:6d:57:b3:76:a8:6d:c8:
2a:05:94:38:65:39:06:27:5d:95:af:b2:19:1f:3b:
58:22:fb:64:04:67:58:93:47:99:08:05:7c:e7:a5:
d3:b5:47:93:05:ac:bf:9d:d2:79:7b:f5:0d:2d:03:
67:4e:bc:c9:d7:8f:60:10:1d:e2:af:5e:69:61:21:
7e:a7:56:24:a3:5d:8e:17:b2:d8:fa:71:49:ab:5b:
ff:ba:e9:97:ec:fe:89:b5:53:ed:a9:e4:5a:1a:52:
9f:e4:3b:71:1b:60:dc:de:0d:2c:d6:7a:b7:de:47:
85:22:9f:d0:a8:5b:dc:6d:34:da:5a:42:c0:7b:07:
a7:8e:a9:a9:40:b6:20:e9:47:0c:9f:df:ae:be:09:
b1:7c:61:72:f9:b9:10:87:14:c7:4d:f4:fd:8a:bc:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:DD:1C:90:71:50:A1:DC:ED:CB:0E:38:3B:4B:99:4C:41:19:69
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bX_dHJBxUKHc7csOODtLmUxBGWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.77.0/24
151.244.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ec:ac:6d:04:af:04:bc:70:0c:c8:14:5b:df:b0:33:ab:b2:
de:4a:e2:de:e9:9c:5b:f2:c5:aa:4e:5d:a5:c2:af:01:41:37:
11:c0:01:c6:45:a3:84:8d:ce:5e:24:b1:73:4d:40:ee:f2:af:
e8:41:de:c2:4a:95:14:9f:90:1b:b1:e4:2b:6c:c0:1a:d9:33:
52:60:9c:b5:a1:fb:e0:7c:f4:11:6c:39:b9:a4:1c:94:81:65:
51:3a:70:9c:06:d6:ed:b7:22:22:9a:91:c8:d9:d9:b1:eb:b5:
28:9c:6f:a3:ba:35:b4:16:be:e1:d3:e0:a7:1d:aa:c6:fe:3d:
0a:22:df:c0:6f:b0:01:67:2c:e6:88:5e:ec:69:a0:8c:36:30:
f6:d7:69:4e:02:52:dd:cf:13:22:ae:61:38:61:7a:5e:cb:11:
1d:a1:56:55:0c:14:8b:7c:aa:4c:25:b5:42:e9:ec:a9:78:9a:
58:b2:a8:f1:fa:31:68:ec:1d:c9:79:4d:97:2f:04:9b:1a:5a:
d6:a5:e1:9a:00:e4:40:25:f7:8a:b3:86:55:8d:de:f3:cc:75:
f5:0d:e9:ec:6d:0e:bb:fe:1b:d7:d6:43:4b:ce:c3:38:44:91:
8c:a8:2e:a6:4a:b1:1c:29:4b:cf:fd:3e:2b:5e:62:20:7c:d3:
b9:9c:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:16:20 2025 by rpki-client