Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eoGM-nVaVdR1tno8W3k_6eGpwtA.roa
File: eoGM-nVaVdR1tno8W3k_6eGpwtA.roa (raw, json)
Hash identifier: d2r9aq4AcIgw0x5GTvES54T1BhH2smbrO7CJ4Gj8vvQ=
Subject key identifier: 7A:81:8C:FA:75:5A:55:D4:75:B6:7A:3C:5B:79:3F:E9:E1:A9:C2:D0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786E06B9ED2B7F4A01E4CB50ED843ED2B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eoGM-nVaVdR1tno8W3k_6eGpwtA.roa
Signing time: Thu 19 Jun 2025 06:29:03 +0000
ROA not before: Thu 19 Jun 2025 06:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 151.243.252.0/23 maxlen: 23
151.245.24.0/23 maxlen: 23
151.245.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:e0:6b:9e:d2:b7:f4:a0:1e:4c:b5:0e:d8:43:ed:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a818cfa755a55d475b67a3c5b793fe9e1a9c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:6d:79:1f:4b:f2:b2:5a:2c:2b:a9:ef:9e:
e6:3d:82:ad:ce:dc:f7:14:ff:80:5e:e2:80:c5:1e:
1f:9b:38:ae:f0:9c:1f:5d:f3:69:52:92:35:b6:57:
5f:86:a3:8e:2a:7b:17:0a:ee:0f:3e:90:08:9a:a1:
2f:0e:be:6d:aa:15:28:d4:00:e9:30:38:c7:a9:29:
cb:36:44:b8:df:c0:03:05:d9:68:0c:45:a8:f0:bb:
5c:95:78:2d:17:2e:e0:3b:e6:ce:a2:ca:7e:5f:35:
d5:ec:f4:4b:88:14:ab:3c:65:53:2e:91:e8:33:a5:
c5:56:94:d3:f3:ef:56:f6:86:56:b8:40:a3:ff:22:
2b:78:81:6a:27:ee:ef:50:25:8d:4e:c3:06:b0:7c:
1a:28:e1:d7:58:39:4c:7b:b8:c0:2f:61:02:85:be:
81:d1:aa:0b:6d:eb:ed:06:21:78:ca:d4:e6:0d:25:
38:38:e0:85:64:00:5f:dc:4f:31:ee:3b:c2:2f:29:
5c:45:42:6f:cf:7e:3f:77:f9:3a:67:4c:bb:06:fc:
df:f5:ff:1d:06:7b:6c:ed:d9:10:3f:6d:2a:31:bb:
b8:62:9d:d4:44:ba:69:6b:25:de:75:a3:89:97:04:
ab:6f:37:1d:4e:92:71:8c:7a:f2:03:b2:9f:9f:93:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:8C:FA:75:5A:55:D4:75:B6:7A:3C:5B:79:3F:E9:E1:A9:C2:D0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eoGM-nVaVdR1tno8W3k_6eGpwtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.252.0/23
151.245.24.0/23
151.245.28.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c1:0d:ee:10:3f:6f:00:62:35:ec:c0:62:ce:a2:05:69:f4:
dd:bf:4e:20:91:6c:4b:f1:33:07:f0:a1:10:9e:24:f2:f5:7e:
e0:02:60:6b:f7:43:b9:cf:1e:5d:ee:af:e4:58:df:48:2b:e3:
6d:5d:9e:4b:59:47:ca:c0:37:52:3f:6e:f4:c6:71:7c:77:3c:
35:a6:b6:b7:bc:eb:ab:93:6c:6e:db:5f:3a:8f:dd:33:b5:1c:
13:3e:4a:54:bd:cb:d0:cd:26:53:9c:5e:18:a4:42:09:36:1d:
98:b5:6e:61:42:28:69:56:ed:a3:aa:b1:ef:f7:69:12:98:92:
69:0c:07:c9:de:0d:a6:5f:91:cb:eb:65:17:3b:19:3d:d2:82:
00:1e:4b:23:11:35:ec:0e:46:5e:80:e9:84:c5:bf:71:8e:5e:
d7:bb:e8:23:fc:2f:c4:08:53:f5:cc:e7:32:03:31:e9:fe:b5:
c3:e4:b6:a8:f7:ba:e2:78:38:e3:03:2c:bd:0d:05:55:4f:98:
73:24:4f:b7:41:a4:3f:b4:0b:98:3a:fb:ba:48:1b:fc:fc:1e:
c9:8a:b7:02:49:44:80:3b:70:df:27:48:1a:28:b4:bd:81:5c:
fe:92:35:36:22:3f:41:4e:9e:04:82:6e:66:75:5a:c0:24:19:
78:c2:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:30:39 2025 by rpki-client