Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjknaKhwLPn9HVHA7bqJIWNO7cs.roa
File: fjknaKhwLPn9HVHA7bqJIWNO7cs.roa (raw, json)
Hash identifier: BzGdQD3ZhdBlpw8XgiS7A15JfCe75fO72+L3+aoOIFM=
Subject key identifier: 7E:39:27:68:A8:70:2C:F9:FD:1D:51:C0:ED:BA:89:21:63:4E:ED:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197BBB530A77BE7D0ADDD37C41557199C69
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjknaKhwLPn9HVHA7bqJIWNO7cs.roa
Signing time: Sun 29 Jun 2025 12:41:43 +0000
ROA not before: Sun 29 Jun 2025 12:41:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:b5:30:a7:7b:e7:d0:ad:dd:37:c4:15:57:19:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 29 12:41:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e392768a8702cf9fd1d51c0edba8921634eedcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2a:a6:81:c8:10:3b:1c:a1:17:70:26:46:8a:
21:77:86:17:7e:36:ca:ff:62:03:f7:a4:8d:30:03:
bf:9b:8f:57:e1:be:07:cb:f5:d4:6e:dc:93:13:00:
5e:a0:91:a7:57:ed:d9:b8:27:0f:8e:81:68:d7:53:
e7:c3:57:a3:d0:2a:4f:e0:c9:57:ce:cc:9d:97:cf:
f2:71:58:e0:e4:a0:08:ab:4e:20:dd:63:85:4a:a8:
c0:2b:bd:20:92:4e:5c:a5:dc:3d:53:dd:5c:5d:50:
94:c1:20:bb:02:a1:40:8d:2f:dc:a6:75:08:90:6e:
fc:d6:47:c9:76:7a:f0:0c:8a:41:5f:d2:37:6f:4c:
be:d6:8c:2a:23:70:91:2c:af:dd:2a:a0:fc:f7:bd:
d4:7e:6c:60:e2:1f:16:80:28:6b:c4:0e:70:53:62:
57:5d:c8:13:22:41:b2:fe:28:00:38:ef:0a:c8:37:
8a:85:9f:97:55:cb:1a:37:79:53:d3:bd:a2:61:27:
b2:c2:be:4c:c6:c0:f5:a1:87:20:4c:36:f6:c7:19:
ed:fd:18:43:a9:6f:3c:27:07:68:92:db:2d:b0:da:
73:ff:8f:62:5d:07:32:6d:b6:53:7f:9a:1a:71:46:
62:d0:8c:38:1c:59:6e:8c:04:bb:c9:1b:db:e1:95:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:27:68:A8:70:2C:F9:FD:1D:51:C0:ED:BA:89:21:63:4E:ED:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjknaKhwLPn9HVHA7bqJIWNO7cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.78.0/23
151.242.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:75:d9:bb:26:54:76:b0:36:78:d4:ed:c0:da:ad:33:e5:8e:
3d:e7:5e:fa:0c:fd:85:06:11:9a:7e:c4:96:17:b1:14:9e:02:
24:da:9e:b9:5e:cd:2c:df:b8:64:76:48:d7:d6:c1:8d:a6:e8:
b1:a5:a8:ba:1b:04:b0:87:7c:aa:23:03:33:23:78:a4:e7:bd:
48:d9:c5:16:ef:85:07:5f:17:b9:94:dd:ec:45:dc:fa:63:90:
60:71:0f:36:48:6c:a4:9f:c6:1e:ef:d6:cd:8b:72:8e:2f:61:
16:1a:0b:28:ea:03:b5:6b:68:64:40:fa:b2:60:78:bd:5f:75:
5f:27:89:03:84:e9:83:b8:06:ef:00:2a:34:14:37:04:5e:3d:
b1:e5:ee:6c:17:7d:ff:3f:cf:7b:25:fb:f4:3d:79:86:62:dd:
26:80:1d:53:9b:51:03:bb:0d:37:5d:02:d2:b2:1b:73:9e:f7:
0f:af:6c:9a:de:9a:d3:d7:6e:1e:b9:af:56:39:f6:da:00:b5:
0e:bd:33:e9:12:e9:98:55:c9:aa:fd:1a:1b:3f:88:4c:af:cb:
29:ea:31:8b:84:21:7b:8d:5f:34:9b:d7:02:83:bc:f9:b2:33:
f5:df:16:6f:de:f4:3f:f6:d7:dc:0a:18:3e:3d:45:19:f5:12:
f2:0f:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:12:53 2025 by rpki-client