Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jQJNMPuCy6PjJIVJMrmdiBIEOqA.roa
File: jQJNMPuCy6PjJIVJMrmdiBIEOqA.roa (raw, json)
Hash identifier: A3s0lEOVAOEZXl8j9ltu0d8n/FoHc+rD2eExq2Xau6A=
Subject key identifier: 8D:02:4D:30:FB:82:CB:A3:E3:24:85:49:32:B9:9D:88:12:04:3A:A0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196C41854A1B3DF0A4BD5240B2F10E1FE4F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jQJNMPuCy6PjJIVJMrmdiBIEOqA.roa
Signing time: Mon 12 May 2025 10:44:10 +0000
ROA not before: Mon 12 May 2025 10:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 151.241.2.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.244.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:18:54:a1:b3:df:0a:4b:d5:24:0b:2f:10:e1:fe:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 12 10:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d024d30fb82cba3e324854932b99d8812043aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:02:ae:76:09:22:e8:10:25:6d:e3:e1:bb:
07:02:2c:a0:c7:38:c2:4e:03:e7:4d:67:75:f9:03:
a2:99:f5:99:6e:8d:fd:e2:dd:21:3e:f2:e8:60:be:
62:5a:d1:2e:fe:f2:83:0f:47:f1:0b:6e:20:b7:b9:
94:6e:c3:de:06:8f:22:f8:ab:bf:18:71:f1:f9:32:
9c:13:4f:fe:c2:b3:85:37:3b:81:58:94:3b:18:d9:
0f:23:bd:79:84:db:b0:e4:92:f6:4b:95:58:ee:41:
5e:00:1c:9e:ec:d3:3f:15:d4:79:52:dd:80:b7:cf:
09:23:82:2a:35:29:09:da:ed:69:da:40:19:81:bd:
e2:40:4b:5b:f8:b1:2d:c5:d1:06:e1:04:30:91:88:
36:32:51:af:32:a5:6f:56:e9:d5:01:56:a0:10:25:
b1:ab:4c:2c:26:91:ad:3c:88:a9:9c:8e:95:78:ef:
94:6e:0e:ec:8c:3b:21:9d:f3:72:c2:80:07:15:d2:
d5:1a:1d:9f:d6:13:a0:60:7e:6c:1a:12:32:5b:cb:
87:eb:53:8b:c3:28:d8:ba:f5:28:58:6c:50:66:ba:
41:b8:08:f1:30:04:5d:2b:d9:24:70:91:e2:38:ae:
aa:9a:1a:a2:8d:28:b6:7c:57:35:27:4d:d6:f9:89:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:4D:30:FB:82:CB:A3:E3:24:85:49:32:B9:9D:88:12:04:3A:A0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jQJNMPuCy6PjJIVJMrmdiBIEOqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.2.0/24
151.241.4.0/24
151.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b4:21:49:36:ee:f1:07:76:a9:90:65:2b:61:70:14:d7:49:
e8:6d:8a:2d:e8:9c:eb:fe:9e:e4:55:a7:25:26:5f:ac:6c:39:
1b:47:74:d3:b9:6d:72:4a:62:cc:3c:0c:b1:a5:75:e8:1a:06:
9a:26:7e:05:fe:98:58:77:a0:09:28:a3:40:0d:85:43:9d:63:
03:54:7e:98:a2:e9:d7:ee:b3:40:e2:19:b5:f0:cb:6e:5a:84:
7c:71:8d:8a:d1:06:4d:99:65:0c:db:1d:25:07:22:84:8e:1b:
69:93:80:18:3f:ef:1c:7d:29:14:dc:bb:8e:3f:63:10:83:08:
05:23:6b:34:1b:6d:19:fe:c6:28:f9:8b:a6:8e:c4:f5:92:bb:
9c:c0:76:9d:83:53:ee:44:d3:eb:37:9c:92:09:04:7c:76:f8:
3c:73:a0:f7:89:fd:ac:0a:18:43:6d:73:6a:15:27:e6:a2:08:
22:0e:c6:33:dd:2b:8b:a3:ec:c5:bd:5f:53:cc:5e:61:d6:42:
ce:b4:96:a3:47:a1:4b:31:50:e8:af:86:81:13:fb:e4:8b:00:
4c:b0:3c:2f:95:67:7f:a4:36:d1:3e:90:3d:24:b4:01:be:ff:
bd:bc:da:c9:84:24:fc:ca:fc:29:2b:35:74:a3:18:24:27:61:
b1:61:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:58:30 2025 by rpki-client