Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jnAT8C0mi1VsciauajWwrCeiWCk.roa
File: jnAT8C0mi1VsciauajWwrCeiWCk.roa (raw, json)
Hash identifier: lrf8Ap/8kz6R3xzMNnVvDMFIvOE+UsrC70xRwcXntzY=
Subject key identifier: 8E:70:13:F0:2D:26:8B:55:6C:72:26:AE:6A:35:B0:AC:27:A2:58:29
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196C41853E0D1D3FF36176BE7982094FCC2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jnAT8C0mi1VsciauajWwrCeiWCk.roa
Signing time: Mon 12 May 2025 10:44:10 +0000
ROA not before: Mon 12 May 2025 10:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149573
IP address blocks: 151.243.12.0/24 maxlen: 24
151.243.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:18:53:e0:d1:d3:ff:36:17:6b:e7:98:20:94:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 12 10:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e7013f02d268b556c7226ae6a35b0ac27a25829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:a5:01:3a:85:19:5e:a6:43:d2:3f:70:03:
e4:a9:c7:a1:ad:7c:de:40:ad:48:10:47:36:bd:82:
6e:77:26:0b:88:c4:bb:57:9c:64:2d:c7:39:e4:60:
be:0c:6b:2a:87:e3:18:2c:71:fc:d7:87:23:39:47:
c2:06:9f:03:46:6f:bb:cb:bc:a5:27:ee:43:86:da:
d3:b7:c5:f9:20:f7:53:2b:f3:92:14:95:f4:f3:85:
e3:84:e2:35:c3:9c:31:9e:64:3c:41:53:2f:93:f6:
6a:7f:19:df:3b:1d:bd:2d:74:dd:01:ec:37:a9:7b:
9b:d4:e7:7d:5e:fc:13:7b:27:c4:1a:f9:3c:e1:d6:
62:1e:17:e9:8d:db:77:fe:09:33:ec:eb:18:81:0c:
76:4b:01:a4:e5:3c:b6:4c:4e:e9:bd:02:45:c9:14:
3b:52:01:5f:d1:a5:a1:a6:99:23:b2:93:c4:86:9f:
21:dc:20:84:9b:c7:2c:b7:ac:be:f8:cd:24:fb:eb:
f2:8f:33:3f:e9:16:c3:7f:35:c7:8b:a3:89:af:50:
0c:48:ce:3f:bf:f2:8b:0f:23:ee:92:4b:07:87:c0:
53:ff:a8:0a:4d:03:74:a7:86:d5:4b:a1:c4:48:02:
4c:13:cb:e7:0b:ad:8e:0a:14:4b:60:40:d9:9f:bc:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:13:F0:2D:26:8B:55:6C:72:26:AE:6A:35:B0:AC:27:A2:58:29
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jnAT8C0mi1VsciauajWwrCeiWCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.12.0/24
151.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:cd:0d:11:85:1d:fe:6c:4a:83:e4:01:0c:e2:bc:a4:0a:13:
dc:00:70:f6:18:a9:93:e4:25:0f:9d:d9:5e:e9:84:b9:b1:b1:
61:6a:91:2d:80:78:c0:5a:cc:ad:0e:c2:0f:21:fd:d1:fa:99:
64:96:f5:93:0e:3e:a5:a8:6c:4b:39:d3:1a:79:c1:31:42:42:
39:9b:64:67:21:40:ff:00:ec:43:28:ba:38:9e:1a:fc:7a:8d:
f2:e7:1b:fb:d9:3f:59:67:3a:8a:f3:89:f5:0d:b1:20:b6:9c:
a9:75:27:8c:b1:0e:e0:04:85:d4:c7:7d:c9:5f:c7:b8:9d:7a:
c7:7f:8f:07:8b:7b:da:8c:90:3c:2d:23:4c:23:c1:16:65:15:
18:1e:ae:a2:e5:2f:57:47:b2:92:9c:29:a6:d1:44:df:7d:41:
d9:5f:01:d8:b8:e9:c7:c8:5a:fd:3a:fc:4a:a5:e8:22:69:c9:
31:b0:51:e7:f8:61:94:7e:1e:6a:fd:64:66:1d:63:c2:b5:85:
d3:4e:d8:60:fc:9d:fe:fd:62:09:5c:73:97:69:b4:08:7b:85:
d9:97:d7:e9:4c:17:1b:a5:ee:fb:75:fc:cc:5e:8c:9b:22:4c:
91:4b:60:bb:5b:83:52:78:ec:31:2d:f6:d0:3c:dd:d3:5e:b9:
21:48:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:04:33 2025 by rpki-client