Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/joJO5r0dgloWwBxBZLpqXwhNIDs.roa
File: joJO5r0dgloWwBxBZLpqXwhNIDs.roa (raw, json)
Hash identifier: 66VqSz7ifYligkgG9PYNdGHJTXazAF0zX3qo0U0hZuY=
Subject key identifier: 8E:82:4E:E6:BD:1D:82:5A:16:C0:1C:41:64:BA:6A:5F:08:4D:20:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198A382A79769BE062581FF58C9B1AC7F92
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/joJO5r0dgloWwBxBZLpqXwhNIDs.roa
Signing time: Wed 13 Aug 2025 12:58:25 +0000
ROA not before: Wed 13 Aug 2025 12:58:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213404
IP address blocks: 151.241.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:82:a7:97:69:be:06:25:81:ff:58:c9:b1:ac:7f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 12:58:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e824ee6bd1d825a16c01c4164ba6a5f084d203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:17:24:ca:cc:e3:44:b5:6a:43:70:13:da:82:
cb:e5:8d:dd:1d:52:d0:eb:36:ba:d4:1a:94:30:c9:
7c:13:6d:7f:11:6f:bb:a1:02:ac:e0:8a:7c:c7:3f:
db:14:33:02:df:36:18:83:ee:43:12:cf:37:ab:1a:
4e:24:66:53:b1:11:06:2c:6b:a7:3b:04:51:4f:c2:
dc:46:0e:d9:89:d3:d8:51:b8:8c:28:4d:f8:b4:c2:
21:c8:22:6e:a2:99:96:05:45:1f:18:a5:a1:d7:02:
6e:64:39:02:c2:5c:d4:a3:c2:88:de:9b:a0:43:7c:
3f:2a:47:0b:0d:4f:3c:be:d5:88:85:88:35:26:05:
d0:9c:d5:0a:08:41:73:f2:80:20:d5:cf:20:80:86:
31:dd:e6:9d:40:30:fa:ee:4c:98:40:33:39:c8:e7:
26:ab:03:d2:7f:09:8d:0a:a5:c0:ec:78:46:7c:84:
0d:37:32:73:a2:4f:dc:1c:31:39:60:50:e1:46:8a:
3b:b9:90:18:73:57:f3:8f:2c:c7:63:7d:96:b7:ae:
b8:a7:00:2c:28:1e:c0:b4:aa:74:c2:83:fb:cf:ee:
ed:24:84:67:a0:f8:41:ed:53:55:21:88:35:bd:9b:
ac:0b:97:d9:7f:b4:cd:1c:37:2a:90:a4:31:30:51:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:4E:E6:BD:1D:82:5A:16:C0:1C:41:64:BA:6A:5F:08:4D:20:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/joJO5r0dgloWwBxBZLpqXwhNIDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.174.0/24
Signature Algorithm: sha256WithRSAEncryption
24:73:59:fd:67:6c:e2:a0:34:b2:d5:20:de:8d:a9:25:db:7a:
33:1e:65:cd:52:67:58:05:76:1f:17:0a:a2:ae:87:c9:52:3f:
74:f5:01:71:b0:84:88:bb:2b:0f:d3:90:ec:fa:75:a5:3a:91:
16:6c:a3:bc:33:89:f3:b8:2e:4d:7a:75:24:ed:ec:a0:91:83:
37:3e:19:b3:b4:0a:ec:fb:96:14:61:ed:58:51:66:30:2d:b1:
2c:f0:63:44:ca:3a:63:63:b2:4d:93:97:88:f6:e5:a7:97:8d:
7e:9c:9e:9d:c3:6a:1c:e8:25:08:a2:61:52:c7:ab:d6:6a:a6:
3a:04:b3:d3:03:0e:f8:a2:df:e1:11:cd:7c:2f:06:e9:ff:9f:
75:80:fa:0b:fc:c4:3f:20:d2:1c:ef:fe:3e:4e:a2:08:dd:2a:
78:b8:4f:43:89:c7:52:dc:75:fa:2d:91:7a:3b:a6:8e:d2:2f:
31:b8:90:fd:ad:96:2f:83:4b:1f:af:da:dc:a2:40:bf:c3:f1:
0a:99:bc:97:0c:31:ee:85:27:63:f7:ef:0a:40:5a:ca:de:b5:
9f:90:d7:36:d8:15:dd:6f:0d:98:d7:c2:05:5d:fb:63:3b:89:
b4:a4:34:a1:f8:99:f3:03:d5:42:8a:60:09:51:88:d5:c8:1b:
46:04:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:06 2025 by rpki-client