Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kMAGCTisQDo_Ik_amsHXO3CIq0M.roa
File: kMAGCTisQDo_Ik_amsHXO3CIq0M.roa (raw, json)
Hash identifier: kZdbD2YB20/z+4Gu/FaEEQ+Gg91LHaglmLB80bWll/s=
Subject key identifier: 90:C0:06:09:38:AC:40:3A:3F:22:4F:DA:9A:C1:D7:3B:70:88:AB:43
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01969E85CB55D995566323DFCA0CD585F909
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kMAGCTisQDo_Ik_amsHXO3CIq0M.roa
Signing time: Mon 05 May 2025 03:38:10 +0000
ROA not before: Mon 05 May 2025 03:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 151.242.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:85:cb:55:d9:95:56:63:23:df:ca:0c:d5:85:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 5 03:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90c0060938ac403a3f224fda9ac1d73b7088ab43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:2d:98:c9:c7:90:35:b1:7c:39:ff:f6:78:
61:bb:f6:7f:b5:55:0c:f7:bb:aa:69:dc:a7:29:fe:
67:ce:9d:d6:cf:c8:82:38:a5:a3:45:63:1f:ec:53:
9f:b3:7b:e0:af:45:25:0b:c3:0e:be:c5:5b:8d:30:
8c:4e:ea:d0:b5:29:61:6b:1c:f5:32:14:e5:14:ac:
68:82:43:6a:03:84:49:e3:f5:0a:27:de:3c:44:00:
8b:67:8a:60:9c:7e:f8:09:6b:d4:5a:4a:5d:64:f0:
ff:d9:36:88:f4:2c:b2:e1:89:7d:8a:e6:5f:b6:03:
99:7d:7c:69:74:fd:3f:fd:91:16:19:60:c4:5e:7c:
c3:31:0a:72:03:5a:c5:ca:18:a7:e3:2d:c5:da:aa:
a2:fb:e8:73:61:99:2a:bd:f6:c9:84:1e:10:f3:08:
6b:2d:7d:52:a6:07:fa:f3:6c:86:76:ea:b2:c0:c8:
8e:ad:43:7a:c4:88:ed:0a:7d:89:2b:ce:fe:62:9f:
bc:b3:45:42:7f:8b:43:9a:7e:44:09:e0:eb:fa:00:
fb:7c:f8:f7:b4:5b:5a:57:28:ea:fa:2a:26:a4:4a:
f5:a1:bd:ab:22:f5:c6:81:89:5f:d1:bb:5a:6b:42:
9d:87:54:59:aa:3f:60:6f:a9:24:39:6e:bb:3f:e9:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:06:09:38:AC:40:3A:3F:22:4F:DA:9A:C1:D7:3B:70:88:AB:43
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kMAGCTisQDo_Ik_amsHXO3CIq0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.154.0/24
Signature Algorithm: sha256WithRSAEncryption
17:70:04:b6:a0:7f:86:38:5e:d6:82:21:fe:a2:b2:88:23:bb:
27:9b:ab:7c:4c:33:9e:52:0f:fa:cb:a4:10:e5:c3:7a:0f:67:
ec:cd:4b:f7:f5:0b:9e:a0:7a:86:5c:1b:e6:57:44:61:e2:52:
f8:5e:c9:57:79:8a:32:04:f0:91:e7:8f:de:ee:9f:d0:da:50:
65:8e:73:46:90:e8:21:d5:08:35:fb:bf:0e:5c:f0:0b:3f:9b:
9b:62:62:a6:06:f0:03:e0:e0:27:4c:b0:ef:09:c4:7a:78:55:
1b:c3:4d:4f:ce:01:b8:cc:51:ad:6d:46:b4:54:97:21:e4:83:
11:03:46:71:ad:a2:88:59:e2:b8:c7:1f:1b:c9:2e:02:4b:2a:
52:db:30:72:f5:b7:5a:19:e0:9e:53:ff:9f:4b:9f:21:ef:ed:
f9:0a:a3:ca:39:27:ec:e9:c3:d4:70:78:e1:86:9b:06:df:72:
70:3d:69:2f:80:a8:e0:fc:06:3f:f1:50:53:eb:79:e4:9f:74:
95:bc:01:91:7e:c1:99:1f:c8:06:89:57:10:b5:7c:2b:a4:42:
1a:02:03:40:ec:6f:7c:42:a0:b8:b4:64:d1:87:39:c7:14:c8:
f7:9d:ca:9a:92:6c:7e:8e:34:71:28:b0:e3:83:4f:1f:03:58:
58:82:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:19:26 2025 by rpki-client