Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kslLwB7Ozuz5w44hH2KvCZNfkbM.roa
File: kslLwB7Ozuz5w44hH2KvCZNfkbM.roa (raw, json)
Hash identifier: Y08aF33wUWvFiKtBZ3NbXPmC8i5zgRmhdu3CS2o+z7w=
Subject key identifier: 92:C9:4B:C0:1E:CE:CE:EC:F9:C3:8E:21:1F:62:AF:09:93:5F:91:B3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196B3DCBFAD8C56EA79BEDA3D66B09BA2DA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kslLwB7Ozuz5w44hH2KvCZNfkbM.roa
Signing time: Fri 09 May 2025 07:05:10 +0000
ROA not before: Fri 09 May 2025 07:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56655
IP address blocks: 151.242.104.0/24 maxlen: 24
151.242.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:dc:bf:ad:8c:56:ea:79:be:da:3d:66:b0:9b:a2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 9 07:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c94bc01ececeecf9c38e211f62af09935f91b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:85:d4:0c:46:9d:1a:61:18:5b:70:66:6d:
2d:4f:59:10:39:7a:10:b6:61:c3:92:e1:f6:f4:04:
45:1a:3a:08:2a:7c:d5:7e:c9:65:cf:eb:72:54:79:
71:f9:a7:e1:23:89:04:32:d9:8f:e0:81:ae:c9:83:
e4:84:cb:e7:d7:6e:7c:b6:ad:19:ce:59:3b:ae:dd:
5f:98:07:58:3e:d4:91:16:fb:d0:f7:f2:da:46:2a:
39:49:44:02:d2:55:0c:43:57:10:46:29:14:7d:71:
72:65:9e:58:6f:85:76:c8:02:4c:a2:27:38:fe:11:
ae:fb:c3:30:e1:b3:2b:71:a4:9b:13:9f:83:d7:4d:
9e:b5:0e:0a:a0:31:90:80:c1:94:98:ec:f0:76:60:
68:d3:0e:89:7f:2c:02:98:38:05:40:dd:26:f1:eb:
b7:a9:41:9f:58:d8:49:ff:6f:d2:ce:80:b6:1b:ae:
f3:55:e8:17:0b:55:39:8f:ca:90:24:6e:b6:e3:94:
46:d7:4d:2e:21:20:d8:84:8a:a6:cd:1c:40:c0:e2:
bb:df:1b:b0:18:ef:71:fe:0d:02:5c:90:a5:23:a8:
db:29:2e:dd:f7:2e:ab:26:e4:08:99:df:fe:23:e3:
78:2f:fc:a3:05:1f:8a:38:30:ce:13:05:1f:10:be:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C9:4B:C0:1E:CE:CE:EC:F9:C3:8E:21:1F:62:AF:09:93:5F:91:B3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kslLwB7Ozuz5w44hH2KvCZNfkbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.104.0/24
151.242.168.0/23
Signature Algorithm: sha256WithRSAEncryption
12:4a:b5:b6:ca:84:d6:01:bb:16:fa:e4:d1:75:39:53:7b:ac:
8d:91:1b:69:49:30:33:71:5b:71:1a:ad:7d:c3:7c:cc:f1:54:
5a:22:79:4a:71:9e:04:f6:43:63:c0:13:f0:aa:a1:12:71:76:
f1:d3:3c:ac:94:4d:ba:fb:dd:62:30:a2:8f:af:29:20:ce:a9:
d9:ec:0f:90:4c:d3:65:85:ed:b9:77:4f:b1:55:c5:9b:b9:68:
da:1e:7d:7d:d9:1e:37:0f:02:d4:17:fa:6e:92:8b:31:0e:55:
e6:60:9a:23:2c:39:58:a8:c0:31:08:dd:4a:61:2f:e8:b1:1d:
43:29:24:a1:20:3b:52:0e:ef:72:b6:df:b8:ec:b8:4f:71:8b:
38:e8:84:c9:6c:c1:aa:04:a6:64:a8:74:e2:83:ef:17:b9:33:
f0:cc:1a:d6:5c:fe:1c:3b:4e:cd:45:c3:f8:d3:9d:25:c8:12:
44:3d:4e:cb:01:e0:1c:05:b8:96:7c:a5:8f:74:9d:36:f5:a2:
c0:ba:bd:48:b4:6a:ed:06:e2:99:68:83:78:45:39:a3:f7:51:
49:1e:82:21:86:21:1f:33:ca:8d:66:8f:ce:b5:9d:71:ce:5d:
cf:d7:02:fc:29:25:61:cd:51:44:1e:d4:40:52:07:ab:ae:34:
6d:5e:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:59:03 2025 by rpki-client