Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lVlllZ-20peVCI3Bf_Oz_K4hoNg.roa
File: lVlllZ-20peVCI3Bf_Oz_K4hoNg.roa (raw, json)
Hash identifier: wyAD9cTOLi0fGsO7Fe7Da7XeptgLguoYJggmdFHSkBI=
Subject key identifier: 95:59:65:95:9F:B6:D2:97:95:08:8D:C1:7F:F3:B3:FC:AE:21:A0:D8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A57B6A64C7D7A8ED013612E3B07358E4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lVlllZ-20peVCI3Bf_Oz_K4hoNg.roa
Signing time: Tue 06 May 2025 12:04:10 +0000
ROA not before: Tue 06 May 2025 12:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 151.240.255.0/24 maxlen: 24
151.242.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:7b:6a:64:c7:d7:a8:ed:01:36:12:e3:b0:73:58:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 12:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=955965959fb6d29795088dc17ff3b3fcae21a0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:49:64:24:4b:d3:91:dc:e2:cf:a7:0b:04:1e:
60:6a:61:aa:89:19:76:82:ce:60:dd:47:9a:ad:03:
e4:d4:a0:e2:c1:62:68:78:1a:b6:46:69:62:74:08:
a4:a6:2e:fc:1d:2b:35:90:11:e0:b8:83:09:99:8f:
6d:38:6a:3d:3b:c2:96:c6:70:fc:c6:40:78:5f:e4:
25:85:9c:06:16:b0:5e:87:58:7c:65:92:b2:39:d4:
e3:4e:e3:fb:3f:f4:82:e1:4a:3d:41:d3:49:83:8c:
b2:85:5c:d1:2d:09:29:56:4e:dc:c4:00:9b:b4:f1:
40:3d:64:90:5c:54:6a:5a:64:bd:60:1d:98:ff:8f:
72:d9:1a:b5:e6:3e:d2:fe:d3:24:9c:ac:60:eb:14:
a7:95:cb:76:b5:09:83:5e:a6:8b:b4:96:9d:a1:f2:
72:29:5a:22:88:5a:c4:76:e0:98:12:8a:c2:24:8e:
e2:66:a9:eb:ac:59:eb:33:2c:c2:06:81:03:ef:11:
e8:08:37:c5:31:24:57:65:a9:15:76:28:10:c2:9d:
ae:04:2e:9c:73:76:19:2b:7c:ba:bb:08:ae:a5:ae:
01:37:0f:48:5c:63:e5:0c:e5:b7:8a:72:9d:16:53:
55:d4:76:96:23:bf:79:16:ac:26:97:89:d2:59:0f:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:65:95:9F:B6:D2:97:95:08:8D:C1:7F:F3:B3:FC:AE:21:A0:D8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lVlllZ-20peVCI3Bf_Oz_K4hoNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.255.0/24
151.242.147.0/24
Signature Algorithm: sha256WithRSAEncryption
13:69:dc:93:53:ae:c9:15:e0:90:02:7b:9a:17:0a:6f:ca:c3:
26:94:d9:7d:d6:3f:3b:f7:17:f1:e9:4d:48:be:2d:2f:ed:4e:
97:5c:de:e0:6f:55:63:31:28:57:5c:d6:78:56:7e:a8:7f:6c:
0d:cd:69:e1:a3:c2:c3:17:f6:7f:bb:f5:4c:0b:9b:db:55:6d:
44:21:6b:b8:50:c4:93:bb:e7:a7:e1:9d:c6:f4:ec:78:fa:c1:
67:1d:1e:62:ce:00:71:d5:88:4f:07:c8:d1:1e:9b:8b:0f:a3:
4d:e7:6f:8f:4a:74:72:23:40:48:4f:07:d4:c6:8c:74:58:8a:
dd:8d:de:c4:dc:f3:2b:41:61:12:d1:29:38:35:60:cd:d6:fc:
14:97:20:35:d0:35:6c:6e:ee:ff:ff:ec:c4:d6:ab:02:03:5a:
06:2e:44:03:90:8a:94:06:cc:b7:d1:b2:cb:33:67:75:1a:1e:
96:62:c6:d2:d5:63:36:f7:c2:58:01:9e:e0:2e:a4:40:7b:f4:
34:78:e2:38:2b:d2:fa:d9:d4:a8:d7:4c:2f:a2:61:df:9f:f3:
1b:3e:21:03:3e:7d:78:eb:a4:88:c1:e1:9d:9c:31:b7:54:dc:
b6:d6:c5:8c:23:7b:b1:db:4c:c9:ff:8b:5f:d6:1c:8e:c3:cb:
12:06:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:58:29 2025 by rpki-client