Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lsajskraWm-PW8mQJmxUhwE8wuM.roa
File: lsajskraWm-PW8mQJmxUhwE8wuM.roa (raw, json)
Hash identifier: kMIvP9e9HXtbisnLF29yaMBkf8grk0UmLyGAIQqCZKI=
Subject key identifier: 96:C6:A3:B2:4A:DA:5A:6F:8F:5B:C9:90:26:6C:54:87:01:3C:C2:E3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198A38394DFFBDF06FB60E6D4FDE7FFFFB0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lsajskraWm-PW8mQJmxUhwE8wuM.roa
Signing time: Wed 13 Aug 2025 12:59:26 +0000
ROA not before: Wed 13 Aug 2025 12:59:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206971
IP address blocks: 151.244.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:83:94:df:fb:df:06:fb:60:e6:d4:fd:e7:ff:ff:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 12:59:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96c6a3b24ada5a6f8f5bc990266c5487013cc2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:aa:cb:eb:0d:9b:9f:5e:0d:ae:38:72:27:
81:b0:14:ee:c1:5a:39:8e:d8:a0:fa:96:89:36:72:
0f:5e:25:7a:af:b3:b9:b2:78:08:ac:41:af:4c:22:
be:55:c4:54:eb:5a:4c:df:8b:83:5f:7a:87:76:bf:
2c:4e:74:d1:ca:50:4a:05:30:46:d8:43:4d:13:47:
bc:d9:07:fd:14:ad:75:66:66:0e:9a:ba:11:f5:b5:
6f:73:4e:d4:60:ba:3c:ee:a6:37:77:8f:77:21:9e:
17:72:99:21:09:b8:09:8d:6a:86:9d:ce:ad:0c:3b:
18:5b:1f:9b:46:97:31:ff:8c:74:1f:16:2c:26:ea:
25:04:c0:22:3f:88:4c:16:ba:b3:12:e3:71:99:4a:
aa:ca:de:4d:e5:61:0f:63:47:d7:61:87:99:b8:ea:
5a:b6:6a:4d:4f:25:0f:22:be:fe:f2:03:d8:8a:e7:
14:84:be:8d:49:f7:18:6e:8e:1b:2d:58:36:40:72:
dc:d4:b3:30:46:0f:ed:92:75:1c:58:62:52:f7:18:
3c:8a:66:46:34:fc:64:5d:a3:4a:4d:fc:08:d3:8b:
9a:5d:9f:fe:f4:dd:e8:cb:13:ba:00:37:3e:fa:7c:
ef:ad:f0:1c:13:24:9e:6c:c2:01:a1:c8:8b:f1:1a:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:A3:B2:4A:DA:5A:6F:8F:5B:C9:90:26:6C:54:87:01:3C:C2:E3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lsajskraWm-PW8mQJmxUhwE8wuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.140.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d5:31:74:24:c2:65:84:52:71:b0:cb:dd:7a:53:df:f1:3f:
f8:3a:63:17:95:c4:41:96:a5:b2:82:64:d4:25:af:90:3f:76:
ea:c0:16:86:31:ee:72:c8:50:cf:78:af:cb:75:d5:ab:2d:6f:
00:52:f1:85:54:39:de:4f:7d:69:f8:36:26:df:3f:16:55:8a:
ee:cb:ed:bb:fd:b8:a7:b1:89:f7:39:5b:69:5b:2b:89:96:6c:
d7:9a:7a:b2:3c:99:16:4a:df:0c:9a:97:13:8a:df:43:54:28:
86:aa:49:6e:5f:a0:d7:c6:8a:25:78:2e:9a:9d:6a:53:25:d9:
0c:ef:c5:76:cf:b9:4c:15:eb:eb:cb:85:5c:68:37:96:d8:01:
80:6f:de:7e:e9:63:3c:04:d1:96:58:38:b3:fe:27:0d:2c:e0:
3d:ca:0b:c7:26:85:ae:90:62:34:bd:d6:6e:c2:73:d4:6e:70:
f5:f0:2b:68:2b:df:79:82:d8:ae:68:dd:05:d1:51:6a:b4:64:
77:dc:e6:70:5a:1d:81:f1:83:34:e6:94:8c:48:6e:41:71:e0:
29:d7:64:35:ff:cd:f9:dc:d7:4b:fa:6e:6e:51:77:8d:8b:2b:
95:e9:01:73:8d:b3:d6:cb:e8:73:dc:7f:ba:f6:fb:f7:ed:87:
88:1b:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:13 2025 by rpki-client