Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nuc7K9e1xnSVTo7Vflrsze0beaE.roa
File: nuc7K9e1xnSVTo7Vflrsze0beaE.roa (raw, json)
Hash identifier: u0SLo44yFWGvxvaAXlMHK/zJXV9sH1uRbbBst3zySN4=
Subject key identifier: 9E:E7:3B:2B:D7:B5:C6:74:95:4E:8E:D5:7E:5A:EC:CD:ED:1B:79:A1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1C05F5FE886E1325081E77347B85179
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nuc7K9e1xnSVTo7Vflrsze0beaE.roa
Signing time: Fri 27 Jun 2025 14:17:43 +0000
ROA not before: Fri 27 Jun 2025 14:17:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206921
IP address blocks: 151.240.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:c0:5f:5f:e8:86:e1:32:50:81:e7:73:47:b8:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 14:17:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ee73b2bd7b5c674954e8ed57e5aeccded1b79a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:23:c3:e8:bb:84:b9:27:40:93:c6:34:a0:
b2:5b:78:a4:82:ff:0e:26:4a:21:09:50:c4:49:31:
5c:ea:9a:bc:90:69:99:52:86:66:64:7c:1f:1d:88:
6c:80:49:72:61:8d:1f:90:62:9a:2a:c6:8b:29:7e:
3a:76:22:ae:4e:f5:20:6b:39:2b:d8:17:94:58:66:
3f:54:73:6d:12:b7:1c:58:96:31:77:4b:9b:c2:7c:
0a:75:79:56:d1:58:e5:fb:48:a4:fa:04:a8:ce:35:
5d:e5:52:70:b3:ef:b6:03:91:10:4b:25:42:3b:90:
9a:8b:40:aa:f3:c0:4e:9d:3e:46:11:3e:8a:56:47:
62:70:ca:43:4b:22:74:c1:3a:d5:6b:ca:6d:d3:2e:
57:65:51:d3:0d:65:25:a6:62:34:84:cf:2b:94:22:
65:38:d0:66:d8:0b:3e:1d:cd:5c:74:ab:70:45:56:
6c:86:72:c6:65:80:11:bf:96:c7:d9:2a:0f:fa:09:
0f:fa:6a:b1:3a:5a:0e:f5:3a:3d:99:59:55:86:aa:
f6:db:ca:05:82:68:30:f7:b2:82:05:c1:b5:11:30:
df:17:49:6a:31:0e:d2:83:66:da:86:bd:a6:95:1f:
50:c3:e2:db:4c:57:b1:1b:ea:11:47:eb:1a:74:e8:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:3B:2B:D7:B5:C6:74:95:4E:8E:D5:7E:5A:EC:CD:ED:1B:79:A1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nuc7K9e1xnSVTo7Vflrsze0beaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.10.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ef:e8:f3:c7:47:d9:ca:33:76:6e:e2:e1:1a:83:09:95:68:
ab:36:26:b5:3d:60:8e:3a:12:cc:26:0c:6e:e7:89:7f:0e:ee:
21:1a:c2:b8:1a:cb:4e:ad:6c:c4:99:0a:e4:86:91:c6:9d:cb:
57:22:77:11:16:64:b9:0c:aa:ba:bf:b7:01:16:c3:04:8b:db:
32:4e:7c:a2:51:f8:63:45:7e:5a:17:03:84:7c:b3:6c:b3:8e:
61:28:2b:ab:fb:11:0a:5e:e3:d1:fb:36:87:09:58:07:53:94:
63:bc:2a:b4:bd:d8:43:cd:19:67:ad:fc:80:56:52:03:37:fa:
9b:c8:e4:ac:44:75:4f:db:11:aa:f5:cc:12:1b:3d:1d:1f:47:
dc:6f:be:26:f5:ff:e4:f1:8e:2c:db:cb:26:71:04:5c:17:85:
d8:1d:76:40:55:af:84:b0:c7:3f:57:2b:48:ae:3d:dd:bb:60:
e5:fd:f4:6c:de:2b:05:e9:c3:3d:5c:7e:93:0c:4d:d4:6f:49:
fb:7a:aa:ab:79:79:52:04:cd:3a:74:2a:06:6e:36:4e:3e:7e:
94:dc:c5:54:7d:71:1e:dd:e6:9f:87:70:7d:a9:c1:b6:ae:ee:
78:c7:b6:8c:65:10:0f:a4:ca:1c:85:16:be:34:2c:c5:46:ce:
b6:38:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:18:15 2025 by rpki-client