Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oatRoXhAmtXY0ffAecsSbSDl8mc.roa
File: oatRoXhAmtXY0ffAecsSbSDl8mc.roa (raw, json)
Hash identifier: iwHyNe1c2qwX55H2RmQ2r4DokavDcJsIPUbzRyXeOKg=
Subject key identifier: A1:AB:51:A1:78:40:9A:D5:D8:D1:F7:C0:79:CB:12:6D:20:E5:F2:67
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977379E5FA22C2E2C6F0DECAE327477605
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oatRoXhAmtXY0ffAecsSbSDl8mc.roa
Signing time: Sun 15 Jun 2025 12:04:18 +0000
ROA not before: Sun 15 Jun 2025 12:04:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216435
IP address blocks: 151.245.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:79:e5:fa:22:c2:e2:c6:f0:de:ca:e3:27:47:76:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 15 12:04:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1ab51a178409ad5d8d1f7c079cb126d20e5f267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:57:9b:3e:cb:4f:ab:5c:44:15:6c:87:ab:
99:d7:e0:f9:e3:31:a3:cc:a8:18:a7:6a:9a:01:f3:
19:67:80:9a:f8:76:d3:b3:e1:a0:cb:fb:c3:02:a5:
1c:39:3a:d4:a3:0f:83:b4:1f:a5:44:d2:c6:2f:d9:
49:47:01:4f:a4:a7:08:58:e3:0e:d3:cb:5d:35:6c:
01:47:85:03:8c:5a:6e:ac:b2:79:a9:ff:62:74:5d:
3a:b0:98:a9:72:65:76:c6:f7:d5:9f:c8:59:65:9f:
a1:c2:b7:a6:29:e0:35:ab:b5:cc:14:de:8d:8c:51:
dc:00:14:a5:29:d6:ff:42:68:6d:c0:7d:e1:e9:60:
30:2e:c3:c3:37:82:bf:fc:89:87:45:92:5a:a5:51:
cc:64:74:74:93:d9:65:7e:4c:31:46:04:51:20:c3:
ae:73:e0:ef:c6:ca:45:04:5e:3b:41:35:7d:e3:72:
79:e0:48:b7:34:1e:98:b1:3e:1a:df:8f:55:fe:33:
1e:fb:ce:05:24:88:4c:2f:97:64:7a:b3:66:ed:49:
7e:f1:61:c6:20:0c:c0:79:c3:e6:a2:7b:77:95:7d:
eb:d5:a4:82:32:2b:31:57:ae:8a:e9:ce:68:f1:b5:
f5:0f:64:b1:c1:96:20:86:5f:67:7d:ef:c6:4b:67:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:51:A1:78:40:9A:D5:D8:D1:F7:C0:79:CB:12:6D:20:E5:F2:67
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oatRoXhAmtXY0ffAecsSbSDl8mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.115.0/24
Signature Algorithm: sha256WithRSAEncryption
03:80:81:61:56:ff:01:15:fe:0f:e4:a2:88:3f:07:e2:f3:cd:
63:b4:36:a5:10:a9:37:df:81:7e:e0:3e:e0:4f:0d:b2:e8:c9:
69:df:19:ae:ec:6a:e9:4e:19:ce:ed:f2:94:56:ae:98:54:27:
c5:9b:14:50:38:43:11:7a:5e:90:a6:d9:c0:95:72:c2:b9:88:
83:fa:8a:cb:08:29:15:ba:6d:c3:7b:92:d9:2d:55:16:9a:48:
41:87:7c:dd:a7:7a:cc:85:90:a8:6c:5e:10:0a:1a:dc:d8:31:
44:ce:3c:ea:ca:a2:60:5e:f4:06:ea:8e:7e:d2:14:56:e5:1f:
17:bb:53:44:b9:b7:a4:ed:eb:77:2e:47:dc:f7:02:e7:75:c8:
11:4c:59:50:9c:8b:ea:20:ee:a1:14:46:15:e6:24:e7:ea:d7:
e9:b7:a8:25:c1:24:f4:ad:b0:d9:ac:31:17:c7:f7:d5:77:16:
19:20:17:5e:70:c0:b0:80:b2:70:c8:da:ef:05:18:e2:03:b4:
50:11:37:27:6e:83:e5:a1:45:c4:ac:d5:78:9d:04:91:64:d5:
39:f8:46:29:fc:13:ad:b2:52:19:dc:ed:31:8d:e7:4f:e7:c5:
08:f3:89:47:14:93:ba:fe:b2:6b:1a:ea:ba:bd:ec:42:7f:4e:
0c:78:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:09:36 2025 by rpki-client