Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q6QgIfGnrenyd8Snjpkk3lDfQ3Q.roa
File: q6QgIfGnrenyd8Snjpkk3lDfQ3Q.roa (raw, json)
Hash identifier: N1RDmx4sPzwCjOECH1DoFGeSo7MHkbp6M12+hF1/XVg=
Subject key identifier: AB:A4:20:21:F1:A7:AD:E9:F2:77:C4:A7:8E:99:24:DE:50:DF:43:74
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019690799A72C4E8D406F8EABE0A517E0107
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q6QgIfGnrenyd8Snjpkk3lDfQ3Q.roa
Signing time: Fri 02 May 2025 10:10:10 +0000
ROA not before: Fri 02 May 2025 10:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 151.242.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:79:9a:72:c4:e8:d4:06:f8:ea:be:0a:51:7e:01:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 2 10:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aba42021f1a7ade9f277c4a78e9924de50df4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:03:85:f1:41:23:a5:59:37:7c:12:f6:c7:
21:1a:d6:f4:b9:df:c8:44:2d:d5:62:95:56:81:62:
d4:5b:0d:dc:83:b0:1a:59:45:d5:50:aa:98:ac:b0:
b7:27:b1:d9:04:c3:aa:7b:13:88:d6:e8:c0:8f:af:
38:77:7d:23:70:b2:6b:7d:f7:66:72:ec:4d:cf:a1:
be:ca:e1:c3:39:bd:3f:8b:10:a1:8a:87:cb:bd:c0:
6f:14:d8:b0:f5:a5:b0:3d:81:11:0d:f3:52:97:cd:
db:66:cc:28:4d:64:e0:c2:0e:27:45:6c:a6:10:bc:
45:a5:d6:ae:d1:02:4c:ee:3d:b5:c3:d6:88:68:44:
03:fa:03:0c:f6:0e:c5:1e:72:c7:b6:e5:f3:eb:04:
4d:e0:a2:4e:d4:1c:0f:23:99:6e:1f:79:53:82:40:
84:25:99:5c:e2:34:f3:5e:c2:9a:f3:34:4d:9f:d8:
89:9c:ba:08:6d:9d:0d:3b:ba:e4:10:60:fd:09:f3:
d9:08:14:61:87:83:e1:5c:50:0b:1d:36:56:99:8c:
1e:92:9b:e1:60:59:d4:52:2a:2e:f8:d0:c0:24:57:
05:82:75:56:94:4f:af:b1:15:ba:b8:24:cd:09:8e:
ba:c9:0f:54:5f:85:91:60:c7:c5:46:69:16:1e:9b:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A4:20:21:F1:A7:AD:E9:F2:77:C4:A7:8E:99:24:DE:50:DF:43:74
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q6QgIfGnrenyd8Snjpkk3lDfQ3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.156.0/24
Signature Algorithm: sha256WithRSAEncryption
03:05:71:e5:91:1e:3b:01:ab:2c:40:f3:57:6e:f1:97:9e:88:
5c:be:b5:c2:b8:16:92:3f:35:37:45:50:97:cc:cb:82:ad:7a:
60:ca:09:5a:85:bd:37:a6:bf:31:6b:6c:20:f5:5e:52:81:df:
93:22:80:6f:bf:42:34:4d:d5:44:b2:90:aa:b3:a0:57:7d:6d:
bc:a0:66:aa:40:7f:c3:97:63:1c:1e:c9:d0:5a:4f:50:3b:cc:
6a:f2:bc:48:96:4c:8a:eb:ca:6a:e9:d8:b9:0d:72:63:9d:9c:
87:72:f8:34:2e:37:11:fe:57:d2:0b:6e:10:11:cc:8b:17:26:
5b:41:98:67:d2:b7:02:b8:82:b5:c3:38:7f:c3:0e:46:da:5f:
5c:52:78:a6:7c:82:80:30:eb:78:36:10:e9:93:5b:b7:44:82:
2a:0f:7b:07:b6:0e:a4:e3:a3:c3:ee:5b:fc:76:88:29:49:7e:
49:56:f6:97:19:5d:11:f0:89:52:96:3f:f4:ff:40:52:75:41:
85:d6:03:5e:45:18:eb:19:0c:db:aa:0c:a4:bd:41:0a:bb:e5:
92:71:78:3e:4a:d0:37:81:4c:9a:b7:87:97:6e:74:05:8e:61:
43:fc:74:b1:1a:15:c1:3f:51:7e:98:22:eb:60:b4:50:89:70:
13:c4:bc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:44:19 2025 by rpki-client