Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v6JbLqDgL4jfEeaK-naIM-khQmo.roa
File: v6JbLqDgL4jfEeaK-naIM-khQmo.roa (raw, json)
Hash identifier: 3/mBqeJT+I/RklU/RJZq5LeKcAQCXewuOoZ0VlCwdpw=
Subject key identifier: BF:A2:5B:2E:A0:E0:2F:88:DF:11:E6:8A:FA:76:88:33:E9:21:42:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196CD3F29DE43F3E028848915EAF25C93FA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v6JbLqDgL4jfEeaK-naIM-khQmo.roa
Signing time: Wed 14 May 2025 05:23:10 +0000
ROA not before: Wed 14 May 2025 05:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64161
IP address blocks: 151.242.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:3f:29:de:43:f3:e0:28:84:89:15:ea:f2:5c:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 14 05:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfa25b2ea0e02f88df11e68afa768833e921426a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:61:7c:98:db:6e:cf:cc:45:b7:e9:be:66:
7b:52:4e:d3:fb:a8:03:fa:98:ae:45:79:de:83:6f:
31:c4:f4:82:02:c3:c3:eb:db:89:b8:be:a0:7e:c2:
5d:4a:b5:40:97:01:2f:25:ed:a7:d1:22:86:3f:d7:
e4:b2:fc:c5:20:cc:7d:ec:d6:f8:00:c8:e5:da:cb:
4a:11:a8:ed:21:b6:aa:05:5d:ca:99:18:e1:8e:30:
3e:50:20:b0:56:b1:f0:3a:c0:73:2a:25:d4:15:34:
85:1f:c9:7f:e6:76:0e:21:7f:8e:8a:d5:fd:2a:65:
a4:e8:3e:cd:76:f6:50:9b:0b:ef:f5:91:29:a6:1e:
db:ae:e3:24:f1:64:28:56:b2:8a:1d:eb:44:72:70:
6b:6b:04:75:4c:b1:31:90:a5:5b:0b:25:66:f4:32:
83:29:d8:b3:93:2c:fa:d3:3f:a5:22:a8:ae:38:54:
10:f9:be:8a:39:be:a4:f0:e1:5b:89:02:61:f3:a5:
95:7d:03:e1:b6:8a:fe:40:f9:dd:0b:ae:c5:db:4d:
22:d1:96:fd:b6:86:de:bf:9a:aa:e9:f9:46:83:e7:
1b:72:af:44:6c:f9:bb:3b:28:95:2e:6f:70:46:bd:
ff:9d:21:66:3b:4d:38:45:40:c7:e0:c5:f0:90:d6:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:5B:2E:A0:E0:2F:88:DF:11:E6:8A:FA:76:88:33:E9:21:42:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v6JbLqDgL4jfEeaK-naIM-khQmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.54.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ed:7c:c3:c8:d7:42:b0:40:81:c9:24:8b:ee:4e:25:e5:6b:
50:40:de:5e:28:9e:9b:89:23:38:27:44:b6:91:97:09:0f:5d:
fa:d2:0c:1a:06:1e:45:5b:48:7c:70:c8:e0:96:19:f1:80:20:
62:08:28:bf:d0:ad:1c:e9:fc:f8:9f:17:c2:1d:5f:4e:52:47:
12:44:f3:f7:94:a6:89:37:85:4a:28:38:0e:18:48:5e:e9:9a:
a5:0e:ad:22:0b:c6:22:0e:3f:af:ed:f0:1a:d3:1f:47:32:5f:
0a:dd:4b:f4:d2:ac:dd:51:93:aa:b8:5e:df:04:21:40:d4:28:
19:49:18:27:ed:c7:3f:86:f4:1c:07:c1:04:b9:14:a2:94:e8:
b8:26:58:b4:90:7a:a4:0d:b1:c0:ee:c1:9e:28:31:2b:c7:1e:
cc:9f:ae:1f:ea:d3:41:2a:7e:2a:56:14:e8:ac:ba:49:84:a7:
02:e9:8c:97:7c:4f:da:a9:db:0f:3e:ac:4b:ce:3c:8b:a2:03:
12:f2:ec:48:4a:20:0c:ec:34:60:3f:f9:99:81:37:60:4f:52:
83:38:13:92:17:b5:bb:6f:44:8e:cf:47:59:d8:a9:08:67:59:
7d:b7:74:16:ca:9f:43:e6:3b:df:55:ac:d7:6f:9f:16:f5:6b:
d9:77:4e:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbNPyneQ/PgKISJFeryXJP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTE0MDUyMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmEyNWIyZWEwZTAyZjg4ZGYxMWU2OGFmYTc2ODgzM2U5MjE0MjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4thfJjbbs/MRbfpvmZ7Uk7T+6gD
+piuRXneg28xxPSCAsPD69uJuL6gfsJdSrVAlwEvJe2n0SKGP9fksvzFIMx97Nb4
AMjl2stKEajtIbaqBV3KmRjhjjA+UCCwVrHwOsBzKiXUFTSFH8l/5nYOIX+OitX9
KmWk6D7NdvZQmwvv9ZEpph7bruMk8WQoVrKKHetEcnBrawR1TLExkKVbCyVm9DKD
Kdizkyz60z+lIqiuOFQQ+b6KOb6k8OFbiQJh86WVfQPhtor+QPndC67F200i0Zb9
tobev5qq6flGg+cbcq9EbPm7OyiVLm9wRr3/nSFmO004RUDH4MXwkNb3GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+iWy6g4C+I3xHmivp2iDPpIUJqMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdjZKYkxxRGdMNGpmRWVhSy1uYUlNLWtoUW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/I2MA0G
CSqGSIb3DQEBCwUAA4IBAQBy7XzDyNdCsECBySSL7k4l5WtQQN5eKJ6biSM4J0S2
kZcJD1360gwaBh5FW0h8cMjglhnxgCBiCCi/0K0c6fz4nxfCHV9OUkcSRPP3lKaJ
N4VKKDgOGEhe6ZqlDq0iC8YiDj+v7fAa0x9HMl8K3Uv00qzdUZOquF7fBCFA1CgZ
SRgn7cc/hvQcB8EEuRSilOi4Jli0kHqkDbHA7sGeKDErxx7Mn64f6tNBKn4qVhTo
rLpJhKcC6YyXfE/aqdsPPqxLzjyLogMS8uxISiAM7DRgP/mZgTdgT1KDOBOSF7W7
b0SOz0dZ2KkIZ1l9t3QWyp9D5jvfVazXb58W9WvZd058
-----END CERTIFICATE-----
Generated at Thu May 15 23:48:11 2025 by rpki-client