Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xxVF4f5g6UfxssO-5BnuYfx2Rgg.roa
File: xxVF4f5g6UfxssO-5BnuYfx2Rgg.roa (raw, json)
Hash identifier: ERDMshEI3BK89uxXHMl4iNBShHIfJwFOKkkYHppPVnA=
Subject key identifier: C7:15:45:E1:FE:60:E9:47:F1:B2:C3:BE:E4:19:EE:61:FC:76:46:08
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977378FCA8AB7FEAAF698AF25D70F8E466
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xxVF4f5g6UfxssO-5BnuYfx2Rgg.roa
Signing time: Sun 15 Jun 2025 12:03:18 +0000
ROA not before: Sun 15 Jun 2025 12:03:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150249
IP address blocks: 151.242.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:78:fc:a8:ab:7f:ea:af:69:8a:f2:5d:70:f8:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 15 12:03:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c71545e1fe60e947f1b2c3bee419ee61fc764608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:bb:0d:35:c8:4c:e8:57:c4:97:98:58:1a:
da:e2:5c:f9:2c:0b:77:fb:89:5f:b1:b9:aa:87:f1:
e9:bd:f8:1d:65:af:74:ff:8f:5d:20:7a:66:26:55:
55:b5:82:64:da:26:f3:a0:20:f6:4f:71:70:37:66:
ad:43:ba:4c:44:bf:4e:b8:2e:9b:b1:36:43:ba:e8:
eb:a5:0e:a6:a2:33:13:11:78:6f:f9:9e:9c:e1:6e:
0e:12:fd:5e:7e:fd:11:45:e5:5d:a7:b4:5c:b9:d6:
7d:31:4a:b3:9d:67:61:77:3f:f6:dd:49:dc:83:77:
bf:11:64:2a:2b:f1:64:69:2b:ff:44:84:d2:24:c5:
fc:59:1f:81:02:c3:b5:46:e9:6d:84:96:d6:90:87:
b9:51:b0:5f:a7:51:92:48:6c:7f:4b:01:da:e1:19:
e8:d1:85:88:50:fe:cc:86:86:95:36:ee:84:47:6f:
57:b1:a5:81:35:73:cf:d8:32:1c:24:12:5c:63:f9:
47:52:6b:2d:1c:6b:81:9c:09:b6:f4:82:20:51:01:
a3:dc:6e:77:b6:33:f7:5c:da:e1:4d:80:db:6f:a6:
52:67:6a:65:9d:01:8b:f5:c6:78:42:88:5c:db:26:
8f:51:93:d2:2b:98:25:a3:c5:c5:58:b0:94:b4:29:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:45:E1:FE:60:E9:47:F1:B2:C3:BE:E4:19:EE:61:FC:76:46:08
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xxVF4f5g6UfxssO-5BnuYfx2Rgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:73:29:1f:55:28:0f:7b:f5:4b:ae:c3:b4:f2:28:55:52:07:
e8:5b:26:ca:e2:0b:00:67:73:e5:1c:eb:8e:2b:5c:0d:b3:4b:
62:2e:58:9f:ab:ab:d5:1a:6b:44:95:f1:f6:e8:ee:85:e9:68:
d0:34:db:42:1a:e2:57:92:9c:bc:94:0f:0a:02:eb:c0:0e:08:
5a:e3:30:d0:90:9b:89:3d:0b:30:9a:85:ac:28:47:99:2c:6f:
b4:bc:a1:19:69:d2:16:19:5c:d8:31:0a:88:2a:ac:25:4f:b7:
9d:df:ab:a8:ee:b6:7c:d0:38:9e:74:e7:56:1d:d5:bc:0d:bb:
8f:c2:9e:b7:90:14:42:ea:3e:37:ae:f5:e4:68:ef:2e:be:c3:
bd:9c:11:91:84:12:98:67:e2:b2:47:b4:c5:53:a3:bc:3d:e3:
df:52:da:b9:63:68:51:11:7b:86:03:d9:37:f0:9c:76:72:10:
71:6b:05:46:27:af:45:b6:33:89:eb:57:99:17:65:24:6f:25:
35:1f:e4:60:92:18:ff:2c:1f:65:fc:89:f1:ef:a4:1d:39:1f:
4d:69:26:81:c1:1b:9a:ab:b6:9a:bb:6b:2d:17:1d:b1:57:8a:
a3:a9:76:b3:89:e0:64:82:5b:88:67:d0:52:7d:97:75:7f:3f:
a6:d3:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:40:48 2025 by rpki-client