Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yzhFd1Gs5jyWYYc0s461B2Mr8GQ.roa
File: yzhFd1Gs5jyWYYc0s461B2Mr8GQ.roa (raw, json)
Hash identifier: fj1ND4HYyMMpUNHo7FE7qV1xtQE97Bu1XExMWAaRT8c=
Subject key identifier: CB:38:45:77:51:AC:E6:3C:96:61:87:34:B3:8E:B5:07:63:2B:F0:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01979BA88B52CB59D86607F72D51B5A0596A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yzhFd1Gs5jyWYYc0s461B2Mr8GQ.roa
Signing time: Mon 23 Jun 2025 07:20:03 +0000
ROA not before: Mon 23 Jun 2025 07:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136557
IP address blocks: 151.242.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:a8:8b:52:cb:59:d8:66:07:f7:2d:51:b5:a0:59:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 07:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb38457751ace63c96618734b38eb507632bf064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:e4:75:8b:df:82:63:9e:41:5b:22:7c:8e:
e5:c2:5f:dd:92:e4:d0:9a:db:42:2c:99:2b:5f:96:
df:b3:e2:d3:c3:8d:ac:d2:d9:c3:02:ab:5f:f2:b1:
28:55:af:13:19:f2:7d:20:36:d5:15:4d:16:27:e7:
7d:88:f1:be:5d:1f:77:5e:f0:de:20:c2:25:f2:1b:
ba:75:89:fe:b2:f7:c4:65:7f:36:21:d0:2b:a5:07:
9d:bf:ff:8c:13:7f:8c:81:a7:06:93:49:7b:ce:5c:
36:14:76:52:39:9a:6a:ff:46:a5:0b:79:e0:5c:12:
b2:6e:9d:ae:6a:74:9c:7e:02:2e:2c:68:da:1b:fa:
3b:de:af:13:4f:ed:d9:62:e6:a2:43:26:67:a8:63:
37:c3:ff:20:d6:9b:01:3b:65:97:50:e0:98:78:0d:
b8:94:15:43:55:36:fb:cb:29:03:3f:a6:ab:1e:ea:
94:02:d4:34:c3:1c:60:5f:97:60:76:a1:f8:a7:7e:
25:4d:0a:71:75:e3:35:d3:59:16:63:62:6e:a7:d7:
fd:aa:6a:bb:a2:a5:8c:fb:3d:73:8c:47:dd:3d:2e:
25:1f:79:7e:81:d2:48:0b:64:e7:af:0a:58:a9:1d:
9a:9b:c7:a5:4a:9f:3e:94:9b:79:bf:7e:6b:6b:23:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:38:45:77:51:AC:E6:3C:96:61:87:34:B3:8E:B5:07:63:2B:F0:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yzhFd1Gs5jyWYYc0s461B2Mr8GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:72:6b:63:89:73:5d:2b:70:62:13:05:7d:e4:44:16:80:44:
d2:ab:60:35:24:69:fe:0c:0e:f7:5f:17:f9:69:43:95:13:a4:
5e:f5:ef:ae:d6:84:45:c3:09:a1:b1:cb:69:a2:46:00:c3:59:
30:17:13:64:15:02:11:b9:fe:28:26:16:ec:44:1a:a6:98:71:
4b:94:0e:75:6e:b0:13:61:15:2f:bb:88:0a:1e:cd:85:4a:e6:
d9:1c:e0:9c:48:f9:8e:73:d0:5d:ac:fa:3a:18:e5:7e:66:1d:
d7:64:ff:3f:d0:48:06:19:6a:9f:da:3a:e1:2c:d6:49:39:e9:
b0:2b:77:fa:47:1e:02:bb:8b:f9:97:f8:70:94:74:36:dd:76:
86:d5:8e:35:48:ad:72:cc:d1:c9:44:6b:b9:c1:21:0b:c5:9b:
f0:35:d5:de:9c:c7:18:33:45:3f:28:ff:1b:e4:56:db:bd:65:
71:d7:e9:bd:58:77:7f:1a:5e:a6:92:af:69:93:40:88:50:7c:
99:51:79:6d:cd:0c:51:ac:96:82:8d:10:2a:8f:52:4e:6d:dd:
94:d1:5a:b4:4f:8b:70:e2:e1:5a:e3:0b:2d:96:1b:a3:09:d4:
69:ab:3c:2e:10:b3:59:67:7b:ed:fe:34:15:8e:74:8c:02:69:
f7:18:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:39:13 2025 by rpki-client