Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4zozIZO0k6kpFnoWjw_yzIWvuMY.roa
File: 4zozIZO0k6kpFnoWjw_yzIWvuMY.roa (raw, json)
Hash identifier: H/Tdgbd8yvpzcaA3HQwfHrkF6G3Oom9pFq3SNLK9FYE=
Subject key identifier: E3:3A:33:21:93:B4:93:A9:29:16:7A:16:8F:0F:F2:CC:85:AF:B8:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01984077BB432BC7861A60A2045C79D0CB83
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4zozIZO0k6kpFnoWjw_yzIWvuMY.roa
Signing time: Fri 25 Jul 2025 07:24:05 +0000
ROA not before: Fri 25 Jul 2025 07:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 151.242.21.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.244.184.0/24 maxlen: 24
151.244.185.0/24 maxlen: 24
151.245.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:77:bb:43:2b:c7:86:1a:60:a2:04:5c:79:d0:cb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 25 07:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e33a332193b493a929167a168f0ff2cc85afb8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:9f:ff:44:1b:fe:ce:34:f6:83:46:4e:8d:
18:8a:0b:d5:9d:c4:1d:56:02:bb:16:15:76:35:dc:
c2:2d:b6:fa:c5:9d:db:ed:3d:93:20:d1:8e:af:cd:
5d:30:31:cf:8d:32:de:68:82:a2:08:7b:05:8b:6a:
0b:a1:ef:7f:42:2b:af:2c:d4:2b:bc:fd:08:84:94:
ab:34:83:50:df:83:e8:7b:34:77:55:ee:fa:5c:38:
64:f3:65:8f:dd:9f:ad:07:a0:c4:b4:80:30:28:51:
87:00:0e:17:75:3f:12:4e:ee:ad:86:fd:f3:b1:50:
c8:8b:8a:64:8c:46:14:35:a7:2b:ac:07:10:a6:3d:
54:1d:a9:47:85:7c:ea:e6:95:fa:35:9d:25:f7:87:
5e:4e:2b:3d:97:6b:5c:f0:4c:57:d2:14:4f:de:18:
f0:7d:8f:10:40:df:8f:3b:36:81:c6:71:2a:39:84:
9e:db:07:ed:19:9e:d1:23:30:c7:df:10:15:92:16:
7a:90:27:e3:40:cd:af:dc:ef:6f:27:48:12:8b:08:
ce:28:0b:b6:32:f4:8e:dd:2c:20:d1:2d:45:4c:58:
c0:16:87:a9:18:ea:89:25:83:cc:c1:11:30:48:df:
1a:3f:ea:d5:8a:0f:c4:e6:2e:e3:be:db:2b:de:13:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:33:21:93:B4:93:A9:29:16:7A:16:8F:0F:F2:CC:85:AF:B8:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4zozIZO0k6kpFnoWjw_yzIWvuMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.21.0/24
151.243.248.0/24
151.243.251.0/24
151.244.184.0/23
151.245.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:99:2b:54:c3:c6:52:27:0c:9c:62:42:53:5b:7b:37:71:a7:
7b:96:73:c7:61:f0:66:77:24:8f:2d:2a:22:b9:0c:b3:92:eb:
60:a5:5f:22:fd:3f:f3:1a:40:8d:0c:74:13:75:74:b6:e1:8b:
72:05:31:e1:29:25:cb:a1:0a:7f:fc:ea:13:a7:32:27:80:35:
20:2b:d6:5d:89:ad:db:72:af:ab:8a:4d:55:f3:1f:cf:da:95:
21:a1:79:ae:89:e4:ed:51:ad:8d:49:a2:c8:3e:12:30:86:6b:
e1:47:02:22:f2:f5:73:08:33:64:a9:67:d0:11:64:3d:a8:b9:
9f:12:af:bf:61:f6:18:e9:78:66:ee:7a:cf:80:00:b2:3d:2e:
63:1a:84:05:be:c4:57:d1:5a:51:44:99:a0:1e:f5:2d:53:9a:
6c:5d:c3:40:7f:4c:fd:94:7c:53:d1:48:76:f3:94:87:f5:06:
ee:c2:58:a5:a2:84:fe:7a:50:df:e8:19:b8:43:57:1d:bb:dc:
cc:97:60:a2:fa:14:77:21:99:d0:98:62:37:05:e9:4b:6e:52:
e3:c3:e6:26:b2:d2:a9:6b:a0:f8:0e:49:27:ac:1f:33:55:1d:
14:33:03:a4:25:15:d5:6a:7f:bf:f1:bc:25:f0:13:14:e1:94:
55:a3:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:34 2025 by rpki-client