Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5mq8mpFev2ScUZ1FgzrOfd-Uw7g.roa
File: 5mq8mpFev2ScUZ1FgzrOfd-Uw7g.roa (raw, json)
Hash identifier: DiI5rSwntrw67KxZQNMb5NzkNQE7sIGdPEGBAUo3pkU=
Subject key identifier: E6:6A:BC:9A:91:5E:BF:64:9C:51:9D:45:83:3A:CE:7D:DF:94:C3:B8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196D993E59B1677ED7CA5A5FDF129CE882E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5mq8mpFev2ScUZ1FgzrOfd-Uw7g.roa
Signing time: Fri 16 May 2025 14:51:10 +0000
ROA not before: Fri 16 May 2025 14:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214965
IP address blocks: 151.242.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:93:e5:9b:16:77:ed:7c:a5:a5:fd:f1:29:ce:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 16 14:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e66abc9a915ebf649c519d45833ace7ddf94c3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:7f:84:85:4d:00:c8:19:fe:43:9c:d9:1c:
b9:fb:9d:2e:d6:05:a4:26:ae:49:e4:61:06:01:ec:
78:c8:d4:0b:73:db:20:03:a9:94:a0:d5:e4:cc:30:
ca:f6:60:d5:8c:16:71:c6:07:6e:a1:9c:7f:29:0e:
1d:90:2f:bb:81:28:8a:30:f0:37:9b:5d:16:3e:63:
ae:73:ee:f7:d9:46:50:3f:d1:65:72:3c:54:d3:1b:
c1:78:a7:ac:0c:ec:2b:da:5d:1a:4b:15:2d:e8:c9:
c4:3d:a4:9f:d8:42:8c:23:d2:73:ce:ea:b1:9b:8e:
fe:47:f0:5e:56:65:24:78:55:ad:57:b7:ab:a4:db:
a6:6e:9c:57:94:04:7e:ac:8c:4f:4d:d6:6d:b8:85:
02:bd:12:61:03:69:0c:53:4c:26:25:75:48:50:a4:
41:20:ac:d0:55:31:f1:57:c6:9e:e4:ed:18:30:da:
b9:18:d8:85:90:f9:8d:84:ff:95:8a:12:a3:fb:5c:
9b:0f:55:f0:d5:34:b7:54:32:e2:ac:25:59:9c:5f:
ce:b9:42:3d:5d:cf:f6:6b:8d:02:7d:44:e9:a7:70:
80:13:08:f3:b7:35:94:be:df:3f:0a:89:2b:19:9b:
e5:e6:30:4c:a1:5f:39:87:61:4e:22:c5:67:84:62:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6A:BC:9A:91:5E:BF:64:9C:51:9D:45:83:3A:CE:7D:DF:94:C3:B8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5mq8mpFev2ScUZ1FgzrOfd-Uw7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.51.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ea:1f:2f:5e:af:d9:f6:26:0c:7c:2f:7f:e9:10:1e:ba:87:
13:e4:86:66:1f:da:e1:e5:d9:7b:ba:53:94:c7:81:95:cc:7a:
77:62:26:08:3a:e9:24:56:fe:09:b8:cc:10:76:e6:c0:7f:85:
6b:45:d7:18:6c:59:c7:ba:f1:fd:0c:48:d2:8c:ad:9d:23:da:
15:8b:74:2f:06:08:d8:84:e5:e6:0c:de:99:19:00:64:ff:04:
3d:d4:97:92:3f:73:60:c8:2e:42:cc:c9:df:fe:38:52:90:10:
b1:f9:85:46:11:cb:02:ff:08:7d:d8:69:55:ff:a0:c4:8b:d5:
9f:7f:65:01:92:bd:3e:36:55:2e:8b:cb:40:b5:8c:12:3e:73:
ba:65:d8:c1:79:96:47:51:fa:f4:4b:c8:c6:9a:f6:38:f1:20:
e0:53:55:d8:f5:75:47:f9:13:df:8b:df:d7:42:e4:3b:28:ae:
bc:63:d8:17:4b:e7:53:92:3a:7d:8f:52:f4:af:2d:78:84:fc:
a8:98:8b:21:c9:c4:e5:be:5d:89:9d:03:2a:74:32:7e:24:d2:
92:5f:9e:34:de:e3:26:c4:e5:c3:3e:c8:8b:82:39:cc:e9:24:
42:a1:b3:86:a1:e5:cf:f5:19:27:c3:39:f7:09:e2:e4:61:ad:
ea:ec:1c:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbZk+WbFnftfKWl/fEpzoguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTE2MTQ1MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjZhYmM5YTkxNWViZjY0OWM1MTlkNDU4MzNhY2U3ZGRmOTRjM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruh/hIVNAMgZ/kOc2Ry5+50u1gWk
Jq5J5GEGAex4yNQLc9sgA6mUoNXkzDDK9mDVjBZxxgduoZx/KQ4dkC+7gSiKMPA3
m10WPmOuc+732UZQP9FlcjxU0xvBeKesDOwr2l0aSxUt6MnEPaSf2EKMI9Jzzuqx
m47+R/BeVmUkeFWtV7erpNumbpxXlAR+rIxPTdZtuIUCvRJhA2kMU0wmJXVIUKRB
IKzQVTHxV8ae5O0YMNq5GNiFkPmNhP+VihKj+1ybD1Xw1TS3VDLirCVZnF/OuUI9
Xc/2a40CfUTpp3CAEwjztzWUvt8/CokrGZvl5jBMoV85h2FOIsVnhGJExQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZqvJqRXr9knFGdRYM6zn3flMO4MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNW1xOG1wRmV2MlNjVVoxRmd6ck9mZC1VdzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IzMA0G
CSqGSIb3DQEBCwUAA4IBAQBi6h8vXq/Z9iYMfC9/6RAeuocT5IZmH9rh5dl7ulOU
x4GVzHp3YiYIOukkVv4JuMwQdubAf4VrRdcYbFnHuvH9DEjSjK2dI9oVi3QvBgjY
hOXmDN6ZGQBk/wQ91JeSP3NgyC5CzMnf/jhSkBCx+YVGEcsC/wh92GlV/6DEi9Wf
f2UBkr0+NlUui8tAtYwSPnO6ZdjBeZZHUfr0S8jGmvY48SDgU1XY9XVH+RPfi9/X
QuQ7KK68Y9gXS+dTkjp9j1L0ry14hPyomIshycTlvl2JnQMqdDJ+JNKSX5403uMm
xOXDPsiLgjnM6SRCobOGoeXP9Rknwzn3CeLkYa3q7Bzm
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:33:35 2025 by rpki-client