Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5qFJXqcnxMkGU3bt1x9puvKsGpA.roa
File: 5qFJXqcnxMkGU3bt1x9puvKsGpA.roa (raw, json)
Hash identifier: 8WPvhaJHcTq15fyrz8bMEVILAtBNZxlnMMJGeN/fWlg=
Subject key identifier: E6:A1:49:5E:A7:27:C4:C9:06:53:76:ED:D7:1F:69:BA:F2:AC:1A:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197440C2CD0F9B103BA0DD0ACA6D8E103E0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5qFJXqcnxMkGU3bt1x9puvKsGpA.roa
Signing time: Fri 06 Jun 2025 07:02:17 +0000
ROA not before: Fri 06 Jun 2025 07:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0c:2c:d0:f9:b1:03:ba:0d:d0:ac:a6:d8:e1:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 6 07:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6a1495ea727c4c9065376edd71f69baf2ac1a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:67:73:4f:b4:71:7e:d9:a7:62:44:44:2d:
66:d9:44:5f:f5:18:b7:6b:91:67:dc:41:71:3a:32:
3e:e8:9d:7f:bc:44:d4:44:65:cb:4a:4a:a8:f7:3f:
17:44:7e:e9:6b:c8:62:73:88:18:41:3a:4a:bb:e2:
db:80:d3:71:eb:ae:07:5f:fd:c7:16:7b:cb:db:85:
90:ad:e2:b8:d9:6f:0c:e6:49:1f:8a:41:0d:d5:f7:
11:5c:5c:49:9c:f8:6f:07:f3:ee:f1:e3:da:b6:be:
19:19:5b:88:18:03:7c:ae:67:9e:20:88:3b:15:24:
bb:36:26:c6:4b:87:e8:73:46:4f:7e:6e:9f:c4:4a:
85:10:81:7b:3e:7b:3d:4f:bf:03:8a:9e:fd:58:0f:
c3:b7:dc:9a:64:45:70:d3:db:6d:ff:14:b2:78:94:
15:be:94:37:28:c6:85:0c:4e:80:1f:25:9e:ed:c8:
9a:c5:aa:b3:0f:b0:a3:f8:36:6a:ef:4d:41:eb:fa:
31:4a:27:35:e6:ab:0d:90:5f:8a:9d:79:92:71:bc:
9a:1e:5e:42:91:6c:a6:cd:d5:fa:9e:8b:e2:fb:8e:
9e:10:25:39:dc:68:6b:f1:ee:39:5b:5c:f1:a1:e4:
93:77:bf:ad:0e:a7:c5:3d:53:e6:1b:d8:7b:0e:a6:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A1:49:5E:A7:27:C4:C9:06:53:76:ED:D7:1F:69:BA:F2:AC:1A:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5qFJXqcnxMkGU3bt1x9puvKsGpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.40.0/24
151.242.64.0/24
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:ac:fc:0d:ee:f6:de:b3:97:35:42:93:ca:3a:a5:a3:68:71:
64:83:73:ec:21:04:24:cb:73:1c:de:85:d0:e7:5a:e0:de:ff:
89:de:59:78:70:81:0c:28:00:7b:97:11:a8:ff:0d:cb:e5:6c:
14:a9:97:28:4a:6e:ff:e2:00:b5:fd:46:4c:e6:23:e8:f8:08:
d8:a7:a5:01:e5:be:30:e6:c1:4a:78:58:0f:b8:1c:d2:56:5b:
a4:af:01:be:67:e0:5e:d3:e7:3d:86:bc:b0:73:86:2d:38:0e:
31:56:62:bf:90:fb:3a:7e:15:05:27:d3:0e:9d:c7:01:14:2e:
98:13:a2:68:35:7e:86:27:0a:26:b5:62:bb:90:63:03:21:8e:
7d:ae:46:48:6b:a4:d4:6f:aa:5d:78:26:37:40:96:77:7f:7d:
8d:d8:1d:3a:8c:ed:5d:66:9b:e9:39:e8:a1:b5:5e:03:af:08:
4d:75:6e:70:d5:a4:3b:4f:36:5a:de:32:80:b6:30:ec:93:53:
0d:20:64:c3:56:cf:03:8f:e3:58:9f:6c:f8:f3:46:41:5c:a2:
fa:eb:fb:5d:ed:1e:83:2d:bd:54:75:9a:b0:95:72:cd:b6:58:
2a:e8:1b:9b:00:ed:32:f5:0c:56:8d:50:e9:1a:47:24:c7:41:
fb:38:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:43:06 2025 by rpki-client