Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AsYtxB0F5BFCv5QkIhgsq_g_8BA.roa
File: AsYtxB0F5BFCv5QkIhgsq_g_8BA.roa (raw, json)
Hash identifier: DKMdnjbT7yRmeXxl9sBeWLQhZQFKztFNr3uwJY4PFck=
Subject key identifier: 02:C6:2D:C4:1D:05:E4:11:42:BF:94:24:22:18:2C:AB:F8:3F:F0:10
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196EC237EFD2A71FAE6A88A0B62AD2D5D10
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AsYtxB0F5BFCv5QkIhgsq_g_8BA.roa
Signing time: Tue 20 May 2025 05:21:11 +0000
ROA not before: Tue 20 May 2025 05:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 151.240.4.0/22 maxlen: 22
151.240.20.0/22 maxlen: 22
151.240.68.0/22 maxlen: 22
151.240.84.0/22 maxlen: 22
151.240.96.0/22 maxlen: 22
151.244.79.0/24 maxlen: 24
151.245.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:23:7e:fd:2a:71:fa:e6:a8:8a:0b:62:ad:2d:5d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 05:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c62dc41d05e41142bf942422182cabf83ff010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:7f:4a:f3:8d:d1:78:53:4a:97:03:d4:19:
43:df:67:56:89:74:0d:dc:b9:38:4a:21:65:9c:fe:
be:78:83:d9:5f:5d:eb:c2:a5:d9:9e:fb:51:9b:f9:
97:7d:31:45:f1:7a:1e:7c:72:a9:0b:00:27:54:74:
2a:56:72:a4:1e:f5:29:cf:e8:9d:87:6b:b8:0b:70:
5b:fd:3d:92:72:84:30:e3:42:77:40:25:b0:1a:3c:
9f:9b:5c:a5:eb:32:4f:23:8f:7b:43:6b:1d:93:65:
19:54:03:e8:b4:d9:d2:cc:d4:05:22:35:32:f2:a0:
92:e4:0b:57:c9:e3:28:c4:55:8c:37:01:85:5a:ab:
6f:84:40:90:fb:5d:77:05:9c:bb:cb:b4:c5:2f:48:
ee:d8:d9:6d:8b:eb:e8:45:08:5a:29:d2:fa:dc:93:
e2:22:bb:73:94:13:e7:b1:ad:90:2f:ce:0f:9c:a3:
59:b3:28:4e:1b:ad:3f:14:e3:aa:40:6f:90:68:f4:
26:86:f0:35:a8:3e:56:3f:5b:d6:03:13:ef:d7:bb:
70:24:85:a6:66:52:06:b7:d8:7f:4a:87:14:fb:42:
7d:9d:49:98:7d:f8:a3:9a:68:1d:e5:e2:72:bb:26:
af:10:05:55:0e:42:2d:c5:5d:3b:46:8d:d8:c7:9d:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:2D:C4:1D:05:E4:11:42:BF:94:24:22:18:2C:AB:F8:3F:F0:10
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AsYtxB0F5BFCv5QkIhgsq_g_8BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.4.0/22
151.240.20.0/22
151.240.68.0/22
151.240.84.0/22
151.240.96.0/22
151.244.79.0/24
151.245.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d5:b1:e6:be:e7:c2:ee:f6:e1:bd:b0:3e:6e:9f:d3:42:67:
f3:36:41:6f:b1:f9:84:68:eb:8c:42:7e:1c:3d:c8:b3:dc:96:
50:d8:ac:90:19:a7:26:d1:47:b3:d3:0e:9e:ad:ac:7d:8c:ae:
a3:68:23:7f:d0:55:15:c5:0d:3b:35:e6:10:96:51:67:f7:0c:
94:49:1b:a7:37:d5:1d:85:ed:56:d8:f5:d7:4b:52:fe:08:a8:
00:bf:bb:d7:a4:89:3f:f6:43:08:ae:ae:7a:85:05:5d:95:64:
3c:a6:ab:6d:a8:dc:69:8f:7b:a7:95:88:e5:95:53:68:92:51:
61:6e:69:fe:fd:ac:74:cc:5e:79:ff:ad:35:b3:89:5e:bf:1a:
5b:8b:46:23:25:f0:e1:99:d8:31:69:d5:ea:56:f9:e0:bc:cc:
56:66:6f:bb:43:51:86:19:95:4f:3d:92:60:4e:06:56:f1:e3:
a2:1b:60:8d:72:2b:3c:fb:ed:dc:38:b8:18:cb:15:c5:af:e3:
3e:1c:aa:0f:ad:43:90:5f:5c:5a:7f:3a:25:81:62:9d:a1:24:
35:0c:c6:9b:55:1f:d8:e1:13:4e:52:e6:ef:d2:09:eb:a7:d2:
99:87:bc:ab:96:62:62:4a:5a:ab:77:41:3b:f2:6d:7e:45:cc:
1e:8f:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:00 2025 by rpki-client