Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EMUvPLAmHvV4f4SjsllHhTaNmS8.roa
File: EMUvPLAmHvV4f4SjsllHhTaNmS8.roa (raw, json)
Hash identifier: /oF5psTERXvO1zjO9/vPl2R8QUNQUt5c2Xf0IyuWwV4=
Subject key identifier: 10:C5:2F:3C:B0:26:1E:F5:78:7F:84:A3:B2:59:47:85:36:8D:99:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196623BD5A1F2C9780E6BC51CE9E218D81C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EMUvPLAmHvV4f4SjsllHhTaNmS8.roa
Signing time: Wed 23 Apr 2025 10:40:10 +0000
ROA not before: Wed 23 Apr 2025 10:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.240.0.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.243.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:3b:d5:a1:f2:c9:78:0e:6b:c5:1c:e9:e2:18:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 23 10:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10c52f3cb0261ef5787f84a3b2594785368d992f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:b7:89:93:c9:c7:81:f1:58:2b:df:51:15:
10:77:dc:e6:7f:01:3a:d7:7e:b6:22:29:23:f4:12:
d6:d4:78:81:e6:04:54:69:79:d1:fa:c3:b7:23:e4:
3c:5f:a1:9f:20:2b:66:45:a9:ff:95:64:43:f1:e9:
64:68:f5:08:69:ef:1a:12:58:93:a7:30:25:ea:af:
f4:8e:ee:0e:14:2b:12:4d:fe:15:4e:63:b1:da:ce:
ee:af:24:e2:19:63:c3:95:fa:55:46:9f:a9:cd:3e:
c1:88:a1:78:01:c2:a8:ff:a8:1b:a2:b9:38:2b:83:
bf:84:b1:df:65:71:fc:f1:75:c0:c5:80:cc:3e:37:
65:7e:0e:bb:36:3b:7f:1a:8e:e4:f5:bb:f6:09:79:
c0:2f:fc:0b:a1:a3:40:ea:c5:62:e1:06:6e:b9:82:
cd:58:73:f2:a0:9f:6a:09:5f:64:0c:cf:68:62:48:
7b:49:0d:62:b8:dc:b8:fc:e9:73:be:e9:a8:b5:db:
d8:be:24:b4:cd:30:42:8b:85:16:b4:4d:5c:95:7e:
71:24:3a:04:7c:22:28:2d:0b:2f:0e:05:2e:33:94:
c9:ab:cd:d6:25:c5:19:55:9d:58:1e:c7:73:aa:92:
79:82:54:2c:59:48:2f:20:f6:43:90:e0:4d:38:bb:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:2F:3C:B0:26:1E:F5:78:7F:84:A3:B2:59:47:85:36:8D:99:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EMUvPLAmHvV4f4SjsllHhTaNmS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.240.0.0/24
151.240.8.0/24
151.240.77.0/24
151.241.18.0/24
151.243.206.0/23
Signature Algorithm: sha256WithRSAEncryption
34:2f:11:82:22:73:34:29:19:a8:c0:3b:f4:51:fa:26:7e:84:
9c:13:1c:11:d4:b4:6e:8b:c7:4b:17:b1:95:23:52:42:7d:5c:
e8:15:cb:c2:e2:dd:db:79:a3:52:66:80:ba:6c:07:10:56:f3:
8e:ea:a1:37:fc:34:d9:6c:ca:40:ce:6f:35:da:e4:fa:1b:8b:
ff:ff:ae:4e:5e:67:75:72:4d:d3:27:ea:e8:50:37:d2:83:0d:
aa:e1:85:f2:ce:4e:f1:16:f2:90:94:46:6b:be:76:1b:78:cf:
be:e0:32:fe:08:de:28:5e:37:41:43:cc:ce:99:1b:0d:c6:9f:
38:ae:5c:12:88:1b:85:9a:53:b4:49:dc:ca:d6:7c:be:c3:ee:
90:d8:2d:e4:f0:96:88:26:4f:01:66:e1:43:ed:99:bb:2f:51:
a0:b1:9b:bc:3f:36:b8:2b:10:9e:ec:18:c5:56:83:41:a3:fd:
58:15:b2:23:8a:73:79:fd:67:d1:9e:b7:45:a0:54:55:e6:a4:
5d:46:1f:23:75:6d:b1:a0:b7:43:b7:5f:d4:5f:67:66:48:b2:
69:d3:70:a7:0b:46:eb:b5:6b:ec:d8:66:f5:0d:00:0b:eb:6e:
58:7d:70:a2:f9:fc:de:93:fb:8d:d0:22:45:92:11:43:e1:e9:
4e:84:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:23:55 2025 by rpki-client