Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Hx8VLFgO9D1B2P8LW9ZoFYKN-Mg.roa
File: Hx8VLFgO9D1B2P8LW9ZoFYKN-Mg.roa (raw, json)
Hash identifier: LQHwr1qa3zDo4ZhmzoYXNfi2PfquMXUhOffJHPCuOpQ=
Subject key identifier: 1F:1F:15:2C:58:0E:F4:3D:41:D8:FF:0B:5B:D6:68:15:82:8D:F8:C8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019648B03AA1D61F91D61EDB0B82A1DF0082
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Hx8VLFgO9D1B2P8LW9ZoFYKN-Mg.roa
Signing time: Fri 18 Apr 2025 11:37:10 +0000
ROA not before: Fri 18 Apr 2025 11:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.72.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:b0:3a:a1:d6:1f:91:d6:1e:db:0b:82:a1:df:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 18 11:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f1f152c580ef43d41d8ff0b5bd66815828df8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:7a:a0:a8:8e:08:41:ec:ee:13:59:9b:b3:
0a:93:6a:e9:a6:35:76:f0:7c:9b:4d:4a:b7:14:36:
9a:e6:58:04:c5:80:b4:84:94:b0:cf:39:18:9e:24:
a8:7c:ce:11:98:69:3b:40:98:33:87:88:c3:d5:bb:
1f:ce:e9:cf:c8:92:52:a1:2f:13:4a:0c:13:97:62:
46:16:1b:c0:1b:f5:86:25:8f:2d:54:cf:8b:6b:aa:
b5:d7:ef:41:22:55:fe:a9:d4:e2:55:d6:a5:e9:19:
5e:01:a2:d7:8f:75:41:aa:fe:12:d8:5c:d9:69:b7:
d3:a3:a1:bc:c9:56:3b:5f:0a:e8:e0:c5:f6:93:dc:
91:82:cd:96:35:ce:22:0d:f7:05:1d:af:10:a1:20:
aa:33:55:b8:88:53:5b:dc:57:f7:3f:82:21:61:30:
e1:26:93:ec:6a:23:10:86:29:29:81:27:3b:e8:c9:
18:b5:4c:d7:60:69:19:08:b2:1e:b2:d4:5f:a5:e7:
3d:70:bb:7b:01:f6:94:f9:1c:b2:89:c7:ab:b8:ca:
6c:32:05:17:50:fe:f0:a6:b8:3e:f0:42:e7:2b:15:
b1:e8:64:fa:4e:e5:f4:79:ed:9b:91:4b:ee:fe:fb:
62:3e:87:b1:71:b0:94:82:b4:0f:be:db:ca:bc:91:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:15:2C:58:0E:F4:3D:41:D8:FF:0B:5B:D6:68:15:82:8D:F8:C8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Hx8VLFgO9D1B2P8LW9ZoFYKN-Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0-151.242.72.255
151.243.107.0-151.243.110.255
Signature Algorithm: sha256WithRSAEncryption
1f:d6:2c:a4:e5:9b:4b:00:da:5f:10:72:a7:b6:76:8c:ca:29:
0f:92:98:8a:06:ea:9c:f1:62:0e:40:18:a0:e7:9a:9b:bd:66:
a7:ac:ba:1e:9b:6f:a5:91:6e:84:6b:39:e4:35:d2:4a:7b:81:
15:2a:24:3d:01:27:ac:39:1f:dc:d1:8b:31:38:e2:c8:b5:9e:
5e:69:57:86:9d:f7:6c:cc:bc:62:3e:80:2a:c8:bd:9d:8c:37:
eb:67:92:6d:42:b5:6f:b4:08:57:a9:64:95:53:cb:8f:10:b0:
95:79:62:4b:45:55:a9:e6:0e:e2:65:75:e9:14:ef:47:92:51:
d8:0e:19:be:bb:aa:b2:b7:db:c7:84:dc:de:8d:b5:46:0b:8a:
97:0e:7d:31:8b:5a:ff:cd:bb:a3:67:6f:86:8f:1d:92:72:87:
24:9d:24:30:56:94:4d:3c:a5:a7:fd:5b:6f:43:74:17:67:3a:
b3:2b:75:57:40:5d:d2:e3:97:f8:20:a9:7a:b7:15:1b:c2:8a:
84:0c:41:2c:80:af:13:6b:11:8c:3f:03:00:22:3e:00:aa:cf:
b3:d9:53:7a:59:4b:b3:22:8b:86:2a:ad:65:9a:49:1b:29:f1:
02:83:af:2a:1f:a8:35:1b:2c:a1:c6:5f:14:e7:03:03:14:72:
96:55:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:34:46 2025 by rpki-client