Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J_7nGFbinmZ_c5kQee9WMax7IRM.roa
File: J_7nGFbinmZ_c5kQee9WMax7IRM.roa (raw, json)
Hash identifier: eXO5UkPFkmA4UUkGqrJK0M/c/I0cUN9lh0f5hWs86L4=
Subject key identifier: 27:FE:E7:18:56:E2:9E:66:7F:73:99:10:79:EF:56:31:AC:7B:21:13
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196721DB1F67F2DC7597F03CCF5245DDF4D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J_7nGFbinmZ_c5kQee9WMax7IRM.roa
Signing time: Sat 26 Apr 2025 12:41:10 +0000
ROA not before: Sat 26 Apr 2025 12:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.242.40.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.52.0/24 maxlen: 24
151.243.53.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.62.0/24 maxlen: 24
151.243.63.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:1d:b1:f6:7f:2d:c7:59:7f:03:cc:f5:24:5d:df:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 26 12:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27fee71856e29e667f73991079ef5631ac7b2113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:f7:a6:1a:44:dd:a3:aa:4e:1a:77:06:34:
5f:82:a0:24:37:97:7d:bb:3c:0c:c3:f9:9e:5d:06:
87:57:d6:12:61:24:c3:2b:38:3a:ff:db:6b:11:05:
f9:cc:dc:16:3a:8f:93:62:56:d0:db:f8:dc:8b:de:
18:8c:a3:23:98:14:83:ab:8b:7f:73:68:8a:f4:15:
45:05:f1:3c:be:0e:c9:8d:f5:60:02:36:ab:0d:a1:
05:c3:2b:f5:09:7c:6d:87:ef:75:30:d5:2d:00:f5:
dc:57:1a:00:1c:e8:f4:b5:27:61:3a:8f:c9:c4:31:
07:45:5d:18:0b:0b:81:5c:a4:10:6f:bc:ee:74:8f:
54:9a:34:9b:ee:00:7f:79:c3:70:07:62:e1:ac:42:
6c:93:f1:a2:35:e3:27:32:a5:09:8a:7b:57:cb:e9:
c4:74:18:38:34:5c:b8:6e:45:f4:df:f1:39:63:26:
44:16:d1:ea:18:4a:22:ca:61:ca:88:14:a5:89:11:
fb:de:b4:a7:b1:f8:2f:ed:71:cc:34:38:25:26:97:
c6:60:8e:1e:a7:0a:31:e8:30:ca:4b:f6:1a:fc:25:
ad:c4:2e:9b:c3:72:a1:32:51:8c:57:a7:27:91:88:
87:c4:b3:20:44:f8:8e:44:6b:d0:0d:ee:1f:58:65:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FE:E7:18:56:E2:9E:66:7F:73:99:10:79:EF:56:31:AC:7B:21:13
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J_7nGFbinmZ_c5kQee9WMax7IRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.40.0/24
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.4.0/23
151.243.35.0/24
151.243.38.0/24
151.243.41.0/24
151.243.52.0/23
151.243.60.0/22
151.243.88.0/23
151.243.115.0/24
151.243.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bb:e7:a4:f2:50:21:68:77:ae:3b:44:eb:1a:72:38:12:34:
c0:3e:f7:a6:d5:ee:66:56:0c:25:b7:82:23:37:1e:fe:f2:9b:
71:e5:90:ee:39:56:bb:8f:72:f3:6f:c9:a1:fb:73:19:d8:43:
89:2d:0a:8e:7c:3c:6e:82:9a:62:19:93:64:c6:d5:bc:b7:1d:
43:13:1c:ba:d7:70:b1:20:39:4c:f6:d6:c6:f3:33:d4:32:59:
89:95:db:56:b8:49:73:5a:ea:9b:1a:57:4c:6a:93:21:10:61:
6d:99:4a:21:0d:c8:75:36:63:19:75:ef:b7:16:35:20:45:56:
91:aa:07:82:06:46:30:c6:d3:0a:0e:a2:8c:5e:fc:94:b4:28:
33:b9:5e:e3:64:b4:bb:80:8a:db:3c:0f:8f:b8:37:da:c2:71:
3e:d7:d5:77:45:5f:2c:25:ef:76:c4:4c:fe:0b:bc:49:89:0b:
8a:21:a9:10:21:13:3d:e0:6a:75:50:e1:a6:ce:8f:fd:30:31:
e0:e9:10:d9:9a:dd:7a:b8:8c:cf:62:a0:02:de:b6:c2:90:10:
ba:14:58:db:0d:70:d4:aa:fb:f2:1e:5e:52:87:35:a7:2b:64:
b1:13:72:38:07:27:28:70:40:fb:de:33:08:bb:a9:84:c8:94:
d0:0b:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:27 2025 by rpki-client