Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LSPUqORYkjKan-ypSFKkl9yzqcE.roa
File: LSPUqORYkjKan-ypSFKkl9yzqcE.roa (raw, json)
Hash identifier: EU9NBuJi9cbp4sfGLdfeHCKyPo7dq92BGCXIOP/T0Wk=
Subject key identifier: 2D:23:D4:A8:E4:58:92:32:9A:9F:EC:A9:48:52:A4:97:DC:B3:A9:C1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019768BBDBA9680E8E97C587A0E49F92D72D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LSPUqORYkjKan-ypSFKkl9yzqcE.roa
Signing time: Fri 13 Jun 2025 10:00:31 +0000
ROA not before: Fri 13 Jun 2025 10:00:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.41.0/24 maxlen: 24
151.242.58.0/24 maxlen: 24
151.242.200.0/24 maxlen: 24
151.242.201.0/24 maxlen: 24
151.243.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:db:a9:68:0e:8e:97:c5:87:a0:e4:9f:92:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 13 10:00:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d23d4a8e45892329a9feca94852a497dcb3a9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:c8:4c:42:25:ce:46:c4:ea:e5:5b:00:25:
91:95:62:62:6d:1d:c2:ad:ee:50:5d:be:fd:1d:93:
c5:a0:3c:00:70:01:53:a9:5b:6a:9f:d6:49:61:2f:
56:0b:fc:98:5d:16:a7:19:8b:3d:d6:aa:fa:c2:40:
aa:fb:cf:f1:3f:da:96:d9:d9:bf:1f:c2:75:b1:b0:
a9:e9:04:48:94:39:fe:92:e2:10:80:eb:59:c4:7e:
d6:a1:06:25:ba:37:b9:9c:5e:04:0d:54:04:5f:1c:
62:76:bb:23:6d:92:07:fc:41:fe:07:86:74:be:25:
b3:da:8f:b7:19:15:e7:91:2d:4e:ca:d0:26:91:7b:
1d:a6:98:6a:c2:a7:0f:31:a0:9a:e0:08:ab:80:04:
d8:59:9e:17:46:27:01:0f:26:62:81:d9:da:38:37:
a6:03:d8:29:0d:21:6f:d3:7c:72:8b:91:d7:69:97:
6f:9f:41:cd:7d:b3:4f:e8:db:e5:89:d7:c8:46:01:
05:03:bd:12:06:a0:58:7f:59:f2:2f:f9:6e:1c:fe:
08:76:38:b4:4c:7a:85:a5:21:dd:0f:8e:67:3a:99:
df:cc:d7:28:b6:44:ad:4e:76:25:71:ea:1d:0f:5d:
f2:e3:91:84:03:c3:56:6a:88:c5:6b:e1:d6:27:cb:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:D4:A8:E4:58:92:32:9A:9F:EC:A9:48:52:A4:97:DC:B3:A9:C1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LSPUqORYkjKan-ypSFKkl9yzqcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.242.58.0/24
151.242.200.0/23
151.243.18.0/23
Signature Algorithm: sha256WithRSAEncryption
65:5c:c8:77:8d:ab:af:00:aa:3c:6b:ff:d6:d9:49:9a:43:c1:
eb:1f:65:f9:a0:0d:fa:88:65:90:2e:9f:c1:80:b3:91:7e:19:
fd:8b:df:b5:ac:fd:bd:20:36:7f:53:33:a6:70:2f:6b:ee:7a:
c1:c0:cc:70:3b:f9:e0:c1:0e:0e:14:1a:40:2b:fd:ff:bd:7a:
4e:bf:ca:1d:16:49:27:6e:cb:49:e4:4e:1a:dc:62:38:f8:81:
0f:96:c3:e8:fc:9e:cf:e3:72:05:a3:8d:e6:85:c2:81:8b:3a:
24:36:94:2a:bb:0f:31:c5:c6:4e:fd:ec:cc:42:8f:5f:77:7f:
a7:4c:c5:59:0b:6f:a2:4d:e8:f5:3e:a9:08:d6:05:09:25:ff:
3b:a4:6c:a6:d7:a3:da:43:73:ec:b9:f1:d4:86:ff:bc:c9:47:
e2:c7:aa:70:e0:2c:e2:93:91:43:ec:20:10:10:71:61:02:ac:
01:b4:d4:0f:7a:55:4e:1c:cb:4d:b6:da:a8:4f:76:cc:89:74:
cb:85:aa:2f:55:cd:82:3a:7e:ef:77:09:cd:75:d3:ed:86:98:
95:33:4f:fd:67:05:47:da:78:ce:3c:a1:f9:0a:2f:d7:1e:51:
02:8a:d9:07:cd:53:36:fb:b2:8f:a9:06:45:f7:60:7a:67:d1:
5e:fa:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:28:17 2025 by rpki-client