Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UsyoPGYzqBsJiCNhn8OvQSRFyl8.roa
File: UsyoPGYzqBsJiCNhn8OvQSRFyl8.roa (raw, json)
Hash identifier: yMUh1/LxPDwp0eM8qOXBbo+fI6Uk7dUUINCdgv0VKNw=
Subject key identifier: 52:CC:A8:3C:66:33:A8:1B:09:88:23:61:9F:C3:AF:41:24:45:CA:5F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019648A71441A77B107491D1634A33D33561
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UsyoPGYzqBsJiCNhn8OvQSRFyl8.roa
Signing time: Fri 18 Apr 2025 11:27:11 +0000
ROA not before: Fri 18 Apr 2025 11:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:a7:14:41:a7:7b:10:74:91:d1:63:4a:33:d3:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 18 11:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52cca83c6633a81b098823619fc3af412445ca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:6c:01:35:40:ae:5a:8b:1f:e7:64:6f:de:
ee:8f:09:7a:8d:3a:7b:c2:6e:dc:f6:61:75:39:f0:
12:21:2b:31:d4:9f:05:b9:2f:38:d5:e7:e2:97:63:
f2:07:c9:20:21:85:34:68:50:d4:00:a1:48:b6:b5:
77:f7:cf:07:22:ff:18:88:ae:75:74:4c:b8:d1:7a:
86:7f:40:9e:b5:30:a6:c2:22:16:cf:d4:61:79:e4:
f9:c2:f8:29:90:f9:08:89:d1:b1:41:4b:37:78:70:
0a:2c:59:5c:7b:35:a9:24:82:59:b2:dd:12:cc:6a:
a5:65:56:bf:18:7e:7b:a8:7c:92:a8:42:4c:ea:ea:
44:c9:1a:35:a1:d3:e7:8a:37:a4:dc:ff:16:44:61:
7f:17:56:83:d0:2b:f8:78:c3:71:50:cd:41:24:13:
f5:c4:bb:84:85:d2:d5:51:98:eb:ca:52:4a:06:b0:
a8:af:d9:f9:02:76:e3:a3:62:fe:a6:a1:ca:9f:59:
cb:4e:ba:88:c0:5f:45:d3:a5:5f:f4:d9:37:54:e5:
3a:86:af:e8:66:c8:e2:8f:86:5c:c5:c2:0e:08:17:
c9:c4:04:7c:e8:0f:16:3c:a0:ac:ec:e6:9c:87:11:
71:7b:29:0f:69:f6:8b:0e:d6:f5:60:bf:84:9a:f3:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:A8:3C:66:33:A8:1B:09:88:23:61:9F:C3:AF:41:24:45:CA:5F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UsyoPGYzqBsJiCNhn8OvQSRFyl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.132.0/22
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:41:8d:f9:74:78:a9:c6:4a:2f:64:a8:31:d1:e1:a8:16:b2:
7b:bd:ef:53:d8:d7:96:31:91:a4:34:ff:82:f1:39:00:c2:02:
11:27:7c:0c:35:06:6b:e2:f9:32:58:06:20:23:48:2c:bd:99:
8e:42:0b:89:23:7d:35:d6:4b:eb:cf:2f:6f:74:18:2b:46:5b:
64:f7:41:c8:e1:d5:b0:f4:b8:dd:55:92:af:62:d5:61:17:a1:
9f:12:86:3c:de:40:f1:84:32:e7:66:e7:d4:bd:37:f0:d4:de:
4f:c8:9f:35:e0:e9:5c:6b:78:11:a8:fa:36:c5:3b:51:33:72:
46:e1:f1:02:14:f5:ba:82:af:00:59:4c:bd:60:89:b8:a6:11:
03:f8:54:11:ad:51:e1:ec:e6:48:a7:54:14:31:35:65:80:d9:
7b:81:c9:6f:4e:82:37:8a:76:00:a1:9c:d6:68:74:fb:ad:6c:
7f:4a:51:ea:d3:ca:b3:a1:d2:7a:18:26:76:b8:6f:a2:30:fd:
fc:29:96:0f:c5:01:f6:25:3b:6b:03:6a:15:03:ec:45:67:de:
5c:2b:13:4a:32:6d:75:0a:6a:43:7b:0b:98:70:be:48:87:90:
f5:52:7c:bb:b8:c5:e0:59:fd:cf:c7:1d:d4:9a:52:71:ea:13:
6f:cf:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:02 2025 by rpki-client