Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iAjE_IvdYcbBdpQqZnpS_SzA-0Y.roa
File: iAjE_IvdYcbBdpQqZnpS_SzA-0Y.roa (raw, json)
Hash identifier: xI1dhGSjClHAf2PTNkVKHNxdzqbcfoumzxWz9yRsN8Y=
Subject key identifier: 88:08:C4:FC:8B:DD:61:C6:C1:76:94:2A:66:7A:52:FD:2C:C0:FB:46
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01966B999A21CDDE30A109DB3A68C8315FFA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iAjE_IvdYcbBdpQqZnpS_SzA-0Y.roa
Signing time: Fri 25 Apr 2025 06:19:10 +0000
ROA not before: Fri 25 Apr 2025 06:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 151.242.160.0/22 maxlen: 24
151.242.176.0/22 maxlen: 24
151.243.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:99:9a:21:cd:de:30:a1:09:db:3a:68:c8:31:5f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 25 06:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8808c4fc8bdd61c6c176942a667a52fd2cc0fb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:ef:da:54:90:14:30:14:d8:b4:33:e2:9a:
91:99:1a:4e:40:6f:16:2f:49:23:70:c5:fd:3c:3c:
03:f6:44:6c:7e:66:db:83:b5:6a:5c:19:fd:62:69:
4f:19:1d:dc:f1:63:e1:d5:9b:5e:bd:b2:85:96:2d:
6e:cf:23:cc:5b:f0:a6:22:78:63:67:31:c3:c7:37:
48:7a:38:2d:b4:84:98:31:0c:bc:0e:1d:1b:f9:79:
df:40:95:26:45:62:20:24:87:58:c2:58:ce:0c:07:
af:54:6a:c5:5a:47:6a:b2:44:73:b8:32:bc:21:61:
67:5c:5b:22:dd:e8:fe:98:0d:0a:32:41:50:d6:9c:
43:d1:5d:25:d2:a4:aa:c3:c7:67:f2:13:26:06:a2:
04:f5:6c:83:ff:68:39:62:2f:ae:13:33:0b:e1:9f:
31:31:00:67:1b:4b:2f:87:eb:d3:f0:22:fe:0f:3c:
0a:97:8d:97:7a:5e:29:b0:2a:b2:76:ff:f0:1a:7d:
46:c8:6a:e0:ee:c7:36:f6:d2:ff:df:33:3f:6b:f1:
d0:bd:4c:b8:54:97:bd:11:e9:93:29:6c:62:8b:88:
e1:18:aa:37:88:14:21:ef:97:0b:94:53:3a:67:5c:
ae:4e:ae:1f:f6:19:19:e1:1e:fb:d6:f8:46:46:08:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:08:C4:FC:8B:DD:61:C6:C1:76:94:2A:66:7A:52:FD:2C:C0:FB:46
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iAjE_IvdYcbBdpQqZnpS_SzA-0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.160.0/22
151.242.176.0/22
151.243.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:b9:2a:d1:44:30:c3:10:36:98:ea:13:75:a2:df:3a:3e:32:
7a:89:5c:33:8f:c1:04:ae:0a:b2:a6:c3:c8:96:79:cc:a0:87:
8c:10:5c:76:6a:45:5d:ce:8c:3e:63:cb:62:ac:74:92:0d:81:
3e:95:70:23:92:bc:00:40:92:78:40:8b:38:ce:83:e4:14:23:
2a:a8:df:2c:49:3c:b3:ca:28:88:7c:fc:9e:bd:46:ed:f5:00:
ed:23:1d:81:58:3b:77:c0:fb:93:3a:cb:16:7a:d5:e9:09:34:
75:d0:46:2a:4b:96:6d:a3:db:ba:15:71:76:dd:51:ba:a6:af:
6f:9e:cb:20:f2:45:9b:83:79:29:eb:e5:61:42:f4:48:42:d6:
1e:0a:3e:31:9d:17:64:c8:4e:e4:e9:be:3f:4f:17:aa:87:12:
aa:4e:0c:aa:fc:08:ee:1d:c1:39:7a:f1:5d:91:b4:60:93:93:
9d:b5:dd:06:91:c2:2d:a9:07:37:9c:ba:3a:c5:6f:7b:a0:ef:
dd:a3:40:06:74:49:71:e2:c3:ce:ef:ac:ce:02:4a:ee:0d:1b:
c3:39:06:ee:b1:2d:68:ff:0a:02:68:63:18:2e:83:57:6b:5b:
1a:ae:3c:7f:ec:f4:37:41:91:2e:7d:0a:75:66:8f:ad:53:09:
b9:73:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:14:07 2025 by rpki-client