Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLF2olFKqxLZYfI9ioMiVaRAHmo.roa
File: jLF2olFKqxLZYfI9ioMiVaRAHmo.roa (raw, json)
Hash identifier: XEJjoIGOyvfAZevj3b+ow2E3rd+4e7xWMWEhoWH79yM=
Subject key identifier: 8C:B1:76:A2:51:4A:AB:12:D9:61:F2:3D:8A:83:22:55:A4:40:1E:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01987F7574F72EE71A7CE42CEA51F41A2C87
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLF2olFKqxLZYfI9ioMiVaRAHmo.roa
Signing time: Wed 06 Aug 2025 12:57:40 +0000
ROA not before: Wed 06 Aug 2025 12:57:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.201.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.70.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:75:74:f7:2e:e7:1a:7c:e4:2c:ea:51:f4:1a:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 6 12:57:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb176a2514aab12d961f23d8a832255a4401e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:f3:1a:5e:7a:8c:c2:47:81:b9:66:71:8c:
73:2b:d1:a9:c4:32:01:63:ef:c4:09:b6:6c:6b:0c:
cd:65:48:27:ca:26:a8:b1:e2:fe:f6:a3:a1:b5:b3:
19:a1:d7:49:57:df:45:f7:57:1b:62:56:35:d3:e9:
b4:26:21:d7:89:f4:6f:9d:ec:d9:96:e0:4f:0f:0c:
5a:2b:e7:5e:56:d1:2a:77:14:81:92:72:1d:ea:0b:
ce:9d:2b:88:43:a3:45:2c:0b:33:7e:86:ba:0a:ae:
16:4e:29:87:41:30:db:e2:c3:a4:fd:dd:12:97:ff:
92:79:3f:29:89:eb:65:fe:3b:d9:d0:44:f6:71:96:
02:c5:a7:92:33:33:08:1f:da:62:8c:03:79:f4:d4:
37:0d:ea:ed:6d:6b:d2:54:b9:d2:95:33:84:86:2a:
83:64:07:4d:8c:b1:44:ab:f6:25:52:b8:82:84:60:
6a:b9:5d:6a:f6:6c:d6:b0:6b:5f:a9:4a:b1:e6:e7:
87:59:eb:2a:76:80:0c:fe:9c:b8:3c:bb:34:bc:a4:
49:da:b6:b9:ab:0d:d4:9f:fd:6d:57:2f:9f:41:24:
c3:92:f1:7f:37:3b:21:93:26:1e:d3:62:cc:f0:15:
73:00:34:9f:af:85:4f:83:03:85:9c:4a:f8:e2:53:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:76:A2:51:4A:AB:12:D9:61:F2:3D:8A:83:22:55:A4:40:1E:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLF2olFKqxLZYfI9ioMiVaRAHmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.163.0/24
151.240.173.0/24
151.241.30.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.160.0/24
151.241.204.0/24
151.242.45.0/24
151.242.57.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.244.5.0/24
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.244.131.0-151.244.133.255
151.244.191.0/24
151.244.193.0/24
151.244.198.0/24
151.244.201.0/24
151.244.212.0/24
151.245.70.0/24
151.245.78.0/24
151.245.201.0/24
151.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
06:59:4d:c3:e9:7b:e0:ae:38:53:2e:e0:a2:24:b8:df:e2:31:
d4:3f:16:01:b7:fc:c5:f4:78:c4:99:ee:e7:ff:a6:6d:d5:83:
50:5f:b1:00:a1:cd:6b:33:2e:2d:0c:fa:bd:1b:a1:72:36:fa:
4b:7b:65:39:c5:16:f9:47:45:8a:fd:b2:7e:e7:31:fa:79:95:
da:c8:cc:aa:22:64:4f:df:ea:fa:c0:f8:e8:70:77:de:d1:1d:
be:c9:03:4a:da:33:d8:75:cc:c8:50:29:e3:6d:62:11:22:82:
0a:54:92:96:14:2a:ad:6d:6b:0d:69:44:00:73:58:0f:82:d5:
56:0a:16:3e:bc:7d:ed:01:33:cd:d0:82:5e:8a:28:86:34:26:
a1:2e:8e:ef:c5:31:72:f8:fe:59:5d:bc:46:b1:f9:56:8d:75:
0d:74:50:16:28:87:07:4c:3a:ae:43:1d:a3:86:41:da:f7:28:
aa:d2:78:2a:1d:53:a3:8f:ce:9d:e2:81:ac:44:0a:7e:55:f4:
5f:8c:7e:81:46:f9:c5:b0:fa:74:72:f4:fe:de:f2:19:1b:e7:
de:24:b6:ad:3e:63:96:7c:04:7e:07:f0:58:07:74:ac:00:78:
fa:a5:f0:d7:3b:98:5d:84:f6:d9:59:68:86:31:ea:52:1e:bd:
8a:c6:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:23 2025 by rpki-client