Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m8tyFsVEIlD3qY-GT0km6Ufalww.roa
File: m8tyFsVEIlD3qY-GT0km6Ufalww.roa (raw, json)
Hash identifier: EkX771E7946cDjtwmZv5NrABQGT1nLV3Pgi3sSvYJ+A=
Subject key identifier: 9B:CB:72:16:C5:44:22:50:F7:A9:8F:86:4F:49:26:E9:47:DA:97:0C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196EC23809632DBD31E71B3867D261CE856
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m8tyFsVEIlD3qY-GT0km6Ufalww.roa
Signing time: Tue 20 May 2025 05:21:11 +0000
ROA not before: Tue 20 May 2025 05:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202903
IP address blocks: 151.242.254.0/24 maxlen: 24
151.243.62.0/24 maxlen: 24
151.243.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:23:80:96:32:db:d3:1e:71:b3:86:7d:26:1c:e8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 05:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcb7216c5442250f7a98f864f4926e947da970c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:f4:fa:5e:e5:e3:70:08:7e:a2:20:84:c4:
bd:58:21:80:85:cd:c4:4d:fb:c4:0a:e2:04:a9:08:
c5:6a:6d:b4:a6:b2:e5:6a:cf:74:97:1b:2d:00:b8:
66:5d:a4:9a:02:d2:c7:3b:46:cc:7d:08:83:f6:db:
69:e9:44:b3:27:2e:fe:e6:8f:76:e0:34:07:20:8d:
66:64:ff:57:93:6c:f9:25:95:ae:ab:01:24:d6:46:
2f:ee:7c:80:63:38:53:fb:e1:f4:5f:f4:c2:39:24:
f8:94:66:e0:da:c1:bc:be:bd:0f:74:ce:8a:2e:7e:
da:3b:ad:60:a4:dd:43:1b:de:cf:1d:da:69:cb:89:
d9:51:22:ab:e0:4f:f5:b0:a8:57:cc:83:0c:56:7f:
02:bb:78:62:5d:29:78:6b:a5:2d:fe:96:a3:cf:37:
2a:d3:0a:42:a7:4a:bf:63:6d:c0:a8:dc:83:44:40:
ba:21:ff:1e:3f:d4:2f:d9:d9:40:d7:8f:a1:c2:83:
ba:40:8e:39:f9:58:11:21:9c:ab:25:bc:c8:3c:3f:
92:7b:93:18:d7:b0:ac:b0:98:ac:d2:03:57:8a:c6:
02:ab:76:b3:16:a3:bb:b0:67:fd:f1:0f:9e:e8:98:
10:93:a6:82:f6:88:e3:ba:45:e3:73:d0:a8:56:ae:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:72:16:C5:44:22:50:F7:A9:8F:86:4F:49:26:E9:47:DA:97:0C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m8tyFsVEIlD3qY-GT0km6Ufalww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.254.0/24
151.243.62.0/23
Signature Algorithm: sha256WithRSAEncryption
58:b0:7a:72:97:44:06:d3:6f:d2:cd:6f:24:0b:5c:16:93:c9:
0f:33:e7:75:db:c9:fe:9c:a8:43:b4:aa:06:d9:ab:cd:74:b1:
48:b6:11:03:83:7b:87:d9:34:e6:27:71:26:05:59:74:4a:1e:
76:13:9f:9b:e8:89:c0:ce:75:d1:a9:f7:a8:3e:08:56:f1:e1:
e9:d2:f7:fa:ba:4d:df:23:41:0b:2f:23:6c:46:aa:80:a7:21:
75:ee:4e:0d:51:05:70:53:5d:53:48:f3:a6:3c:ae:f3:d3:d0:
65:eb:cd:d1:c7:33:03:cf:b8:a5:62:f4:5b:4b:77:50:bd:a7:
5c:e1:7c:6e:9c:51:96:39:ab:6a:aa:34:47:02:0c:0f:14:94:
b9:02:af:4f:54:31:0e:bf:82:6d:cb:84:5e:b5:c8:42:05:cd:
9a:f4:c2:fe:72:9c:11:0d:9e:e6:fd:dd:a3:69:d5:6d:ab:23:
43:60:ee:e7:45:e8:cf:c6:d2:08:81:64:18:e7:49:f8:34:be:
b6:ad:25:6f:e8:be:f0:1f:b3:80:73:14:f6:15:86:b4:87:8d:
0c:94:99:1b:cd:ef:16:f4:f4:15:ed:65:10:55:d4:0f:69:20:
21:d6:71:6c:4e:da:81:9e:60:70:6c:6c:ea:62:3e:1f:95:b1:
55:8a:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:14:42 2025 by rpki-client