Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mD6gud-AtobRib29ILgaNZVEY2Y.roa
File: mD6gud-AtobRib29ILgaNZVEY2Y.roa (raw, json)
Hash identifier: sXYCd0Vd4HrxrNaSE956a9MwIikaQKtDayTyfYhQ9oc=
Subject key identifier: 98:3E:A0:B9:DF:80:B6:86:D1:89:BD:BD:20:B8:1A:35:95:44:63:66
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019734E518F907F0F8F7F005466418497FF9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mD6gud-AtobRib29ILgaNZVEY2Y.roa
Signing time: Tue 03 Jun 2025 08:25:18 +0000
ROA not before: Tue 03 Jun 2025 08:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 151.240.75.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.243.15.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:e5:18:f9:07:f0:f8:f7:f0:05:46:64:18:49:7f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 08:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983ea0b9df80b686d189bdbd20b81a3595446366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:77:be:9e:d4:1d:c8:c2:9e:8f:66:fc:68:
d0:db:e3:8b:0a:b1:a3:0c:38:17:64:45:cd:6a:89:
8f:da:93:10:20:f3:6b:d9:f5:3f:6a:e0:fc:6f:a6:
f0:c7:94:e0:52:93:39:fa:6b:23:54:09:a1:59:26:
db:3d:61:21:2a:51:1c:73:d5:c2:23:c7:c0:70:b1:
7f:9c:52:cc:74:67:55:d5:5c:79:2c:e8:59:89:b5:
43:a4:e6:f3:1d:e2:b5:f3:8b:bc:5c:f3:d5:16:53:
a4:28:41:3a:49:70:96:b4:01:f8:5a:83:ca:28:2c:
2a:32:ed:66:49:d2:92:4b:39:68:9a:81:38:9a:85:
76:af:41:d9:58:36:14:46:78:3e:ab:f8:1a:e1:05:
0d:07:f9:31:14:c2:62:cd:92:a5:88:b1:c1:f0:eb:
a7:c4:c7:31:42:c7:73:9b:a6:0c:29:1c:cf:e7:9f:
70:a7:0d:ae:6a:c5:19:e7:7b:1d:33:39:6a:82:17:
27:f8:27:5a:5e:5b:4c:aa:b3:b6:69:a1:47:54:e5:
b8:aa:30:55:79:7d:20:6b:d1:38:a5:d3:76:66:40:
49:14:83:6e:47:ef:5c:5e:c6:2e:3b:e3:ad:9e:6a:
4a:d1:83:b2:1f:ec:51:96:30:ea:d6:93:40:a4:b7:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:A0:B9:DF:80:B6:86:D1:89:BD:BD:20:B8:1A:35:95:44:63:66
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mD6gud-AtobRib29ILgaNZVEY2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.75.0/24
151.242.108.0/24
151.243.15.0/24
151.243.255.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6b:c9:53:b3:2d:9d:23:b5:b1:be:9e:fe:f5:07:ff:44:35:
a5:e0:5f:ce:ea:10:c1:9d:64:1a:fa:7c:7c:03:de:c5:85:f3:
3b:d5:e2:2e:bb:46:c8:ea:f8:c0:2a:a1:0e:6a:ce:90:85:51:
bf:87:84:d8:91:78:33:51:3b:9d:30:cc:c0:18:af:ec:1f:ea:
f8:fc:03:02:9c:21:f6:db:ec:f5:c9:c9:ce:32:05:e1:25:73:
19:88:e5:f0:86:ed:ab:c0:95:32:97:d0:95:dc:81:cf:f5:f4:
4a:e3:f5:01:f8:f5:a7:a5:1c:6b:14:49:8e:a3:1e:3a:75:5e:
90:79:41:ff:34:ea:9b:46:07:46:6a:8c:f9:8c:27:11:66:5a:
87:91:5d:36:03:43:8a:42:cd:35:cb:a0:01:c3:1b:4d:af:4b:
8d:5f:67:36:86:29:c9:8f:d7:94:98:1f:67:d6:dc:6a:2f:48:
92:8b:f8:f4:8b:91:1f:74:e9:bc:6b:1e:0d:b1:28:b3:ca:8d:
bc:e7:25:1c:22:33:2b:36:b8:ee:4e:3d:32:6b:45:b6:42:99:
c5:20:c9:4d:ed:d9:ad:8a:1c:f8:96:64:f1:50:e8:43:1d:fa:
ba:64:a9:3d:46:b7:2f:28:a4:8e:4a:bf:1e:9a:d4:87:02:52:
2a:2b:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:37:30 2025 by rpki-client