Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qHvunRICeLt6y0GAPI6hTuCIHts.roa
File: qHvunRICeLt6y0GAPI6hTuCIHts.roa (raw, json)
Hash identifier: 0YyvgyndibAuqtfPR7uszlOihtZ1pmNlxf/EkfN3nGw=
Subject key identifier: A8:7B:EE:9D:12:02:78:BB:7A:CB:41:80:3C:8E:A1:4E:E0:88:1E:DB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019749A065DFCA4CF2D5B309E1F9F57D82BF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qHvunRICeLt6y0GAPI6hTuCIHts.roa
Signing time: Sat 07 Jun 2025 09:02:18 +0000
ROA not before: Sat 07 Jun 2025 09:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200950
IP address blocks: 151.240.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:a0:65:df:ca:4c:f2:d5:b3:09:e1:f9:f5:7d:82:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 09:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a87bee9d120278bb7acb41803c8ea14ee0881edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:82:91:5d:a2:73:7b:1f:7e:03:fc:01:3d:
66:83:75:c1:32:10:b2:1a:3e:8b:81:7c:32:8f:dd:
15:e0:a1:5f:48:4e:d0:37:df:e6:61:75:5f:21:a2:
a4:e0:90:95:f2:28:f2:33:e2:70:89:ac:ea:af:7f:
fe:2b:79:1e:39:14:df:db:dd:86:42:96:e9:3a:91:
87:5f:27:3c:97:3b:6f:05:33:cb:6a:2f:18:fe:29:
aa:b4:c7:f0:f0:79:f7:14:f2:07:c8:2a:66:13:75:
f9:d7:49:10:2c:4f:a6:3a:49:f2:1c:85:d7:d3:91:
e2:34:b3:9c:7c:17:45:de:69:66:31:fb:a9:40:3d:
b5:53:4b:2a:8f:ea:55:60:7b:5e:ba:28:65:7f:10:
e9:16:5c:c6:0d:f8:0a:ea:3d:16:5a:2f:3a:62:ad:
c9:b5:88:9f:cf:8b:b1:dd:42:fe:62:85:0c:4a:ed:
dd:e0:ae:9c:2b:5b:27:64:4d:82:36:ee:40:b0:f1:
67:a4:8e:b7:c6:15:3c:9a:5f:ba:18:ae:01:86:0c:
3b:98:0a:a7:27:b0:83:45:34:b7:ae:9b:8a:01:b5:
d0:71:51:4f:f3:8e:1c:39:70:b6:65:b1:70:27:95:
ed:de:81:48:89:ce:9d:5d:b1:74:cd:f9:76:2e:0c:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7B:EE:9D:12:02:78:BB:7A:CB:41:80:3C:8E:A1:4E:E0:88:1E:DB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qHvunRICeLt6y0GAPI6hTuCIHts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:04:6c:b8:51:43:21:61:e7:54:c6:dc:6a:e4:81:79:6b:7e:
bc:f2:99:46:5e:44:fa:02:dc:56:0c:42:3c:73:bf:b7:09:45:
85:37:2e:96:e8:c7:94:62:31:49:f0:8e:22:c2:b9:8b:a1:7e:
0f:de:d5:52:a5:f8:52:85:03:a4:64:5b:53:13:af:e6:90:68:
7f:2a:99:98:cb:1f:52:7e:50:1a:4b:0e:05:55:4b:66:87:27:
c7:c1:8a:85:41:80:c7:3c:be:e5:1c:a4:8c:86:69:6f:8b:de:
d1:65:1d:95:1b:80:19:6b:9b:2c:31:32:8a:93:ba:31:24:32:
7c:29:78:30:4b:15:6a:ff:bd:da:ae:19:4b:be:09:58:99:fe:
1f:25:1e:8f:a2:dd:79:b7:6d:bb:60:26:af:92:6b:75:c3:7a:
17:01:c1:0c:46:3c:3e:53:06:13:0a:f8:f1:ea:df:0a:e6:3f:
2d:08:e4:cd:a4:4e:82:17:67:4f:d0:7c:d2:5d:cb:23:9e:da:
2c:ba:c8:01:81:23:e6:b6:ed:0b:fb:5b:86:ec:c3:b5:8f:71:
f8:da:ce:e8:d3:69:61:1a:e6:82:19:02:0a:78:be:2b:26:b3:
8c:2a:1c:c7:c4:f8:cc:f1:76:a8:dc:13:b5:e9:92:e2:89:d2:
77:bc:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:41 2025 by rpki-client