Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qlzluC8xkBqmFPzG96DFpE3M3xM.roa
File: qlzluC8xkBqmFPzG96DFpE3M3xM.roa (raw, json)
Hash identifier: 2BpeE+vdGrSMfy/U4ceAAxJ8sC4V0pPgQhy+pCvbMMA=
Subject key identifier: AA:5C:E5:B8:2F:31:90:1A:A6:14:FC:C6:F7:A0:C5:A4:4D:CC:DF:13
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01963D10C2DFA484FAD06D049DC3D2B1FA85
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qlzluC8xkBqmFPzG96DFpE3M3xM.roa
Signing time: Wed 16 Apr 2025 05:27:10 +0000
ROA not before: Wed 16 Apr 2025 05:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.242.40.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:10:c2:df:a4:84:fa:d0:6d:04:9d:c3:d2:b1:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 16 05:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa5ce5b82f31901aa614fcc6f7a0c5a44dccdf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:bb:26:f0:d2:cb:ec:e3:3d:37:fb:13:53:
d1:52:fc:b0:7a:c7:4c:f6:48:30:2b:69:7e:82:f7:
45:f9:2d:aa:2a:7a:ec:1b:17:fd:1c:33:59:0c:a4:
5c:18:e0:61:36:ba:0f:31:b5:31:6a:39:45:b8:0a:
96:fb:25:85:d3:3d:d6:41:20:4c:48:b3:ee:9b:9c:
56:8f:13:5c:4e:11:3a:e2:42:df:91:1e:7e:da:df:
aa:b6:21:4e:8f:d9:88:e9:87:4b:2f:1d:bf:30:22:
86:81:af:b4:26:70:04:55:59:1d:ef:23:ba:39:48:
37:57:a8:91:95:64:86:e0:bf:ce:b6:01:1d:aa:fc:
bf:1a:ab:30:0a:99:c2:1a:36:96:48:1a:5f:24:52:
76:8f:23:04:6b:ae:5e:01:1a:e6:7d:46:78:6a:3a:
f5:c5:96:5f:f9:a6:fa:d8:ec:f0:54:5b:c0:0e:57:
16:a9:e6:07:a1:d3:ee:e5:28:78:c9:4f:62:48:42:
7a:11:b5:f1:53:74:dc:3f:ca:4a:14:2a:f4:5e:02:
32:b6:65:b8:e8:06:7e:8c:f2:73:98:63:09:6f:1c:
90:c5:67:31:8b:bd:70:7e:ba:86:cc:98:20:30:eb:
e3:60:76:f7:7d:fa:d7:d3:ea:1a:0b:f8:ad:c1:3c:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:E5:B8:2F:31:90:1A:A6:14:FC:C6:F7:A0:C5:A4:4D:CC:DF:13
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qlzluC8xkBqmFPzG96DFpE3M3xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.40.0/24
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.115.0/24
151.243.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:61:4b:3a:bb:5d:b9:02:8b:aa:89:4e:2f:f6:24:07:97:f9:
f7:80:b1:c9:3b:ca:32:e8:0f:e1:55:7b:ac:5a:38:90:4f:e8:
2f:53:d5:18:8a:69:e2:bc:31:e3:bd:a3:6a:9f:52:95:e0:89:
9f:b0:84:89:63:86:9d:ee:cb:85:0e:fa:20:23:85:01:d7:68:
bd:e7:d3:48:61:04:7f:15:03:1b:3f:85:cc:02:80:53:7c:fa:
dc:c6:52:3a:d3:00:00:47:7e:ce:3f:6f:ab:af:29:53:f1:03:
fe:80:39:38:b7:d5:16:e1:0d:76:65:38:7c:0e:ba:80:24:73:
18:f8:b9:9c:1f:7b:69:15:52:0a:f2:f2:02:c7:70:72:93:6c:
60:0c:f8:cc:2b:0e:4f:ae:e4:40:7e:a1:9d:be:29:48:03:93:
d6:bd:17:03:26:88:55:cf:c0:af:28:65:ab:32:3d:99:82:fd:
ee:34:8a:25:98:1f:87:1d:c4:6d:b8:26:51:9e:66:97:58:3f:
78:ca:f3:ea:0c:4b:6a:b5:e0:b2:00:49:bf:15:dc:b9:0c:73:
82:08:dd:96:56:15:44:aa:2a:50:31:a0:0c:8d:af:db:45:87:
db:50:30:29:f3:01:68:a2:a4:a9:39:3c:d5:2a:83:28:e3:89:
cd:5f:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:35 2025 by rpki-client