Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rR1BUZmtmOWpEaDco7fNnkh9UzA.roa
File: rR1BUZmtmOWpEaDco7fNnkh9UzA.roa (raw, json)
Hash identifier: XbYq6oRheFlWTMzT/ysh+D13Otko8/f7kUq+ly09jCs=
Subject key identifier: AD:1D:41:51:99:AD:98:E5:A9:11:A0:DC:A3:B7:CD:9E:48:7D:53:30
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01964222107ECA7817A3C929FC6462C232F0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rR1BUZmtmOWpEaDco7fNnkh9UzA.roa
Signing time: Thu 17 Apr 2025 05:04:10 +0000
ROA not before: Thu 17 Apr 2025 05:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.243.176.0/21 maxlen: 24
151.243.188.0/22 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 05:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:22:10:7e:ca:78:17:a3:c9:29:fc:64:62:c2:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 17 05:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad1d415199ad98e5a911a0dca3b7cd9e487d5330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:27:ad:c4:c6:94:cb:34:2a:95:b6:c0:7d:
65:cf:c2:d9:1c:21:89:77:4a:61:97:b4:07:fb:c7:
dd:4b:85:46:c9:0c:8e:f6:df:56:1c:db:3e:07:63:
3d:3e:e5:84:5c:62:b1:6e:2d:35:4f:7b:6d:46:73:
f2:df:67:8c:d4:66:d6:08:cf:49:9d:ba:a5:03:45:
6a:2a:fb:fa:94:71:6d:a8:89:54:bb:de:75:33:32:
a3:fc:15:f6:7f:d9:55:fb:48:e3:81:2f:30:35:24:
78:9d:dd:83:52:98:74:bc:53:9d:1b:72:61:ed:b8:
0f:5a:a9:36:af:85:38:0e:3b:01:9c:b2:e1:52:c6:
a9:50:33:79:7b:c9:1a:c7:bb:0c:d8:d4:e1:c8:8f:
34:3f:4b:3b:22:33:04:e7:ef:82:ff:2e:19:47:5d:
66:d5:db:82:56:aa:d1:86:2c:5e:63:bb:e9:d1:3e:
9c:0e:f6:65:c1:78:e3:63:2c:5d:fa:e4:76:63:0d:
3f:17:b0:53:a2:78:f6:5a:08:d4:07:81:24:2e:a3:
a1:e4:d7:da:cb:4f:f8:66:fd:5b:79:89:bc:9d:04:
86:82:17:a9:1b:ba:52:45:7a:91:f1:fd:99:67:45:
f6:95:bd:a9:d6:dc:88:8e:6a:29:6b:17:fd:97:1c:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:41:51:99:AD:98:E5:A9:11:A0:DC:A3:B7:CD:9E:48:7D:53:30
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rR1BUZmtmOWpEaDco7fNnkh9UzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.176.0/21
151.243.188.0-151.243.199.255
151.243.225.0/24
151.243.227.0/24
151.243.235.0/24
151.243.237.0/24
151.243.239.0/24
151.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c2:51:76:47:10:97:a0:e7:85:5b:78:5c:1d:73:15:9a:ef:
c7:b7:67:c1:34:61:8d:39:11:f3:55:d8:84:db:ed:06:80:ba:
51:c7:98:a2:1b:52:63:9c:75:69:73:07:df:23:ec:ba:50:5f:
c1:49:d4:7e:21:46:a2:2a:61:21:95:75:f6:a7:b6:31:50:5f:
96:ac:d2:51:79:03:9d:51:90:93:a0:1c:ab:da:48:fd:9d:13:
5a:6c:35:a2:c5:95:32:ba:ec:17:f3:a2:e3:1c:d2:e0:b0:41:
14:35:6a:43:2c:e4:c6:75:8e:8d:b3:60:d9:c7:64:51:75:43:
b2:93:fe:b8:38:24:07:b9:11:55:f5:84:41:1c:c3:53:3a:02:
c4:30:c4:e8:b1:6b:46:bd:d1:59:0e:03:ee:14:14:c2:30:51:
e3:79:4b:dc:33:a6:92:86:10:e7:bb:07:4e:5f:43:34:d3:74:
1d:1f:84:05:12:cf:8c:2b:1f:ef:ac:1c:63:05:a5:29:6f:5a:
b1:4e:5c:29:d7:f9:20:d3:e7:96:50:eb:b8:a9:38:48:bc:27:
9e:f6:f2:7e:1c:ff:ce:c8:16:d1:7e:6e:8d:79:bf:c5:11:1b:
c5:82:79:da:68:a4:ef:c6:87:22:60:77:c8:99:e3:a5:f0:01:
6f:e5:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:52 2025 by rpki-client