Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uwE6JoXcefqsTBfwOv5epx3d1f8.roa
File: uwE6JoXcefqsTBfwOv5epx3d1f8.roa (raw, json)
Hash identifier: baoeJUVX4FyxhpbV9ZaWEmewBNkg+L88zZHrY0XH+CI=
Subject key identifier: BB:01:3A:26:85:DC:79:FA:AC:4C:17:F0:3A:FE:5E:A7:1D:DD:D5:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196EC238128303B410D76AEA4A0BDD53F33
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uwE6JoXcefqsTBfwOv5epx3d1f8.roa
Signing time: Tue 20 May 2025 05:21:11 +0000
ROA not before: Tue 20 May 2025 05:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.73.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.244.75.0/24 maxlen: 24
151.244.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:23:81:28:30:3b:41:0d:76:ae:a4:a0:bd:d5:3f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 05:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb013a2685dc79faac4c17f03afe5ea71dddd5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:34:40:8a:b4:65:02:c9:c7:1b:5b:50:97:
72:1b:3f:50:76:28:6e:3f:eb:0c:5e:b3:2f:ea:df:
70:09:44:3e:26:95:f4:21:fe:df:1f:84:18:e4:43:
43:1a:b2:fb:c4:41:89:60:d0:ae:fe:c7:73:b0:f7:
7a:7a:c7:c3:54:94:c7:56:ac:22:d9:b2:44:41:bc:
a8:86:c8:f7:71:1a:45:c1:da:3e:a9:f5:19:16:91:
cf:cd:a6:85:bf:b9:ae:a2:71:5a:68:c8:bd:c3:1a:
fd:d8:14:82:f8:43:d1:b9:dc:f5:d9:f0:36:9b:a7:
ed:20:1b:b6:21:e9:97:f0:fd:90:d7:12:8d:13:45:
69:4e:f4:26:c8:b6:12:11:59:fd:c1:a9:c7:17:7e:
0d:b4:94:43:f6:8d:64:e3:5e:3d:42:ff:b0:10:6c:
74:0c:4f:52:0c:27:79:d8:02:db:27:1c:78:56:77:
a2:4c:89:fb:8f:71:b8:9f:db:ba:02:a8:18:d3:be:
0b:f6:d0:83:22:b7:34:ad:0d:98:9e:57:da:cb:ba:
5e:ae:55:66:80:8f:83:a9:0e:25:bb:56:c3:fc:a2:
dc:94:72:67:39:a0:bb:d5:29:e0:ff:29:1f:ca:16:
89:2f:26:43:dd:bd:28:49:36:07:c1:a1:c9:f2:a7:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:3A:26:85:DC:79:FA:AC:4C:17:F0:3A:FE:5E:A7:1D:DD:D5:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uwE6JoXcefqsTBfwOv5epx3d1f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.73.0/24
151.240.78.0/24
151.244.75.0/24
151.244.87.0/24
Signature Algorithm: sha256WithRSAEncryption
63:31:2f:23:8d:fe:c5:42:4c:77:10:33:bd:d7:ff:99:a5:94:
21:36:51:64:78:10:97:2b:89:c8:99:bf:98:23:27:38:bc:86:
67:56:ad:12:cf:55:56:d8:b2:5e:f5:a4:b4:44:f2:e1:2a:09:
2c:ca:d5:fd:75:ed:98:1a:a7:be:66:c5:3a:19:1a:98:8e:91:
e6:30:5f:b4:0f:a6:ad:36:a5:95:22:03:8d:62:6e:99:b0:8e:
24:b3:0a:d6:e6:73:a4:cf:52:19:cb:2a:c7:94:da:63:3f:1d:
a0:fb:43:ce:03:09:6a:1d:a2:cb:52:8a:19:ea:00:23:94:52:
e1:e5:5f:60:34:c9:b1:98:86:fd:ca:3e:20:84:21:b4:a5:76:
ba:84:35:91:f6:c7:0d:4e:ba:c5:5c:d0:60:d0:4c:6b:14:f2:
ae:41:a6:76:b8:28:3d:c0:d8:c0:1f:aa:7b:fd:7e:74:d5:60:
ff:f9:0e:07:db:bd:75:f5:8d:b1:70:41:7d:76:11:b6:16:4d:
76:bc:ad:db:80:b7:49:cd:d2:fa:9a:89:80:cd:44:d9:bf:eb:
5d:fe:06:97:39:e5:8f:30:27:1a:12:a0:4f:5f:70:c4:e9:09:
98:fe:e5:f1:4f:46:1f:83:e5:c0:61:f5:9f:a8:2a:9a:e5:fc:
77:8b:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:39 2025 by rpki-client