Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/366u70wBSEdYB_88-6lGi4xf2qY.roa
File: 366u70wBSEdYB_88-6lGi4xf2qY.roa (raw, json)
Hash identifier: 16bxEzEbdlk55JDCeLQlyfC9x5miBKkAe0yRWE7WMQE=
Subject key identifier: DF:AE:AE:EF:4C:01:48:47:58:07:FF:3C:FB:A9:46:8B:8C:5F:DA:A6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D49EBFEC5CC5534AEF8F3EB88BAB0CBB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/366u70wBSEdYB_88-6lGi4xf2qY.roa
Signing time: Fri 04 Jul 2025 08:47:43 +0000
ROA not before: Fri 04 Jul 2025 08:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 151.243.21.0/24 maxlen: 24
151.243.164.0/22 maxlen: 22
151.243.244.0/24 maxlen: 24
151.245.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:9e:bf:ec:5c:c5:53:4a:ef:8f:3e:b8:8b:ab:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 4 08:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfaeaeef4c0148475807ff3cfba9468b8c5fdaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:58:99:1d:bd:b8:67:7c:d8:bd:7e:0f:5b:
43:df:0a:af:60:0f:ab:1c:04:4d:34:ed:ad:00:f7:
bd:ef:21:f7:13:57:3b:02:e0:ad:05:ea:91:90:e1:
9c:d3:a9:2d:23:bc:0e:dd:19:c6:f4:cd:3e:75:2b:
0f:65:6d:24:96:b0:c7:fc:9e:b4:65:6e:6f:55:5a:
5a:d1:66:74:d0:90:94:f8:82:87:f0:3e:5f:d0:2b:
67:d5:7d:c8:d8:52:47:a2:48:c5:a4:c6:ab:39:56:
66:e0:3e:27:c9:1c:5c:bb:db:b7:e1:c3:f5:ab:4b:
11:94:21:5b:b1:bb:8d:59:fe:b7:60:5c:e7:fe:09:
d6:f5:7d:97:83:d7:84:3d:34:3e:0c:8d:f5:a6:b9:
7b:20:cb:ad:f0:13:3a:e2:3d:4b:71:52:02:88:56:
96:ae:78:b7:3e:39:78:81:f0:00:fb:4f:7e:af:e4:
91:a4:75:25:54:1f:a6:3f:74:41:ab:85:8f:20:e8:
79:cd:fe:62:ff:25:24:53:cf:37:ba:4c:40:96:2d:
80:12:82:6f:16:c3:32:2c:8d:d4:84:86:bf:71:d5:
d0:67:9f:cd:ca:d2:3d:06:81:45:fd:0d:8c:ed:2d:
2d:d9:7a:be:fe:33:60:77:07:f2:88:48:20:c4:2d:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:AE:EF:4C:01:48:47:58:07:FF:3C:FB:A9:46:8B:8C:5F:DA:A6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/366u70wBSEdYB_88-6lGi4xf2qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.21.0/24
151.243.164.0/22
151.243.244.0/24
151.245.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:8c:c1:4a:e0:52:e4:7a:11:dc:64:03:ee:2d:57:b4:d6:f6:
38:87:a4:12:ec:cd:dc:8f:9a:f4:c0:a8:a1:d3:f4:85:da:39:
e0:9d:51:be:2c:f0:be:a2:76:28:4c:83:57:a8:89:1d:86:c5:
49:a0:3e:1b:4d:02:06:e3:60:e9:89:24:dc:8e:f9:88:31:22:
86:c9:b3:96:66:a8:7f:99:3d:e3:57:9d:76:ce:e8:de:c8:6f:
4d:24:9c:2e:bb:3c:cd:25:25:ed:4f:1f:c8:7d:74:37:f4:8c:
0d:d4:6b:6a:98:74:65:24:a2:2a:8d:f9:16:96:42:c6:c0:94:
ca:65:67:95:f3:ca:62:c4:67:1a:74:52:b9:a3:80:9f:45:30:
d9:e5:37:53:1f:77:84:4b:2d:5c:57:b6:d3:96:87:62:b4:da:
8e:7b:22:a9:4f:30:c0:8a:62:4b:e4:46:66:9c:e0:7a:78:0f:
f1:60:fa:39:93:13:95:c4:41:54:e2:e4:07:18:80:2d:ce:ed:
ad:2d:be:ce:1e:09:e9:0c:31:1c:ae:6f:7d:99:c4:3d:fa:91:
f8:17:34:99:26:0c:6a:3b:be:88:51:a8:6b:41:b8:a8:5e:36:
9d:74:42:e0:6a:8d:e2:11:89:29:38:6d:c8:60:39:8d:ea:00:
bb:9f:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:36:34 2025 by rpki-client