Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IJmdNBFWuYao-AjY55s3UZNf_WQ.roa
File: IJmdNBFWuYao-AjY55s3UZNf_WQ.roa (raw, json)
Hash identifier: 9BNN9Q0dv4603vOHopZXzDoQCYB8kfYeuxPtJmVSBcY=
Subject key identifier: 20:99:9D:34:11:56:B9:86:A8:F8:08:D8:E7:9B:37:51:93:5F:FD:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198267BD4772980316F7748072D6F6BC193
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IJmdNBFWuYao-AjY55s3UZNf_WQ.roa
Signing time: Sun 20 Jul 2025 06:18:26 +0000
ROA not before: Sun 20 Jul 2025 06:18:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 151.242.180.0/22 maxlen: 24
151.243.117.0/24 maxlen: 24
151.243.119.0/24 maxlen: 24
151.243.121.0/24 maxlen: 24
151.243.122.0/24 maxlen: 24
151.243.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:7b:d4:77:29:80:31:6f:77:48:07:2d:6f:6b:c1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 20 06:18:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20999d341156b986a8f808d8e79b3751935ffd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:fc:af:34:59:07:03:68:ee:a3:cf:b4:25:
ea:e6:aa:d0:7f:0b:f9:17:d8:92:ae:32:1f:bc:80:
3d:05:e3:5e:31:64:91:77:0f:8a:e2:f9:de:f2:2d:
4a:f8:3e:b5:8e:14:51:03:fc:94:44:31:1c:a4:bc:
c3:8b:d8:40:c9:c2:75:51:01:79:9c:b1:db:04:31:
86:7e:a8:f3:29:83:fb:72:79:35:61:a3:9b:f6:b1:
1b:ff:d3:ad:f3:a4:f5:c5:f6:e1:51:29:14:05:1c:
d9:7f:6c:64:64:19:3e:7b:1e:ff:94:65:43:34:da:
eb:bf:8d:05:7a:fa:b2:e1:20:ed:0d:27:70:f2:3c:
4e:55:be:f4:82:d3:bf:17:cb:ae:2d:cd:51:03:ed:
9a:1c:5e:f2:19:0f:a4:5c:bf:a0:12:47:75:39:26:
23:70:52:c1:ea:25:3c:8a:3b:34:fb:79:1f:fc:0f:
f2:7b:77:f4:89:0b:60:5f:73:c3:7b:8d:70:ff:19:
1b:7d:8f:b8:27:e2:2c:bb:bb:0e:4f:33:04:aa:18:
03:3a:95:fc:4a:9c:58:b7:6e:64:03:3a:29:a8:8b:
5a:9f:f2:e5:17:24:56:9f:3e:90:c5:ee:fb:72:af:
5e:f0:ac:15:76:e4:c7:45:9c:dd:37:73:20:7d:fe:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:99:9D:34:11:56:B9:86:A8:F8:08:D8:E7:9B:37:51:93:5F:FD:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IJmdNBFWuYao-AjY55s3UZNf_WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
151.243.117.0/24
151.243.119.0/24
151.243.121.0-151.243.122.255
151.243.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:77:c8:3e:11:18:ae:c5:99:15:8e:e6:1e:c2:ef:dc:85:1f:
d9:e0:bc:ae:99:72:b7:1a:67:62:86:e4:0e:a2:0f:c7:45:03:
ef:c8:a4:f9:df:aa:5f:36:1b:a5:70:d7:5f:48:60:9b:47:27:
0a:4a:a4:a7:fd:52:24:08:c0:a7:a4:0f:40:ff:e0:d8:e8:92:
8e:06:af:3b:50:bb:49:01:8e:19:07:f2:c2:92:f7:d5:4b:3a:
8f:4f:31:b6:c3:31:13:7f:5f:5a:03:b1:9d:95:1b:da:a6:62:
d5:68:ea:85:51:77:43:89:57:37:21:39:f7:dc:11:e8:2b:2d:
73:18:ee:5b:c9:da:58:9c:7f:f4:fe:64:6f:58:8e:8a:5e:16:
2c:dc:d3:94:70:f6:67:37:a6:bf:6e:97:36:6c:5b:61:82:24:
48:9d:27:6c:bb:74:ba:90:59:4e:54:6d:13:50:84:52:b0:8a:
95:bc:95:f0:ab:fc:fb:b3:74:2d:45:58:be:6f:45:3f:19:bf:
8d:06:d8:ec:78:12:7d:8e:f3:64:a3:4c:fa:f6:67:dc:16:b7:
e4:6a:4f:90:e1:9e:d7:ce:1e:00:76:dd:de:b8:d6:33:5e:45:
c8:e3:dd:e2:27:c8:cd:95:2e:1a:05:fc:4e:db:e3:bb:80:0e:
3f:e5:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:51:29 2025 by rpki-client