Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KRVVta1FSOFvBSK93xbid0QcCtA.roa
File: KRVVta1FSOFvBSK93xbid0QcCtA.roa (raw, json)
Hash identifier: 4yZ4XYdRhTQD+krNLufZzz51jocSyvvQs6LT7UR2NZg=
Subject key identifier: 29:15:55:B5:AD:45:48:E1:6F:05:22:BD:DF:16:E2:77:44:1C:0A:D0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019811B8EFDD5D720C17C2ADFC95D7795C8B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KRVVta1FSOFvBSK93xbid0QcCtA.roa
Signing time: Wed 16 Jul 2025 05:33:09 +0000
ROA not before: Wed 16 Jul 2025 05:33:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14061
IP address blocks: 151.240.160.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.244.89.0/24 maxlen: 24
151.245.74.0/24 maxlen: 24
151.245.87.0/24 maxlen: 24
151.245.198.0/24 maxlen: 24
151.245.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:11:b8:ef:dd:5d:72:0c:17:c2:ad:fc:95:d7:79:5c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 05:33:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=291555b5ad4548e16f0522bddf16e277441c0ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:1f:7a:80:bb:55:37:53:eb:83:a7:ee:e0:
08:d7:e3:ba:45:ca:31:f0:1d:b3:5a:ae:2e:74:ee:
23:39:96:a5:6a:64:b8:db:cd:30:2d:79:d6:4f:3e:
52:24:1e:1d:34:e2:d6:e1:f9:f9:3d:a2:28:24:a4:
e5:0e:47:a3:ed:95:c7:6c:f5:ed:8f:db:8e:22:87:
cb:9f:98:2d:b8:27:32:71:c2:c3:21:d4:0b:08:6d:
55:94:75:f9:0c:1a:44:1b:2e:d2:04:1c:52:e5:3e:
b2:f0:a5:0a:23:0d:17:f3:89:f7:df:04:60:a1:35:
41:06:a8:3a:69:08:b2:15:a4:82:f3:47:ab:8b:97:
ff:2e:0c:07:15:fe:65:4c:2c:d2:30:3a:f3:5f:7d:
c4:88:8d:80:29:01:12:d7:98:58:5a:8b:42:60:3d:
dd:00:34:57:9e:b7:6b:ec:35:f4:6e:b0:b6:d2:e5:
32:1a:a8:8d:ee:15:83:79:b3:20:10:b3:c8:f2:a7:
9f:36:e2:52:07:99:f4:e4:5e:65:65:03:41:1f:75:
e1:17:cd:73:08:a4:86:7d:56:a0:cf:e8:e1:ac:22:
6d:18:e4:4a:5b:14:61:34:54:89:4d:11:ec:cc:f0:
1f:57:e1:cd:68:c3:65:a3:cb:98:1e:c1:b1:1c:56:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:15:55:B5:AD:45:48:E1:6F:05:22:BD:DF:16:E2:77:44:1C:0A:D0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KRVVta1FSOFvBSK93xbid0QcCtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.160.0/24
151.241.19.0/24
151.241.45.0/24
151.244.89.0/24
151.245.74.0/24
151.245.87.0/24
151.245.198.0/24
151.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6c:a3:a4:7d:27:73:b1:ac:85:c3:3a:96:77:76:32:4c:20:
f6:9d:b8:a9:49:59:b0:b7:0a:cc:64:4d:ca:35:cb:39:e5:f0:
0f:d0:a0:a5:14:2d:f3:09:14:30:70:0f:81:8f:06:5f:84:a9:
d5:5d:d1:c2:e1:f5:3e:92:20:6c:de:ed:d9:34:7d:83:9d:47:
c6:e0:9e:00:64:c7:98:f5:29:63:84:5e:c3:4e:b6:d2:9d:89:
ca:8e:d1:b4:4b:b5:26:e9:ae:f7:24:30:88:ff:bf:cf:fa:1f:
ab:47:dd:12:0b:f5:4b:78:78:5c:c2:06:f0:36:bd:22:02:c0:
69:ec:9f:df:22:bd:8e:ef:60:14:2d:82:17:63:5d:56:2a:9f:
bc:98:a6:67:45:a5:97:47:1c:b9:2d:04:a6:9e:4e:0e:28:f2:
fe:e8:e6:00:f6:5e:2a:63:3b:e2:29:19:09:a0:39:ff:84:63:
2e:b6:05:56:28:51:a3:15:a2:e6:c6:de:e6:0d:88:f3:d5:1b:
d4:f6:3c:ee:44:0f:75:1e:7e:17:63:1e:3d:2b:b0:0c:10:a3:
6d:b0:8c:1e:8e:f4:98:2b:bd:2e:9d:9c:a7:00:ae:04:e3:7e:
8b:fe:38:00:22:0a:a4:19:6f:b2:8a:b3:9d:f4:33:3d:db:f6:
ae:af:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:32:38 2025 by rpki-client