Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N05luBAr5yEvq6I9QSITPFud4HY.roa
File: N05luBAr5yEvq6I9QSITPFud4HY.roa (raw, json)
Hash identifier: rtrXa+wwm3UPz13GE12k8Kmq/HOonnnojMGg9yehgVI=
Subject key identifier: 37:4E:65:B8:10:2B:E7:21:2F:AB:A2:3D:41:22:13:3C:5B:9D:E0:76
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01983112B46CDD904621692D7CDE10B6319E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N05luBAr5yEvq6I9QSITPFud4HY.roa
Signing time: Tue 22 Jul 2025 07:39:26 +0000
ROA not before: Tue 22 Jul 2025 07:39:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 151.242.86.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.133.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 04:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:12:b4:6c:dd:90:46:21:69:2d:7c:de:10:b6:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 07:39:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374e65b8102be7212faba23d4122133c5b9de076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:b0:50:d9:73:23:36:f8:b7:30:5d:a0:ca:
9c:e8:b5:0b:28:f4:85:f4:4f:4f:d5:4c:ae:00:d5:
01:30:20:09:6e:9d:89:61:eb:7d:af:84:50:96:60:
14:15:58:31:ea:a5:30:1d:a0:7a:38:39:de:44:15:
6e:80:5a:0f:59:4d:a7:95:7c:32:1c:0e:a1:d2:c0:
e2:30:7a:45:7d:5f:8d:8c:e4:d0:58:8e:63:29:bb:
ec:38:99:3b:f3:fa:a2:a9:a9:5d:c7:9f:cd:ae:43:
29:2a:0e:b7:bb:b2:26:7b:f3:a6:27:d7:a1:50:20:
5e:e8:96:06:76:2f:3e:38:20:da:cb:5b:2e:52:51:
e3:c3:ef:39:72:73:57:06:76:52:26:fd:1a:b1:ff:
36:52:73:a1:5d:b1:f5:96:46:94:ab:34:f2:28:da:
53:65:fa:fb:11:b3:e0:1f:70:2e:d0:e9:8a:92:b1:
32:84:fa:7f:b9:f1:25:f6:4e:f1:88:52:18:42:81:
f6:36:83:c8:c4:ce:19:a5:13:c7:42:2f:9a:c0:72:
db:85:d4:b4:c3:f9:4e:96:89:bd:ee:dd:f8:6d:47:
c4:35:58:3f:23:30:dd:85:94:43:a7:90:53:fb:66:
7a:2f:31:1d:bc:87:4e:f2:e6:7e:e4:ca:7c:81:a0:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:65:B8:10:2B:E7:21:2F:AB:A2:3D:41:22:13:3C:5B:9D:E0:76
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N05luBAr5yEvq6I9QSITPFud4HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.86.0/24
151.242.132.0/23
151.243.4.0/24
151.243.113.0/24
151.243.221.0/24
Signature Algorithm: sha256WithRSAEncryption
05:71:f7:e3:6d:6c:4f:79:21:3c:d0:74:c6:af:ac:fd:81:99:
1d:33:c1:4b:c6:f8:0c:b7:2b:34:c1:6b:62:4b:9a:b2:92:bc:
34:48:86:4f:0b:56:2c:1b:a7:65:b2:29:67:cd:25:44:3f:39:
90:78:9a:68:5a:c3:fb:a1:72:b4:10:b5:69:ac:e7:d0:97:19:
39:91:5d:68:1d:cf:d5:08:5c:cb:1f:b5:54:51:ca:48:e2:09:
83:b4:16:d6:88:95:ea:1b:36:80:62:09:34:56:d5:d0:d2:1d:
e8:c5:3e:dd:80:84:2b:fc:cb:e5:42:5d:c4:0a:68:3b:05:5d:
9c:0f:0f:f8:c5:de:03:26:d9:e8:02:29:90:3c:f3:13:6d:d6:
8b:63:45:16:73:d3:c0:ef:2d:0b:ae:b0:40:21:dd:73:09:b6:
9b:b5:06:38:f0:19:96:ea:98:a9:ee:11:90:20:48:d4:a8:71:
f2:d4:8a:56:cf:81:51:41:62:69:65:1b:22:d6:51:d9:83:9f:
43:ed:e2:ff:25:3a:78:8d:14:11:c9:b0:a1:96:8a:d1:c4:a7:
53:25:64:d1:ea:38:82:d7:74:aa:e6:b9:64:7c:2c:2e:60:53:
a6:1f:cd:70:4f:70:56:c5:3d:87:69:5f:70:00:45:75:1d:e2:
b1:fe:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:12:05 2025 by rpki-client