Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QnmwRez3sWMSm7pQ4QxAB9vO11w.roa
File: QnmwRez3sWMSm7pQ4QxAB9vO11w.roa (raw, json)
Hash identifier: kEC0HMPhnVeGWszfJObgaA6w9AJe1Inficj/GyHj2WY=
Subject key identifier: 42:79:B0:45:EC:F7:B1:63:12:9B:BA:50:E1:0C:40:07:DB:CE:D7:5C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019811B8F0E19D368FE6192327B38C3C12A3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QnmwRez3sWMSm7pQ4QxAB9vO11w.roa
Signing time: Wed 16 Jul 2025 05:33:09 +0000
ROA not before: Wed 16 Jul 2025 05:33:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 151.241.0.0/24 maxlen: 24
151.241.2.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.244.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:11:b8:f0:e1:9d:36:8f:e6:19:23:27:b3:8c:3c:12:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 05:33:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4279b045ecf7b163129bba50e10c4007dbced75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:af:fa:2a:fc:e4:8a:92:ac:f6:1d:bc:0e:
18:75:f2:0d:29:e7:2a:a6:c6:21:43:55:a7:55:8a:
aa:0e:6d:f6:4e:33:de:00:77:40:f8:19:c3:cf:4c:
c1:ec:c3:0d:52:eb:9a:f3:97:99:dc:85:d0:0a:06:
45:b4:35:72:6a:ae:52:83:82:8f:9d:f3:c5:c1:cd:
3a:70:f7:b8:ec:c1:5b:7c:54:05:aa:5f:e4:0e:57:
9f:c0:fc:b0:45:78:51:cb:3e:33:33:b2:d3:23:92:
74:70:ee:d6:78:e0:88:a8:73:00:2f:a3:a6:11:7f:
e1:ec:f7:36:46:71:53:f0:23:09:31:57:82:97:7b:
ba:ac:da:55:11:89:a3:99:03:9a:fd:d0:2d:cd:81:
f3:17:69:f6:e1:10:6c:95:fb:4a:67:fb:60:87:c7:
d2:bc:3f:f3:45:35:dd:53:a5:00:e0:6c:42:5e:73:
65:44:03:db:92:89:91:2f:b4:02:75:6d:cf:81:00:
a5:64:04:ea:c1:02:84:4d:21:7d:4d:ea:10:24:4d:
63:05:62:44:f3:8a:07:63:ba:91:5f:66:e5:1a:c5:
b4:f5:db:7c:05:59:4e:0c:54:c0:b9:9a:ba:6c:e9:
0f:30:96:12:52:79:f0:12:37:a5:8f:0b:ce:c3:8a:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:B0:45:EC:F7:B1:63:12:9B:BA:50:E1:0C:40:07:DB:CE:D7:5C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QnmwRez3sWMSm7pQ4QxAB9vO11w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.0.0/24
151.241.2.0/24
151.241.4.0/24
151.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dc:f0:95:b9:c8:57:68:ff:48:9f:e9:f7:98:21:e7:17:87:
17:b9:99:f2:74:7a:ca:4d:1b:14:a1:b7:47:35:c3:b1:d5:59:
3b:ee:3c:72:89:c6:ff:99:c4:02:a4:b5:64:09:72:9e:43:1b:
68:8c:5f:cb:79:ed:93:89:11:79:08:0f:bb:4f:47:e1:3e:6e:
d6:4a:97:cb:b5:5e:59:da:5e:b1:7f:7f:5f:dc:56:19:80:2c:
15:64:01:bd:67:22:98:38:10:db:fe:73:8a:a7:fe:2b:d9:e1:
22:c0:05:6a:78:64:bd:65:47:02:26:89:c2:a3:88:65:2f:4b:
1c:82:ee:32:39:bf:d8:02:57:be:34:fe:05:31:1f:0c:4c:00:
69:1d:ed:93:2e:84:d2:9c:28:70:cb:f7:aa:ec:f2:d5:04:1f:
1d:55:61:5b:ee:26:3f:aa:96:67:d4:20:f6:45:9b:44:0f:99:
9c:d4:26:02:8e:1c:4d:d7:a1:4f:2c:c2:f3:3c:39:62:06:a6:
71:dc:e1:3a:86:85:7d:bb:0e:ff:29:c9:a0:e9:ab:41:4b:bc:
92:2d:43:ca:b5:00:59:b9:db:12:04:38:6d:a4:24:cc:00:c1:
d7:66:e3:bc:3c:25:01:87:e9:01:01:4a:1e:b7:2e:60:26:7f:
9a:46:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:47:24 2025 by rpki-client