Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WMNVD2jCkQySGKJyEkepfMR3Bvg.roa
File: WMNVD2jCkQySGKJyEkepfMR3Bvg.roa (raw, json)
Hash identifier: 6Maqe8w/gwjROyKJWqgOaaAY7t801VBfr7KvX5BBm/c=
Subject key identifier: 58:C3:55:0F:68:C2:91:0C:92:18:A2:72:12:47:A9:7C:C4:77:06:F8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197ED62421EC0A4A1A8BB90D870FCE79FAC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WMNVD2jCkQySGKJyEkepfMR3Bvg.roa
Signing time: Wed 09 Jul 2025 04:12:09 +0000
ROA not before: Wed 09 Jul 2025 04:12:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 151.241.5.0/24 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:62:42:1e:c0:a4:a1:a8:bb:90:d8:70:fc:e7:9f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 04:12:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c3550f68c2910c9218a2721247a97cc47706f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:13:2d:2a:2d:a0:c4:3e:cd:44:b1:82:46:
64:b8:31:37:08:5e:a6:aa:62:32:d5:a0:fc:f6:46:
3c:33:d4:b8:d2:03:25:6a:59:d5:08:ec:48:6f:13:
20:63:be:43:2f:cd:2b:2d:23:6f:99:8e:cb:e0:3c:
e2:82:e9:0f:02:99:da:91:d5:ba:98:9d:01:40:70:
14:c7:6d:18:db:82:99:d3:2c:f0:23:fe:03:3f:03:
e1:74:45:9b:ea:ca:84:32:2f:46:0f:54:f6:12:19:
b2:1d:0d:8d:23:36:24:21:85:40:2a:cd:b2:93:ec:
ad:f1:7c:f3:ae:b5:e0:ea:d8:c2:ed:0c:84:d3:a0:
66:7d:c2:b0:9b:3a:4e:64:80:62:db:eb:42:68:99:
c6:22:e6:84:21:9c:36:f3:8e:55:22:3b:f0:ad:d2:
df:4c:f3:93:11:1a:ff:37:84:5c:b2:16:90:53:d6:
d8:fa:b4:a1:d6:d5:7d:cf:ba:1b:14:b4:04:8d:fa:
f0:b5:19:43:0d:cc:0c:25:99:44:6d:de:ba:31:04:
35:40:ba:f0:26:8e:71:c2:32:ac:dd:9e:8f:df:72:
74:c2:7e:02:22:72:40:2f:f5:6e:d8:0a:99:b6:07:
88:41:af:24:09:a8:6c:78:93:1a:a2:2b:61:e9:4e:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:55:0F:68:C2:91:0C:92:18:A2:72:12:47:A9:7C:C4:77:06:F8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WMNVD2jCkQySGKJyEkepfMR3Bvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.5.0/24
151.242.15.0/24
151.242.74.0/24
151.242.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:11:e5:cf:37:8d:ad:ea:a5:b9:a9:dc:1c:99:c9:37:62:d6:
c1:ba:1c:c0:6c:9f:15:d1:52:61:c2:70:21:1a:c4:ed:b9:f3:
64:69:6e:e1:b7:82:3d:7b:26:15:84:09:f6:55:62:37:ab:48:
ab:9e:f3:13:e7:d3:f3:cc:48:a1:27:de:eb:40:9f:e6:6f:41:
4c:77:ce:c6:3d:3d:3b:cc:ea:5e:31:da:e0:df:5b:96:7c:84:
21:a1:c1:35:38:da:d4:f7:90:da:08:0a:87:c0:2a:9c:70:d9:
b2:43:87:86:fe:c9:97:f9:5a:f9:a1:0c:2d:76:fd:76:3e:84:
d2:fb:63:3b:bb:14:01:fe:4c:44:e9:3a:a2:5d:77:6a:2e:f0:
11:ac:63:5d:e3:21:68:42:3b:35:4e:d6:cb:27:d7:79:ae:00:
41:83:30:a8:51:14:0f:e7:10:8f:87:a1:1d:e9:8c:a5:d8:9a:
09:60:57:07:33:94:78:8f:36:5b:71:f8:94:49:15:bb:78:5f:
72:75:b1:b4:91:ba:13:dc:e9:4c:79:3c:1f:51:41:57:16:60:
83:be:3a:34:5d:9c:a2:5f:09:e8:af:21:73:6f:b7:56:c4:25:
2f:b9:74:bd:57:bf:df:7e:79:d4:eb:9f:72:00:c5:da:f5:28:
cd:f6:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:50 2025 by rpki-client