Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bpkMxDDoaOZRgPyoel4k33SVIoQ.roa
File: bpkMxDDoaOZRgPyoel4k33SVIoQ.roa (raw, json)
Hash identifier: SSnstW9FM1mjIMQErexBQr8NmVBmIOwDMDpdtagKG+Q=
Subject key identifier: 6E:99:0C:C4:30:E8:68:E6:51:80:FC:A8:7A:5E:24:DF:74:95:22:84
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1C05D832B28EDD23F06F3C3D30B7EE5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bpkMxDDoaOZRgPyoel4k33SVIoQ.roa
Signing time: Fri 27 Jun 2025 14:17:43 +0000
ROA not before: Fri 27 Jun 2025 14:17:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.152.0/22 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:c0:5d:83:2b:28:ed:d2:3f:06:f3:c3:d3:0b:7e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 14:17:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e990cc430e868e65180fca87a5e24df74952284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:b5:0e:66:e0:fd:e7:44:95:09:4d:9c:1c:
17:3e:20:9e:11:82:9f:36:50:97:2c:52:4a:39:2e:
95:16:80:6c:ac:e7:95:1a:d8:c2:da:e2:eb:00:e5:
af:9a:9f:90:b4:9f:e7:ac:8a:c2:ac:a0:09:2c:08:
1c:6c:b8:f9:4a:17:9c:c5:47:e0:e0:d0:38:4a:07:
dc:87:a7:a7:71:ae:af:dc:e6:2f:97:15:3a:a2:5e:
16:e0:12:e9:d4:45:d8:24:3d:ec:64:14:89:83:f0:
9f:03:28:43:72:c7:f9:c7:97:8a:0f:16:e5:08:64:
9a:42:eb:5a:b8:71:b6:e5:93:10:dc:cc:6a:87:8b:
77:a4:44:3d:94:b4:c7:70:80:9e:51:35:2e:41:75:
4b:0d:90:aa:42:3b:c0:47:ac:d3:3d:0d:35:d6:66:
b2:14:ad:89:64:00:1d:19:03:5a:55:13:cc:7a:2d:
86:09:fe:77:1e:84:a3:a7:bf:d5:09:70:00:d8:fc:
fb:db:32:c5:4c:0e:08:dc:ff:cc:de:c9:2b:1e:a0:
d8:a8:b8:44:62:4c:84:56:1b:be:21:b6:59:ba:c8:
06:e4:13:0e:1e:8b:f1:06:e9:3a:8f:76:12:db:b6:
f7:e5:a8:4d:cf:5f:a3:df:58:83:a5:13:7f:ff:01:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:0C:C4:30:E8:68:E6:51:80:FC:A8:7A:5E:24:DF:74:95:22:84
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bpkMxDDoaOZRgPyoel4k33SVIoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.243.7.0/24
151.243.10.0/24
151.243.152.0/22
151.243.228.0/24
151.243.243.0/24
151.244.54.0/24
151.245.3.0/24
151.245.60.0/22
Signature Algorithm: sha256WithRSAEncryption
39:40:99:6d:f0:15:c0:98:f1:a7:5d:d7:fc:b0:1a:b4:e0:17:
73:62:67:d5:9f:56:70:c0:cf:43:f9:65:d9:09:87:8e:88:26:
13:7e:a6:e6:ba:2e:f7:5e:c5:5e:75:95:96:89:f5:d2:29:01:
64:85:f7:0c:bf:6b:ae:07:d2:9e:c4:cf:28:85:53:6f:54:6c:
47:5a:01:34:65:4b:1b:a7:d5:3a:ff:4f:9f:94:4d:95:82:23:
57:cf:78:3f:c5:0e:6a:ba:e3:91:a1:22:4e:f7:f8:db:80:a3:
ae:37:d3:8d:88:dc:6a:67:08:27:a8:3e:97:ab:a5:54:00:bd:
c3:a5:7d:cf:03:c8:39:92:8b:43:23:de:11:e7:50:b1:1a:ec:
69:f4:e7:00:c2:ec:a5:f8:6c:a4:0a:c4:6c:05:87:df:50:9a:
4e:37:e9:c4:b4:f6:a4:7a:90:6f:d5:7b:8a:8f:11:c6:95:af:
07:c9:60:f6:ef:77:6a:c9:b1:6f:67:d4:97:07:4c:dd:56:e2:
fc:01:99:d3:fb:67:09:a2:1f:2c:cd:3d:fe:49:51:dc:38:65:
9a:4f:f9:ee:f9:92:24:ab:bb:12:1c:a8:10:7f:9d:ba:0f:71:
f1:29:6e:69:b6:ff:1d:6b:67:be:de:f7:81:27:f5:eb:39:2e:
b2:fb:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:42:59 2025 by rpki-client