Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3MVVtoiT1WU9xPQ3Bhg6NpW2R-U.roa
File: 3MVVtoiT1WU9xPQ3Bhg6NpW2R-U.roa (raw, json)
Hash identifier: cFOlceGWEj+KpPCOjumQlNOLLZlO0BPepXEdQc25g24=
Subject key identifier: DC:C5:55:B6:88:93:D5:65:3D:C4:F4:37:06:18:3A:36:95:B6:47:E5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196B3A05348DE744768FA1D99393B8197AE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3MVVtoiT1WU9xPQ3Bhg6NpW2R-U.roa
Signing time: Fri 09 May 2025 05:59:10 +0000
ROA not before: Fri 09 May 2025 05:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213685
IP address blocks: 151.242.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 19:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a0:53:48:de:74:47:68:fa:1d:99:39:3b:81:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 9 05:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcc555b68893d5653dc4f43706183a3695b647e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:9d:40:f4:ad:a5:c5:e1:9f:16:77:dc:8c:
d1:4e:cf:c1:64:e5:a5:0f:25:f8:39:4c:25:29:11:
b0:6a:0d:47:94:bd:e0:da:96:47:0b:9e:5f:78:a5:
f7:9e:88:0a:4e:8b:48:1d:4b:60:13:f5:00:f2:2e:
0d:29:31:59:bf:49:e8:58:b1:67:74:c6:18:73:da:
4a:e2:5d:7e:04:53:1f:77:da:25:3c:6a:77:39:7b:
02:76:a4:54:2d:32:e7:08:51:4f:f9:f5:8f:af:b5:
15:a9:f6:01:ce:ba:c2:4a:7d:44:08:b5:eb:aa:c8:
9f:bf:03:7a:79:7e:e4:60:43:4a:7c:78:49:c9:6c:
a5:b1:0b:73:64:64:e2:98:25:e4:c3:c4:67:08:e1:
8e:31:cd:53:9f:06:29:5b:53:e7:35:5d:e1:74:93:
0f:cb:cc:4c:c3:ba:30:e2:e6:41:db:af:00:7d:a6:
97:c5:1f:b5:ac:3c:fb:dc:fd:d4:a2:cd:d0:d2:8c:
ca:18:f5:08:90:8c:93:91:b1:34:19:81:72:22:53:
4e:af:dd:fa:4a:c2:c2:c0:58:4b:f1:9a:98:bf:41:
ac:03:04:18:19:d8:9d:9f:ca:d2:db:40:84:72:f0:
40:10:2e:3a:b6:6f:68:b7:14:b0:3b:8a:e2:89:58:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C5:55:B6:88:93:D5:65:3D:C4:F4:37:06:18:3A:36:95:B6:47:E5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3MVVtoiT1WU9xPQ3Bhg6NpW2R-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.52.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9d:e7:db:23:a1:ff:72:84:20:eb:84:b6:b0:c7:c0:06:59:
d2:2a:e4:42:c4:cd:ac:b7:e3:14:87:90:b4:14:2d:bc:77:73:
b7:df:5f:21:94:4e:f8:36:00:3c:e5:b7:6f:79:a0:29:16:9b:
70:2b:90:fe:5f:20:c4:49:48:9e:95:2a:af:7f:d2:b7:30:9c:
7c:6c:a5:4f:4b:2a:af:8e:0b:c0:1d:d4:e5:55:dc:1c:6f:6a:
8a:33:9c:bd:e4:d6:75:99:df:78:c4:a5:98:d9:31:f9:43:6b:
68:39:e5:7d:6f:04:69:69:46:f7:ff:6a:5b:15:51:a8:06:75:
9a:55:52:7f:f4:3d:7f:e3:9d:c1:97:ec:e6:03:a5:0f:bc:07:
95:d3:3b:d0:53:85:f8:2e:a1:40:96:91:14:0a:9b:19:e9:c6:
8e:e9:bb:4b:e2:85:8b:87:1c:85:54:69:d5:17:25:b0:0c:f2:
17:02:75:a3:61:af:57:22:51:06:fa:84:f4:26:2d:d2:67:db:
f1:80:21:53:9f:db:14:24:22:8e:5b:52:0f:2d:35:8d:77:87:
ad:df:c9:2d:bc:22:67:e3:2b:92:3f:86:c5:ad:91:a9:78:6e:
14:1e:04:b5:c0:a2:c6:23:1e:3f:e7:0e:a9:f2:fe:ef:19:ef:
e3:5f:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:48:13 2025 by rpki-client