Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5UwGs0ZvnPXN3nS74StTxdwfue4.roa
File: 5UwGs0ZvnPXN3nS74StTxdwfue4.roa (raw, json)
Hash identifier: URY1ti5sRp/MwGwXYMW8W5FarRuNMNJMxeomkOIuOnI=
Subject key identifier: E5:4C:06:B3:46:6F:9C:F5:CD:DE:74:BB:E1:2B:53:C5:DC:1F:B9:EE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F92D4367149B4573EBC92A87C4AE7785
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5UwGs0ZvnPXN3nS74StTxdwfue4.roa
Signing time: Thu 22 May 2025 18:06:55 +0000
ROA not before: Thu 22 May 2025 18:06:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 151.240.255.0/24 maxlen: 24
151.242.122.0/24 maxlen: 24
151.242.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:2d:43:67:14:9b:45:73:eb:c9:2a:87:c4:ae:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:06:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e54c06b3466f9cf5cdde74bbe12b53c5dc1fb9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:51:cf:84:de:8b:c6:68:a0:ee:96:fb:27:
33:05:45:a8:26:27:ef:85:f0:69:d1:7f:ae:db:2d:
b2:c4:8e:2b:ca:ea:95:b2:b5:ac:4a:8b:06:66:51:
a8:77:87:c1:ac:bf:ac:62:43:58:ea:6d:50:da:e1:
bf:50:63:b8:e8:d6:27:56:61:62:3f:5b:75:a1:bb:
69:35:40:f2:1d:bd:94:6d:29:9c:1d:40:3d:fb:2a:
84:e5:12:1f:22:c0:2e:81:e0:4d:a4:a1:cb:61:ce:
64:6d:ee:5e:b0:59:2f:da:86:ef:68:43:60:68:82:
9e:ca:7e:45:48:25:1b:5d:0a:26:fd:7c:45:e4:b7:
2c:ce:e9:b0:f7:ae:23:5e:6f:f9:d6:94:27:c7:39:
1c:1e:cb:90:af:c3:0e:2b:67:54:31:2f:46:5e:73:
52:fc:fd:3c:b1:e0:95:41:18:87:b8:6b:83:bf:12:
5b:12:75:d6:0c:79:03:a2:fb:34:16:b1:06:2d:5e:
bc:71:67:4a:d8:9e:41:95:80:57:af:f3:c9:57:14:
04:49:90:c9:36:6d:58:3f:e1:8a:c8:32:ec:b5:00:
a6:2a:d7:a0:a1:2f:1a:22:50:d4:f1:eb:21:d7:4e:
92:0a:28:dd:7d:ee:99:a2:45:95:e8:b4:03:5e:f4:
60:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:06:B3:46:6F:9C:F5:CD:DE:74:BB:E1:2B:53:C5:DC:1F:B9:EE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5UwGs0ZvnPXN3nS74StTxdwfue4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.255.0/24
151.242.122.0/24
151.242.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ba:b4:4c:f3:58:af:4c:0a:58:19:db:ce:e3:69:18:62:67:
07:9e:d6:83:e3:4c:08:0e:71:fb:5f:c0:bc:fa:be:18:6c:41:
56:e0:5d:48:61:06:e2:77:0b:05:c7:ae:67:40:51:53:83:83:
53:ab:59:df:2f:11:6f:41:2b:d0:e1:a0:12:f7:74:49:af:34:
a4:de:98:b8:f8:5b:3b:e9:1f:50:da:a9:ad:19:d9:fc:86:36:
38:8c:2f:7b:c0:f0:bf:5e:a2:34:93:ee:07:93:87:9b:54:8d:
dc:6f:7e:e1:70:cb:73:b4:71:1e:e3:5b:27:dc:62:12:b1:62:
97:58:e2:94:a4:d4:3e:1f:7a:57:9d:32:a3:ad:0b:e4:42:0b:
88:54:1d:31:66:19:5b:07:03:42:07:15:4b:70:4a:46:f7:70:
af:bf:90:c3:d9:ec:ef:06:2d:81:b9:ba:55:ad:96:71:89:5d:
7c:8b:44:fb:64:86:7a:86:96:28:ca:4b:75:54:b4:ba:03:12:
12:7f:ac:ea:49:c0:ca:9e:97:09:6a:fe:6b:74:23:b7:a5:bf:
8f:c7:09:ef:03:36:87:b2:dd:8d:6a:e5:c4:71:7c:7d:5f:91:
3c:3e:fa:b8:ab:82:c8:9b:00:8f:6f:ac:22:69:13:a5:23:ab:
88:43:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:10:52 2025 by rpki-client