Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FbQz7ohZie0CJv0L_-2vGC2g6js.roa
File: FbQz7ohZie0CJv0L_-2vGC2g6js.roa (raw, json)
Hash identifier: Z0LHJk6vVAcpkqnSDC9GLJnsZN46yEB0r5+UH80oxwQ=
Subject key identifier: 15:B4:33:EE:88:59:89:ED:02:26:FD:0B:FF:ED:AF:18:2D:A0:EA:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01973B5B726B9B021256BAECCEA76A1C2FD3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FbQz7ohZie0CJv0L_-2vGC2g6js.roa
Signing time: Wed 04 Jun 2025 14:32:18 +0000
ROA not before: Wed 04 Jun 2025 14:32:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 151.240.1.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.116.0/24 maxlen: 24
151.240.117.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.243.20.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:5b:72:6b:9b:02:12:56:ba:ec:ce:a7:6a:1c:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 14:32:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15b433ee885989ed0226fd0bffedaf182da0ea3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:74:28:b5:99:22:60:66:b9:8e:c7:fe:bf:
7e:d3:6b:a5:68:b1:e0:2d:84:7c:fb:16:73:63:3c:
da:5f:d6:a5:94:a6:0e:26:2a:2d:b6:ce:f0:86:0e:
82:93:17:60:60:87:c5:e5:a2:16:09:21:ce:d9:8f:
b0:fe:70:4e:f2:4a:b3:a0:31:1f:c0:28:21:08:62:
07:e7:df:6e:b1:05:6d:82:e3:71:12:a0:95:b3:fb:
34:f8:36:a3:db:22:03:d5:bf:59:ab:12:61:07:d3:
be:4d:41:6b:b4:a2:a1:f5:9b:61:e5:67:75:aa:e8:
2f:45:20:d3:37:5a:02:af:85:06:6a:8f:45:93:ca:
a6:0e:b5:c9:4f:8a:c8:43:46:df:9d:70:a7:6f:7a:
36:09:11:31:b1:50:01:44:7c:f8:24:c4:b5:18:a7:
3b:a9:7b:23:78:4d:30:77:a7:21:5a:89:b3:37:a2:
cf:e3:93:9f:e7:cc:ae:1a:40:34:ac:54:c0:50:25:
67:5a:3f:cd:ed:0c:a6:29:71:49:6d:79:4c:5f:bc:
85:91:5d:c7:40:d7:07:7f:67:8a:61:6a:e4:28:42:
7a:7b:d8:c6:09:4f:33:27:61:8d:7c:47:26:d6:ac:
52:b8:b1:29:ed:45:40:04:55:49:e8:b7:50:2b:e5:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:33:EE:88:59:89:ED:02:26:FD:0B:FF:ED:AF:18:2D:A0:EA:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FbQz7ohZie0CJv0L_-2vGC2g6js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0-151.240.7.255
151.240.9.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.90.255
151.240.96.0-151.240.100.255
151.240.110.0/24
151.240.116.0/23
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.241.18.0/24
151.242.88.0/24
151.242.91.0/24
151.243.20.0/24
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e9:5d:cb:33:9b:d0:95:7f:9e:e0:68:0e:36:b2:5f:ca:9f:
a3:1d:04:fd:18:c9:71:97:d4:6b:80:a0:a2:43:97:72:3a:6d:
b5:ea:3a:09:a6:a9:8a:ff:16:b4:ae:65:3d:9d:d1:75:d0:f8:
19:d8:13:ac:1e:67:91:a8:36:a0:e9:ff:aa:8b:f3:09:1d:98:
02:86:6c:c7:c3:9a:b3:4c:a8:17:b4:1f:7b:59:ed:ba:19:5d:
c1:5b:99:5c:fc:06:46:20:8d:af:2f:e3:6b:d2:4e:dd:d8:97:
bf:6f:6e:06:7d:4d:c9:6c:6b:a0:f6:c4:8b:cf:99:70:36:72:
13:f2:1b:d5:2d:57:45:0c:de:f1:ff:88:85:8e:52:7f:1c:89:
81:54:f7:b1:fc:b4:a8:7a:ba:91:0b:07:e0:66:6d:1f:c4:e3:
ba:53:e4:f2:08:f3:85:ae:02:fa:50:cc:0d:a8:96:ae:a2:f5:
fd:1d:fd:24:e5:53:92:75:ea:67:29:15:73:a2:ba:c8:69:ea:
91:dc:eb:23:e4:07:d5:fa:56:10:06:bf:3b:c7:4b:cc:67:21:
7a:8f:3d:39:2e:2b:7b:68:c6:7d:f9:6f:e1:4a:4b:b1:b8:09:
d5:99:5c:78:ac:07:dd:c2:15:f6:bb:69:64:cc:08:d7:80:69:
a8:34:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:37 2025 by rpki-client