Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bwHqppFrn8k4GMwciwWd1DbmCmI.roa
File: bwHqppFrn8k4GMwciwWd1DbmCmI.roa (raw, json)
Hash identifier: iyYoH7d3moX8YF8+pEH5bLXQsiQeE+YH7EyG47I0d0I=
Subject key identifier: 6F:01:EA:A6:91:6B:9F:C9:38:18:CC:1C:8B:05:9D:D4:36:E6:0A:62
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197A235720FD1C71CC1C7E175694978B38F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bwHqppFrn8k4GMwciwWd1DbmCmI.roa
Signing time: Tue 24 Jun 2025 13:51:40 +0000
ROA not before: Tue 24 Jun 2025 13:51:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 151.242.112.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.243.19.0/24 maxlen: 24
151.243.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:35:72:0f:d1:c7:1c:c1:c7:e1:75:69:49:78:b3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 13:51:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f01eaa6916b9fc93818cc1c8b059dd436e60a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:d8:13:d6:a1:55:92:95:59:b0:87:57:68:
61:25:4c:3f:76:8a:98:78:9f:99:c6:e2:f8:74:23:
80:1d:45:ae:bf:f4:e8:f4:16:dd:2c:ab:39:a2:d8:
0f:b1:3b:ca:e5:9d:e8:10:6d:67:f2:10:ee:b4:d9:
9f:cc:67:04:b6:8f:12:ad:d5:6a:f0:dc:9d:0d:d3:
9e:d6:79:5c:39:86:06:76:e6:b1:20:6c:1d:5d:1f:
59:a7:1c:cd:64:de:3e:93:2f:5a:1d:71:17:cc:83:
71:fd:24:cb:e6:ab:e8:2c:25:ca:af:28:7d:14:a4:
40:2a:1b:50:07:14:3a:d7:27:0f:8b:21:d7:08:67:
27:3e:4e:5a:2b:98:03:eb:89:59:38:c5:f1:b8:3c:
20:79:bd:b1:d1:8a:0a:7f:6c:a8:8b:8f:6a:f9:a9:
10:82:54:60:95:19:86:ca:4b:93:6e:71:59:31:3c:
7d:5f:7b:6c:b0:47:81:57:6a:93:c7:d5:aa:99:f3:
08:46:71:bf:44:2e:3c:34:09:16:1e:a1:5b:56:b6:
43:79:e8:26:0a:18:77:7b:d0:cc:e2:bc:8b:a7:c1:
75:0f:96:f0:a7:b7:ce:e8:5f:f0:c1:72:09:a8:0d:
d5:0c:21:a2:53:d1:14:47:5c:d3:fd:a9:c9:3d:e1:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:EA:A6:91:6B:9F:C9:38:18:CC:1C:8B:05:9D:D4:36:E6:0A:62
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bwHqppFrn8k4GMwciwWd1DbmCmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.112.0/24
151.242.173.0/24
151.243.19.0/24
151.243.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8a:6e:3e:2f:82:c0:00:e2:ee:9d:78:a0:36:99:5f:8f:56:
bb:30:29:8e:6c:d1:8c:13:ee:ac:0c:a0:78:73:51:a8:cd:8f:
d0:82:67:e0:20:aa:0f:a5:dc:60:95:7c:69:1c:67:0f:cb:c3:
f0:ad:0a:ed:a9:36:bb:9c:04:8c:83:b1:30:34:ce:19:bc:ad:
5d:f7:8c:4e:3a:46:1f:a4:f6:08:c1:16:fc:84:b3:4c:35:84:
0b:d4:11:5b:fa:e4:a2:22:67:6b:79:17:57:6c:43:cf:95:e7:
6b:0d:74:3e:32:29:67:fc:fe:0b:8c:8c:89:66:d7:ce:7a:f8:
84:b0:49:86:e7:d7:4b:ea:e6:83:9f:0e:c9:70:ff:cb:ff:5a:
fe:a8:6f:16:17:c1:07:4e:76:5c:f8:b1:f3:0a:c3:49:61:5f:
4b:05:2e:6b:95:28:73:74:8f:34:6f:37:85:bd:d7:34:bf:58:
11:cd:5f:b7:0a:93:d2:01:9a:15:3e:a6:ab:36:19:e3:e7:9d:
c9:4f:7d:ab:24:45:df:99:70:eb:be:85:06:02:84:df:c7:84:
cd:33:12:e4:db:55:02:ef:c4:07:11:62:a7:0c:df:3c:20:52:
3b:ec:3e:bb:6c:f3:3b:c9:76:7b:5b:30:74:2a:7c:75:c5:63:
f7:2e:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:50:26 2025 by rpki-client