Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ikmyIxIC5hnxSj6K3EFfFwEa3ek.roa
File: ikmyIxIC5hnxSj6K3EFfFwEa3ek.roa (raw, json)
Hash identifier: ZMEbBPZo6aJiWLdzxrQmQA2j0Bx4lx076HxvW3t+7vk=
Subject key identifier: 8A:49:B2:23:12:02:E6:19:F1:4A:3E:8A:DC:41:5F:17:01:1A:DD:E9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01971D4B2D1A31CCBE93E233E134D8CC323D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ikmyIxIC5hnxSj6K3EFfFwEa3ek.roa
Signing time: Thu 29 May 2025 18:25:55 +0000
ROA not before: Thu 29 May 2025 18:25:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 151.242.3.0/24 maxlen: 24
151.242.6.0/24 maxlen: 24
151.242.24.0/24 maxlen: 24
151.242.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:4b:2d:1a:31:cc:be:93:e2:33:e1:34:d8:cc:32:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 29 18:25:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a49b2231202e619f14a3e8adc415f17011adde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:dd:ec:96:24:e1:a3:63:3f:f5:83:6b:36:
fe:d2:f9:15:f6:14:9c:05:d1:e3:d9:21:da:66:25:
c6:d8:5d:d4:2c:90:cc:db:ba:ce:6a:99:16:e7:bb:
f3:b5:72:66:01:ae:89:21:06:5b:d4:75:6c:2b:39:
0b:c8:a7:7a:35:d1:ca:48:fd:4f:a0:ed:b8:3a:9f:
35:f9:86:a8:d4:0d:61:49:84:fd:63:c9:24:91:48:
20:ae:41:fa:20:e3:f6:ef:5a:86:6f:54:a7:84:67:
b7:70:ad:7b:21:b1:59:60:b3:13:30:7b:4d:06:db:
0d:4f:d1:d3:ce:11:05:d7:1e:eb:17:43:4e:08:be:
1b:bf:8d:d7:3b:69:e8:3c:9f:d6:61:55:8d:1d:af:
83:68:92:27:3b:f7:d5:00:85:71:cd:02:2a:c2:8b:
b9:54:4f:54:d6:4a:2d:cd:ad:31:10:7f:d0:e5:ed:
94:bd:cc:de:ca:88:13:d0:d2:33:5a:c0:ad:57:63:
ef:cf:ed:df:ff:48:b5:d4:fc:56:23:7c:22:09:ee:
b3:0e:09:82:e3:57:df:75:2f:aa:be:13:d5:3a:0c:
a6:eb:7d:ba:95:02:3f:9d:69:5e:7f:e7:c6:98:93:
b9:08:ab:a8:27:ca:bf:82:3d:f7:88:19:b4:ed:af:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:49:B2:23:12:02:E6:19:F1:4A:3E:8A:DC:41:5F:17:01:1A:DD:E9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ikmyIxIC5hnxSj6K3EFfFwEa3ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.3.0/24
151.242.6.0/24
151.242.24.0/24
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
83:92:f6:aa:f5:0b:bb:91:3f:36:16:58:f9:29:f9:17:fa:27:
36:e8:ab:48:98:00:f7:87:eb:66:e6:1d:fc:02:6e:ed:55:c3:
86:c0:c2:77:8e:4d:3f:63:ff:63:f4:3d:13:28:09:5d:4f:80:
a6:26:6d:f4:85:43:d9:c2:e2:60:67:80:55:f0:c6:22:a3:32:
59:68:87:5b:a7:e3:14:30:90:e0:f3:f7:72:76:0a:60:24:b1:
60:e9:07:cd:17:39:f5:88:ef:9d:5f:cc:6f:f2:09:dc:26:18:
82:6d:fb:45:50:c5:b3:d5:ea:ac:04:84:aa:c3:74:93:61:ac:
30:30:dd:b1:b3:f9:4f:48:fe:ca:d2:29:f8:c6:24:f1:f4:8d:
bd:05:86:3a:bc:cc:75:d4:bf:04:c2:eb:17:81:e8:09:c9:ea:
1f:21:b8:c9:9c:ab:c9:e9:9e:b8:b9:67:51:8c:ad:72:67:3a:
ad:66:97:20:a3:0a:de:b6:4b:a7:4c:ae:58:58:38:4e:0d:27:
d9:64:c7:d0:3c:9b:fa:38:c0:da:e9:a9:56:6b:be:a0:02:7d:
55:50:81:c1:77:cf:9c:7d:5c:f9:9d:94:af:a3:3e:0d:49:6c:
90:09:9f:46:be:4d:78:46:a3:a8:93:ff:7d:2f:ef:e7:77:96:
a3:c0:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:08:25 2025 by rpki-client