Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lHKWX2JzdJsqsRuGawsRXLFxwmo.roa
File: lHKWX2JzdJsqsRuGawsRXLFxwmo.roa (raw, json)
Hash identifier: sSe4I6L4Qx4tPJOfNjYOTMnB9q31zRqbGjsOEDGabuQ=
Subject key identifier: 94:72:96:5F:62:73:74:9B:2A:B1:1B:86:6B:0B:11:5C:B1:71:C2:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196D99210DC1BED47346DF6926A323BD93F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lHKWX2JzdJsqsRuGawsRXLFxwmo.roa
Signing time: Fri 16 May 2025 14:49:10 +0000
ROA not before: Fri 16 May 2025 14:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.243.176.0/21 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:92:10:dc:1b:ed:47:34:6d:f6:92:6a:32:3b:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 16 14:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9472965f6273749b2ab11b866b0b115cb171c26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:65:57:0e:89:25:c2:42:94:59:4a:51:72:
9d:85:98:1c:d1:22:3a:8a:3c:2b:9c:b0:b9:ce:f7:
f4:f3:85:20:f0:3e:bc:fe:13:41:3d:ab:be:f3:4c:
49:92:0a:73:97:8a:cd:3a:87:31:74:1a:4c:98:e2:
4f:85:1c:4f:56:cd:44:01:9c:db:c4:f8:74:9d:66:
b9:63:f2:70:f7:2f:ad:f8:7e:db:38:cc:3c:35:1e:
cb:ba:d0:12:12:e8:62:99:09:10:34:e0:ec:3c:a7:
04:63:0b:1a:60:80:03:22:6b:7d:85:d1:d3:2a:90:
3e:b3:43:1b:05:22:d3:b6:b5:38:87:0d:56:2a:45:
8f:41:ba:c2:ed:09:71:ae:d4:27:67:66:c3:24:43:
67:00:41:1a:40:93:28:f9:34:99:a9:ba:0f:07:b3:
a0:57:c0:41:38:ae:16:76:e5:c2:79:30:1a:62:34:
c4:f3:3e:0d:13:f2:9e:0c:23:a1:4c:1c:bf:b2:0b:
87:f9:eb:cc:9d:19:7d:63:5d:91:f3:5b:ab:07:f5:
4d:8e:bf:9b:e5:c2:6d:a6:f1:d4:18:fa:ca:60:fe:
1b:9f:e5:71:bb:c6:6d:d3:4e:50:fc:a2:70:97:5a:
fa:39:af:a3:fe:c6:70:1f:ec:49:82:01:2e:b6:9c:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:96:5F:62:73:74:9B:2A:B1:1B:86:6B:0B:11:5C:B1:71:C2:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lHKWX2JzdJsqsRuGawsRXLFxwmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.176.0/21
151.243.192.0/21
151.243.225.0/24
151.243.227.0/24
151.243.235.0/24
151.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bb:f5:69:33:98:79:c9:1c:2e:26:da:4c:ac:30:6d:9f:fa:
74:5a:c4:7f:51:df:b7:87:20:0c:d8:0b:44:9c:85:1d:d5:73:
ee:f7:a7:65:26:e1:b3:e8:19:d8:5e:9e:bd:f7:f2:78:1a:ae:
7a:a1:32:f6:c0:49:60:4b:4a:db:38:e1:87:51:b0:d6:11:4c:
e5:bc:41:bd:8c:5b:5b:e3:1c:c5:60:5b:75:19:65:e4:5a:76:
80:8e:62:6d:bb:a0:e8:b0:d7:49:ae:b1:ff:a6:29:87:a7:f0:
fb:8b:47:35:0e:47:7e:3a:bc:0a:53:2d:86:7c:d8:aa:ab:43:
ae:cd:85:6c:32:22:9a:62:e3:0b:d5:09:f1:d1:86:34:5f:a3:
9d:f3:f6:7c:50:e3:99:4f:00:d1:b9:db:03:aa:80:a8:fd:70:
7a:eb:92:73:20:c7:e8:53:87:dc:04:38:8c:6e:f7:c9:56:22:
d6:2a:52:4c:fa:34:3e:86:dc:54:b7:94:e5:f2:ee:eb:77:94:
60:ba:44:d6:3e:3b:24:31:cc:5a:cd:c7:cf:b9:86:3c:bb:2e:
34:ac:96:a0:b6:4e:a5:0c:b1:34:f4:50:35:31:8d:a8:dd:6b:
53:40:17:01:f7:90:60:df:60:e1:59:5c:5d:07:14:a0:ac:51:
6f:0f:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:04:44 2025 by rpki-client