Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mLZErNDk3s-ydxeNn32OzMWhMsc.roa
File: mLZErNDk3s-ydxeNn32OzMWhMsc.roa (raw, json)
Hash identifier: 1PVeUCSnVCpM/Bow5TFKReYpI5ARLL/23Wfr3yK8qUc=
Subject key identifier: 98:B6:44:AC:D0:E4:DE:CF:B2:77:17:8D:9F:7D:8E:CC:C5:A1:32:C7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196D98D7D7D00BFDC42BE939FDF9C0E8DC4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mLZErNDk3s-ydxeNn32OzMWhMsc.roa
Signing time: Fri 16 May 2025 14:44:10 +0000
ROA not before: Fri 16 May 2025 14:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149573
IP address blocks: 151.243.12.0/24 maxlen: 24
151.243.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:8d:7d:7d:00:bf:dc:42:be:93:9f:df:9c:0e:8d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 16 14:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98b644acd0e4decfb277178d9f7d8eccc5a132c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:2d:69:a4:2e:dc:65:64:ed:6c:4b:be:fc:
10:15:12:0f:42:5f:85:01:21:0e:92:b2:c3:10:71:
20:25:f4:59:3b:9f:dd:4b:90:6d:b8:bb:e3:d4:b6:
8f:77:35:f0:61:8a:9d:83:d5:bb:34:02:5b:7e:02:
63:b5:b4:15:98:52:f8:88:79:54:1f:18:09:0b:19:
2e:ef:28:48:ed:c9:5e:1f:59:29:4d:0e:7b:85:90:
97:51:88:4f:57:2a:6a:49:54:88:fd:56:eb:0e:57:
e8:0e:3d:68:0a:0d:ca:9e:0c:4e:af:6d:58:48:2d:
d1:7f:80:86:4e:56:39:8b:9e:65:2d:e2:ed:89:c2:
05:8d:09:f5:4e:78:14:ff:ed:10:89:3b:55:d7:49:
54:43:da:92:9d:e4:b3:9c:6a:dd:ce:0c:c1:a1:1b:
d8:51:bf:fd:a0:c6:91:34:db:66:e8:3c:9a:94:dc:
ac:f9:26:da:6f:e0:bf:5c:b1:1a:41:e7:f0:c9:e2:
5c:91:5b:b9:2e:93:cd:6b:1c:7b:6b:e9:b5:0d:1d:
87:e0:88:42:09:06:80:55:9b:cc:ad:a1:34:9e:86:
3a:41:40:f4:2f:d8:5f:05:e3:ac:95:c5:e7:3a:64:
87:23:92:7c:75:00:ba:50:4a:a8:7d:37:3f:91:f7:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B6:44:AC:D0:E4:DE:CF:B2:77:17:8D:9F:7D:8E:CC:C5:A1:32:C7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mLZErNDk3s-ydxeNn32OzMWhMsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.12.0/24
151.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:43:16:4f:36:28:8f:d6:98:a4:dd:13:9d:f4:f0:d0:18:6d:
18:fd:84:de:d6:e2:a5:d7:6f:50:60:80:39:1d:6d:b1:f4:35:
60:65:80:de:6a:8c:24:2e:7b:40:31:53:8e:b8:95:44:b5:b1:
25:f1:b1:6a:6b:a7:26:58:99:d8:da:b3:14:6e:5a:f3:b2:6f:
02:07:82:b8:b3:ac:d6:7d:03:06:06:ad:9c:04:f4:09:a1:ce:
d7:93:b3:87:ac:20:85:7b:76:17:4c:4c:a6:b4:26:c8:11:4b:
2a:cd:16:b7:13:e1:5f:80:85:b8:c5:6c:8f:37:f1:52:cb:2c:
15:49:0a:fa:e4:63:64:ed:b9:37:2e:a9:33:b0:9b:f6:d3:b9:
c9:3f:4b:2a:38:18:7f:01:4c:11:38:8c:91:45:e3:79:ae:33:
7c:2c:46:90:14:16:97:92:8f:ea:45:bb:95:fc:18:99:e1:0d:
30:1d:fb:0e:60:6f:3a:a6:5d:f7:34:57:6b:bc:57:f0:29:f1:
3b:ce:bc:ad:36:cc:4b:fb:06:e2:6a:80:7e:5d:8d:c2:98:8b:
a5:4e:91:2d:45:51:d6:ea:54:91:b7:c3:68:77:06:ec:a3:21:
e1:7e:69:93:ce:86:47:33:2e:45:81:c0:fc:68:7d:2e:26:a3:
b3:97:d1:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbZjX19AL/cQr6Tn9+cDo3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTE2MTQ0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGI2NDRhY2QwZTRkZWNmYjI3NzE3OGQ5ZjdkOGVjY2M1YTEzMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZktaaQu3GVk7WxLvvwQFRIPQl+F
ASEOkrLDEHEgJfRZO5/dS5BtuLvj1LaPdzXwYYqdg9W7NAJbfgJjtbQVmFL4iHlU
HxgJCxku7yhI7cleH1kpTQ57hZCXUYhPVypqSVSI/VbrDlfoDj1oCg3KngxOr21Y
SC3Rf4CGTlY5i55lLeLticIFjQn1TngU/+0QiTtV10lUQ9qSneSznGrdzgzBoRvY
Ub/9oMaRNNtm6DyalNys+Sbab+C/XLEaQefwyeJckVu5LpPNaxx7a+m1DR2H4IhC
CQaAVZvMraE0noY6QUD0L9hfBeOslcXnOmSHI5J8dQC6UEqofTc/kffKBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJi2RKzQ5N7PsncXjZ99jszFoTLHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbUxaRXJORGszcy15ZHhlTm4zMk96TVdoTXNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/MMAwQA
l/NiMA0GCSqGSIb3DQEBCwUAA4IBAQANQxZPNiiP1pik3ROd9PDQGG0Y/YTe1uKl
129QYIA5HW2x9DVgZYDeaowkLntAMVOOuJVEtbEl8bFqa6cmWJnY2rMUblrzsm8C
B4K4s6zWfQMGBq2cBPQJoc7Xk7OHrCCFe3YXTEymtCbIEUsqzRa3E+FfgIW4xWyP
N/FSyywVSQr65GNk7bk3LqkzsJv207nJP0sqOBh/AUwROIyRReN5rjN8LEaQFBaX
ko/qRbuV/BiZ4Q0wHfsOYG86pl33NFdrvFfwKfE7zrytNsxL+wbiaoB+XY3CmIul
TpEtRVHW6lSRt8NodwbsoyHhfmmTzoZHMy5FgcD8aH0uJqOzl9H3
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:20 2025 by rpki-client