Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5SsaN_2U-djIS1quAADjJClZDS4.roa
File: 5SsaN_2U-djIS1quAADjJClZDS4.roa (raw, json)
Hash identifier: LZ77qfv9hrFjNakKCoDY8vD6BMFfoZzA3eaEQLOtD0Q=
Subject key identifier: E5:2B:1A:37:FD:94:F9:D8:C8:4B:5A:AE:00:00:E3:24:29:59:0D:2E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196CE60773911860C77D35177D1162D8EDD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5SsaN_2U-djIS1quAADjJClZDS4.roa
Signing time: Wed 14 May 2025 10:39:10 +0000
ROA not before: Wed 14 May 2025 10:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.240.0.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.242.202.0/23 maxlen: 23
151.243.206.0/23 maxlen: 23
151.243.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:60:77:39:11:86:0c:77:d3:51:77:d1:16:2d:8e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 14 10:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e52b1a37fd94f9d8c84b5aae0000e32429590d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:42:f4:c9:7e:53:77:a0:e4:a5:1c:28:f2:
de:fb:bc:52:59:47:4c:9a:9b:1a:81:02:b2:68:f5:
d8:62:06:ea:2b:bd:53:0e:e5:0a:6b:ca:b4:72:1a:
79:2d:4c:d5:83:3a:3b:a9:f5:0b:90:d0:33:0c:58:
20:35:c5:64:4f:55:3e:22:46:5d:ad:18:ab:de:f0:
8a:24:c2:ec:58:f6:24:5b:02:1e:43:e6:7d:fd:cd:
4e:5c:f5:10:ea:01:7e:a3:52:c9:c9:fd:59:11:f1:
fc:a4:33:a1:d3:c2:ba:a9:42:bb:24:fe:ef:03:d6:
f4:b6:a9:29:fe:b0:14:ae:bc:4d:97:14:d8:85:6c:
ad:5a:7a:8c:5e:a6:ff:e7:19:25:b1:34:40:c5:27:
bd:f6:b1:5b:f6:34:e1:bf:0c:22:c6:be:7e:cd:cb:
fc:5d:1b:89:fe:21:ae:a3:5f:7c:c5:75:b9:2c:c7:
1e:c7:89:7d:95:ab:89:6e:5b:d8:3b:cf:83:86:e6:
1b:e8:94:b2:3c:35:94:b9:0f:e3:29:a0:5e:d5:12:
6e:55:79:d5:c5:ff:1b:54:1f:6e:fd:92:04:81:fe:
e7:f8:64:26:6b:24:39:ab:45:00:42:ac:8d:e6:b0:
d7:3f:13:2c:19:e6:64:c8:dd:40:3a:eb:f8:47:0e:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2B:1A:37:FD:94:F9:D8:C8:4B:5A:AE:00:00:E3:24:29:59:0D:2E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5SsaN_2U-djIS1quAADjJClZDS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.240.0.0/23
151.240.8.0-151.240.10.255
151.240.77.0/24
151.241.18.0/24
151.242.202.0/23
151.243.206.0/23
151.243.217.0/24
Signature Algorithm: sha256WithRSAEncryption
41:da:96:7c:e6:5a:10:33:28:cd:71:c8:e5:02:a4:86:78:48:
f3:40:c1:69:8e:6c:15:c3:ff:d9:62:91:fb:8b:b9:cb:83:41:
90:ed:76:c5:c9:cd:1f:e2:75:74:a1:73:cb:75:8d:62:2a:51:
43:df:a4:c7:8e:bf:89:f4:e4:2f:85:58:4e:15:f0:c7:f5:a2:
d3:59:73:dd:e2:2b:cf:d9:24:da:80:b8:44:24:3b:00:7a:28:
c6:89:02:cb:ef:38:42:71:49:b7:f5:43:a7:d8:61:2d:4c:db:
3c:d1:ac:24:0e:41:f6:c2:4e:c4:e2:ea:c0:ff:8b:a4:75:86:
2d:1a:fc:69:e6:c2:8d:0a:91:fa:10:4c:ff:56:95:b7:32:c5:
84:33:ba:5c:0b:c1:28:cd:3f:5f:63:dd:62:60:ba:45:41:b4:
fb:41:5c:2a:54:37:3d:36:73:d5:68:88:32:8a:09:b6:66:fc:
dd:12:8c:f2:e7:0d:44:f3:45:82:b9:af:70:56:67:54:88:ec:
d0:e2:3e:dd:92:36:f8:9a:f7:1b:6b:b7:16:16:2c:67:97:f6:
7a:b7:1a:a9:ef:80:32:6c:4f:bc:b9:f0:c5:43:bf:85:16:5a:
98:63:87:e3:46:4f:1f:a8:73:f1:4e:ec:2a:21:55:b1:3a:80:
74:fc:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:58:30 2025 by rpki-client