Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6BLUnWDIXoiUKVIH3z-j1He9In8.roa
File: 6BLUnWDIXoiUKVIH3z-j1He9In8.roa (raw, json)
Hash identifier: onE8fKVueOHFANdDRNXKfDxHuZlTm+scAC2XbjMdyWs=
Subject key identifier: E8:12:D4:9D:60:C8:5E:88:94:29:52:07:DF:3F:A3:D4:77:BD:22:7F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977E27AA6C86AC01D404CEDBBBD3FF0120
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6BLUnWDIXoiUKVIH3z-j1He9In8.roa
Signing time: Tue 17 Jun 2025 13:50:18 +0000
ROA not before: Tue 17 Jun 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 151.240.255.0/24 maxlen: 24
151.242.89.0/24 maxlen: 24
151.242.122.0/24 maxlen: 24
151.242.147.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:27:aa:6c:86:ac:01:d4:04:ce:db:bb:d3:ff:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 17 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e812d49d60c85e8894295207df3fa3d477bd227f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:75:7e:e6:94:a2:91:ec:55:71:58:5b:25:
2c:a4:5d:fc:36:bd:5b:b3:38:a4:9c:78:bc:ec:ce:
52:bc:e2:fb:14:be:1c:f8:6c:bb:a0:2f:54:d5:4c:
8d:84:62:c3:2f:52:28:fd:83:e6:a0:79:20:2a:60:
4f:42:38:48:6d:11:3e:f8:2e:a2:27:1e:19:26:45:
48:66:2d:ea:b9:e7:ff:3a:e5:71:f7:9f:63:2f:b5:
9a:f2:bb:1f:6c:42:0f:b0:fe:d6:d7:0d:2d:c6:e1:
aa:b1:81:c6:d3:a9:86:9d:5c:cd:a3:4a:9c:46:81:
79:f2:83:75:c6:e3:c9:e0:0b:eb:1d:c5:30:32:72:
8f:f3:fb:11:9f:18:35:c9:0f:14:c4:20:d5:fa:d4:
91:3d:91:24:c1:97:ef:70:96:68:29:24:c0:ee:2c:
26:f4:72:ab:5c:0e:c5:37:a6:24:b0:61:15:48:ca:
82:f4:25:79:1d:cf:7c:bf:13:37:61:c5:0f:f3:41:
dc:29:0e:23:12:dd:9b:cd:68:cb:3e:29:5c:3d:74:
da:38:94:10:c9:5a:21:de:56:57:18:b6:50:fa:77:
12:a0:cd:e7:79:ac:b9:08:00:74:14:71:e2:ae:c7:
29:0d:9b:ef:6b:f9:ec:a9:ee:c4:2e:c6:09:f4:6b:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:D4:9D:60:C8:5E:88:94:29:52:07:DF:3F:A3:D4:77:BD:22:7F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6BLUnWDIXoiUKVIH3z-j1He9In8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.255.0/24
151.242.89.0/24
151.242.122.0/24
151.242.147.0/24
151.242.194.0/24
Signature Algorithm: sha256WithRSAEncryption
83:db:30:d0:0e:d4:cc:7d:1d:98:38:f9:f4:cc:7f:84:0e:31:
1c:d8:e1:d7:9c:55:c2:c6:d1:95:69:f2:d9:f3:40:52:d0:10:
f0:9a:e2:d7:fd:d8:b2:6b:4c:28:f0:d2:e7:f8:4e:be:33:95:
0e:f3:a3:40:83:a3:94:5c:42:ea:5e:b4:c5:e9:0d:3a:bf:89:
01:a6:f2:12:20:62:12:38:f6:df:9e:a9:6e:e8:db:25:b3:88:
16:91:c1:dd:84:3f:97:fb:32:a9:6f:e2:82:51:b8:f9:86:df:
11:ef:f1:44:82:1e:e5:51:7c:22:52:72:2f:fc:cb:00:ae:3b:
5c:1e:8d:91:c6:16:95:72:0f:32:8b:7c:bc:12:4d:f7:b5:4d:
72:ab:3f:8f:ba:0e:c7:f9:9a:7c:35:3a:1e:e7:0e:a0:4c:d3:
99:02:b8:d1:17:5e:f6:fd:78:68:49:7b:63:65:25:08:cb:26:
eb:e3:a3:2e:b8:69:dd:3d:ee:07:93:75:8e:e0:58:05:08:87:
07:a8:4b:31:0f:d1:9e:af:41:67:0c:e4:bf:38:52:40:23:ba:
c5:ce:ea:27:95:fd:a4:52:7e:30:0a:da:1d:7b:cd:35:77:3e:
d9:04:2b:41:ba:a6:6c:0a:dd:7e:9f:f8:29:8b:bb:93:c4:f0:
57:02:4d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:05:31 2025 by rpki-client