Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BbqiOt6-uPHwtPlrSMzoLf8Amkk.roa
File: BbqiOt6-uPHwtPlrSMzoLf8Amkk.roa (raw, json)
Hash identifier: SZlzVdmkT3GPWu6NtdmexFs3Ov8raSYRDKtD7MNNI/M=
Subject key identifier: 05:BA:A2:3A:DE:BE:B8:F1:F0:B4:F9:6B:48:CC:E8:2D:FF:00:9A:49
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1C05FB055852C6A80310C4B61D7FA95
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BbqiOt6-uPHwtPlrSMzoLf8Amkk.roa
Signing time: Fri 27 Jun 2025 14:17:44 +0000
ROA not before: Fri 27 Jun 2025 14:17:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 151.240.167.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.242.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:c0:5f:b0:55:85:2c:6a:80:31:0c:4b:61:d7:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 14:17:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05baa23adebeb8f1f0b4f96b48cce82dff009a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:f3:4b:bd:ea:76:2c:f2:d1:b8:ba:ee:79:
d8:15:ec:65:bf:40:e8:63:07:3c:cf:45:89:ec:a6:
28:03:25:97:8d:88:66:cd:5b:35:b4:3d:91:64:fc:
b2:1c:4c:bc:7f:1f:ee:1d:1c:1f:58:65:35:82:f6:
49:52:4c:88:7c:77:16:b2:ec:3e:f6:f2:46:5f:24:
31:07:33:f2:8a:6b:ed:bd:f2:f2:06:99:20:cb:77:
fd:3d:9a:67:4b:75:af:c5:73:1a:fe:26:33:7d:56:
c9:83:ba:c9:dc:83:a1:9c:88:a1:64:3a:dc:e6:84:
a0:2d:11:00:b7:07:00:33:f9:ff:31:d2:a5:8b:fe:
b9:5d:ff:55:14:6a:2c:76:19:06:dd:f4:bb:6a:a9:
8f:61:f5:b9:10:46:0d:c4:99:ff:5b:15:5a:b9:38:
cf:5b:1e:33:00:35:22:54:0e:fd:2f:e4:6c:09:21:
e6:37:f8:93:a2:2d:a5:02:00:40:79:48:ac:28:18:
75:64:df:17:33:96:67:77:88:21:77:86:ee:89:3c:
2c:ca:c5:9b:a4:78:ea:07:04:bd:a5:f1:ad:7e:50:
54:3d:eb:78:1c:fc:21:6d:bb:81:a3:34:07:49:8e:
31:49:d6:0c:1c:bc:be:86:1e:2a:33:45:bd:a0:c9:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:A2:3A:DE:BE:B8:F1:F0:B4:F9:6B:48:CC:E8:2D:FF:00:9A:49
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BbqiOt6-uPHwtPlrSMzoLf8Amkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.167.0/24
151.240.175.0/24
151.242.138.0/24
Signature Algorithm: sha256WithRSAEncryption
56:69:49:aa:f5:dc:84:23:09:70:cc:46:a6:cd:69:72:90:2c:
6c:9d:76:69:02:4c:51:1a:d3:6c:1a:9f:e3:b0:4d:81:79:c7:
de:d9:1c:9b:e5:e4:50:e9:5f:85:b9:f9:bd:da:9e:70:97:dc:
db:2a:1f:90:a5:ef:b3:ec:5c:58:8c:8f:d2:69:1f:8b:bd:86:
f2:bb:fa:31:d6:54:b8:9f:8b:c7:a2:07:73:2c:da:8c:81:47:
21:a0:d4:bb:fe:52:66:bd:1c:34:e5:76:1a:71:7c:fa:48:cd:
d9:1c:48:2c:e2:52:99:5e:71:ee:86:80:9b:17:f3:90:8b:3f:
4c:88:bd:b0:e5:10:2e:32:15:56:c2:b7:e8:e3:7f:e2:a4:a2:
6e:db:f5:2f:9f:03:c0:27:26:b6:22:13:0a:6f:f9:c4:86:7f:
9e:3e:81:89:39:db:7e:7d:51:2d:30:62:4d:5f:41:d8:1f:44:
fd:5b:ac:64:6e:b7:91:18:73:d5:94:ce:26:42:02:0f:06:7b:
bd:66:bb:48:a7:2e:55:e4:bb:b3:f3:5e:70:c2:bd:71:f4:1f:
d1:0e:4f:f4:67:96:78:14:02:8d:e5:17:47:42:e8:0a:97:0e:
b9:ac:da:0f:fd:0d:4a:0e:ea:68:0a:0f:7a:09:c8:e3:76:1d:
65:5c:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:39:44 2025 by rpki-client