Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FWg2XZPMEI7h__vHijaD7R-_ICM.roa
File: FWg2XZPMEI7h__vHijaD7R-_ICM.roa (raw, json)
Hash identifier: JxS1IPtj3SnbVckO7bMFdtOVAHtGlC3e/YjnFwaw0jA=
Subject key identifier: 15:68:36:5D:93:CC:10:8E:E1:FF:FB:C7:8A:36:83:ED:1F:BF:20:23
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019686DCAA40764CD8922285D9C33B463B3A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FWg2XZPMEI7h__vHijaD7R-_ICM.roa
Signing time: Wed 30 Apr 2025 13:22:10 +0000
ROA not before: Wed 30 Apr 2025 13:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139057
IP address blocks: 151.242.210.0/24 maxlen: 24
151.242.211.0/24 maxlen: 24
151.242.212.0/24 maxlen: 24
151.242.213.0/24 maxlen: 24
151.242.214.0/24 maxlen: 24
151.242.215.0/24 maxlen: 24
151.242.216.0/24 maxlen: 24
151.242.217.0/24 maxlen: 24
151.242.218.0/24 maxlen: 24
151.242.219.0/24 maxlen: 24
151.242.220.0/24 maxlen: 24
151.242.221.0/24 maxlen: 24
151.242.222.0/24 maxlen: 24
151.242.223.0/24 maxlen: 24
151.242.228.0/24 maxlen: 24
151.242.229.0/24 maxlen: 24
151.242.230.0/24 maxlen: 24
151.242.231.0/24 maxlen: 24
151.242.232.0/24 maxlen: 24
151.242.233.0/24 maxlen: 24
151.242.234.0/24 maxlen: 24
151.242.235.0/24 maxlen: 24
151.242.240.0/24 maxlen: 24
151.242.241.0/24 maxlen: 24
151.242.243.0/24 maxlen: 24
151.242.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:dc:aa:40:76:4c:d8:92:22:85:d9:c3:3b:46:3b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 13:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1568365d93cc108ee1fffbc78a3683ed1fbf2023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:b0:bc:26:b4:4c:2f:a3:aa:ca:cb:22:35:
5e:97:30:fc:2a:06:63:00:60:ae:b0:74:49:00:9d:
a9:eb:31:e4:52:ae:ac:25:b1:d4:41:e9:39:dd:a6:
d1:db:22:8d:d3:13:81:26:e8:ad:f1:f4:49:5b:61:
22:e2:59:54:4b:d4:9f:b3:6d:48:8a:9c:7d:c8:fc:
84:0f:43:27:2c:cf:4a:95:d3:ae:09:3f:87:39:d1:
4d:84:93:25:86:91:c8:23:ea:5b:2a:1d:40:a2:81:
b7:6c:89:f2:a8:66:8e:de:cc:d6:ed:19:bd:bd:fa:
52:21:9e:93:40:d8:c0:eb:f4:bd:36:ba:9a:df:9a:
12:f2:b6:9c:1f:a5:3a:30:3a:55:3b:5d:ef:b0:ca:
f1:ec:43:38:fe:30:10:85:58:78:94:56:7c:ff:0a:
77:d9:44:9e:01:79:bb:6c:2a:91:c8:15:4b:3a:37:
43:72:17:cf:5b:01:fe:55:94:a6:bb:45:bd:34:6c:
49:ea:a9:07:9f:20:d6:43:ba:44:c7:84:ed:1b:08:
2b:06:8d:3d:54:cf:a4:07:0c:af:95:f8:ff:3f:81:
36:e9:3a:7f:e1:59:ea:ac:60:cc:55:11:39:e1:e2:
6b:39:a9:48:e6:15:a3:13:27:7e:34:df:b1:1e:2c:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:36:5D:93:CC:10:8E:E1:FF:FB:C7:8A:36:83:ED:1F:BF:20:23
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FWg2XZPMEI7h__vHijaD7R-_ICM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.210.0-151.242.223.255
151.242.228.0-151.242.235.255
151.242.240.0/23
151.242.243.0-151.242.244.255
Signature Algorithm: sha256WithRSAEncryption
0f:73:36:81:80:47:e3:04:c3:38:15:9b:38:a9:77:cd:a9:37:
1d:06:35:a3:ba:b2:f6:31:00:4c:3c:c8:bd:49:24:5d:5b:53:
b0:7f:8f:03:54:be:99:e1:86:0e:c4:3b:01:58:0f:38:fc:1d:
3b:8b:4a:27:e0:a8:fa:08:43:b9:3f:bf:5e:d1:4d:ac:93:ac:
67:26:ad:c9:57:8e:7e:70:6f:89:ff:c6:b5:96:5c:09:49:31:
14:17:3d:57:5f:e9:de:bb:27:0d:d9:a4:f8:21:96:7f:41:9c:
49:a3:6a:67:58:3b:99:4a:08:8c:06:69:d1:32:40:d6:d2:cf:
50:86:78:87:5c:5d:ba:53:ea:a7:54:a9:5c:89:a8:14:48:b5:
3b:54:96:aa:07:d8:ad:02:51:c3:b5:e3:b4:8b:92:40:de:39:
6a:34:a5:c2:17:ce:fa:b5:20:8d:27:50:83:c5:af:bf:43:0e:
37:d6:fb:19:d1:dc:ca:b0:b6:23:f8:bb:95:54:fa:32:1d:35:
10:ff:02:d5:66:69:db:57:5a:ce:c5:a0:0d:fe:70:22:1b:cc:
7a:d8:e1:81:82:44:12:98:3a:bd:df:60:70:5f:fe:9e:35:5b:
7c:e3:55:1e:9d:4d:7f:a8:28:66:a6:05:53:e7:b1:50:e9:7e:
7e:ca:4c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:33:46 2025 by rpki-client