Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JKg0-AMBdhns3khAYA8HeSZCWeY.roa
File: JKg0-AMBdhns3khAYA8HeSZCWeY.roa (raw, json)
Hash identifier: 0yESNl7s2a2fyhLir6rwJBdsqPpe3uJioYvkhCfcH4g=
Subject key identifier: 24:A8:34:F8:03:01:76:19:EC:DE:48:40:60:0F:07:79:26:42:59:E6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197CC8D514F7E4698A330C67EF0DA808605
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JKg0-AMBdhns3khAYA8HeSZCWeY.roa
Signing time: Wed 02 Jul 2025 19:11:42 +0000
ROA not before: Wed 02 Jul 2025 19:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.202.220.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.240.60.0/23 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.80.0/23 maxlen: 24
151.240.118.0/23 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.25.0/24 maxlen: 24
151.243.170.0/24 maxlen: 24
151.243.172.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
151.244.102.0/24 maxlen: 24
151.244.196.0/24 maxlen: 24
151.245.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:8d:51:4f:7e:46:98:a3:30:c6:7e:f0:da:80:86:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 2 19:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24a834f803017619ecde4840600f0779264259e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:03:20:7e:18:0e:44:92:b1:2f:97:fa:3b:
0c:2f:38:da:67:9c:af:da:a5:59:c8:dc:04:12:f0:
ef:8b:ef:5e:0c:2e:65:65:52:b3:4e:04:1a:15:e4:
a1:c2:98:c1:4d:bd:f2:2f:6e:67:a2:e3:73:51:a8:
aa:8f:55:f1:e8:05:19:61:64:13:54:30:b2:d6:fc:
68:c4:a9:54:da:c3:55:47:26:85:d9:e6:e4:a1:24:
15:b3:0c:bb:86:ab:78:d1:84:97:d7:33:1e:2f:50:
1e:d0:b6:1e:2d:bd:0b:84:bc:51:70:05:e2:e5:ba:
f7:59:c2:8b:d8:3c:10:5d:52:43:f4:ea:71:2f:a6:
a7:0c:74:71:44:81:66:c5:81:57:bf:4d:c1:8a:09:
89:fd:31:79:92:cf:36:3c:cd:04:f3:4d:63:8a:48:
45:88:4e:29:57:85:d4:48:37:6f:13:82:93:5a:6c:
62:8a:74:f3:11:e3:6d:d3:dc:6e:09:5f:c5:a9:fc:
a6:96:ae:fb:e5:94:71:d5:7e:df:e6:6d:e3:53:81:
8a:bd:ff:86:1a:a0:ee:73:ba:51:95:09:fc:92:98:
6a:b0:b4:20:26:13:01:0c:3d:c0:94:9c:c0:8a:86:
f3:da:cd:47:0f:35:76:42:18:96:73:a0:ee:1a:c4:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:34:F8:03:01:76:19:EC:DE:48:40:60:0F:07:79:26:42:59:E6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JKg0-AMBdhns3khAYA8HeSZCWeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.220.0/24
151.240.28.0/24
151.240.60.0/23
151.240.72.0/24
151.240.74.0/24
151.240.80.0/23
151.240.118.0/23
151.242.13.0/24
151.242.27.0/24
151.242.134.0/23
151.242.236.0/22
151.243.25.0/24
151.243.170.0/24
151.243.172.0/24
151.244.48.0/24
151.244.102.0/24
151.244.196.0/24
151.245.64.0/22
Signature Algorithm: sha256WithRSAEncryption
49:ed:fd:20:29:a6:7b:c8:20:ce:91:b2:cd:89:2f:ab:2f:0c:
24:a9:c0:48:2d:de:72:f5:ce:8f:67:c5:cb:ba:e0:cf:62:6d:
6a:82:83:8d:1c:be:e4:f3:d2:7b:06:34:55:71:53:8d:dd:88:
4a:dc:31:e4:aa:b2:98:92:d6:3d:43:06:f2:2d:e1:17:c3:72:
34:14:3f:37:ad:a3:46:74:b1:c0:a7:06:81:56:d6:7e:07:20:
68:48:cc:04:70:38:7e:df:7e:7f:3a:04:35:59:45:bc:9d:5e:
73:a8:21:6f:07:14:f1:df:15:d5:f6:a7:41:01:2f:9b:52:91:
23:42:7f:23:d0:d0:19:dc:55:51:38:a9:a0:35:d6:ae:24:4d:
5e:1f:dc:ec:a4:1e:bc:30:3c:61:27:71:c8:ad:3b:4e:b9:55:
00:36:82:fb:ec:88:2a:88:3b:d6:b1:0e:6b:f9:e3:e9:79:ac:
0f:b9:f0:d5:6d:21:de:b2:c7:2b:ac:af:f7:9f:8a:cf:2d:ca:
b6:59:4d:08:7f:00:4f:d6:a4:32:12:6f:e7:88:7b:85:d9:e1:
00:f9:15:ee:72:2e:3f:4f:a7:6b:1b:c8:2c:09:ad:bd:79:79:
6c:c4:95:ba:33:c3:ab:49:f4:6e:bb:fe:f5:0e:55:2d:90:b3:
f0:b5:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:50:44 2025 by rpki-client