Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OGta9s5QxflohbBsxfVM0EA3iZQ.roa
File: OGta9s5QxflohbBsxfVM0EA3iZQ.roa (raw, json)
Hash identifier: kRCePPgUOdVR2UesRDmGweyCMcht2C21AxpGYx9l/Jk=
Subject key identifier: 38:6B:5A:F6:CE:50:C5:F9:68:85:B0:6C:C5:F5:4C:D0:40:37:89:94
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B6B288B183A7055992EF822A97AA54FB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OGta9s5QxflohbBsxfVM0EA3iZQ.roa
Signing time: Sat 28 Jun 2025 13:20:43 +0000
ROA not before: Sat 28 Jun 2025 13:20:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.41.0/24 maxlen: 24
151.242.58.0/24 maxlen: 24
151.242.200.0/24 maxlen: 24
151.242.201.0/24 maxlen: 24
151.243.164.0/22 maxlen: 22
151.245.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:b2:88:b1:83:a7:05:59:92:ef:82:2a:97:aa:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 28 13:20:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=386b5af6ce50c5f96885b06cc5f54cd040378994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:31:43:81:b0:35:e0:c4:5b:7b:1d:e6:b2:a1:
cc:b5:ea:3e:4d:7c:6b:b3:a6:a1:2c:95:73:b7:d9:
f6:69:fc:ab:dd:77:6b:a8:71:73:33:4f:7c:12:6c:
f8:a6:eb:ae:67:9b:81:5d:52:b8:f5:96:cf:dd:4d:
7a:e2:d6:bb:21:0e:53:cf:da:6e:ed:5e:87:62:56:
62:11:6a:81:bf:1d:3b:66:29:1c:ce:06:29:79:b5:
b6:63:e0:9f:c8:03:23:d3:3f:51:c7:9e:8e:17:42:
41:d5:68:54:40:bc:5c:e8:40:17:c2:13:87:90:ca:
bb:b1:0c:73:3b:c4:1b:81:f6:d9:68:50:39:b2:4e:
f2:f0:27:7f:96:d7:0e:d9:8c:63:80:4b:c1:6c:05:
67:a9:d7:5a:bf:06:31:14:e1:fe:8e:29:23:bd:66:
30:00:61:8d:14:0d:fb:f1:b3:f0:eb:a0:eb:aa:61:
e9:55:03:be:78:c9:d6:c5:27:8c:88:ab:aa:19:57:
78:32:23:97:31:86:c1:e1:b8:19:b6:12:24:19:96:
5b:0d:1d:8b:fc:59:39:15:42:26:89:d0:e2:73:fd:
91:3d:ab:c0:bf:27:e5:93:20:a0:bc:e0:67:34:99:
09:fa:18:e6:87:7a:d7:66:f9:6f:40:47:72:4c:03:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:5A:F6:CE:50:C5:F9:68:85:B0:6C:C5:F5:4C:D0:40:37:89:94
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OGta9s5QxflohbBsxfVM0EA3iZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.242.58.0/24
151.242.200.0/23
151.243.164.0/22
151.245.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:b5:31:5e:92:2e:d8:b6:ab:24:6b:0e:e3:32:4f:42:82:ff:
b3:8f:15:f4:27:02:d6:c1:b5:b1:53:b4:90:2b:b7:f6:e3:10:
4f:9a:d8:fe:ba:3e:53:88:3c:4f:64:84:a0:f4:f0:7b:51:4b:
b1:a0:d0:ea:2d:65:de:0c:4c:05:79:ec:aa:ca:82:f8:a6:90:
d6:8b:63:12:56:f7:eb:f6:23:4a:9b:0d:72:f3:9c:38:11:54:
27:1b:c1:b9:e3:9b:aa:dc:89:37:94:f5:17:51:3e:4a:97:31:
81:b3:35:c3:cb:24:89:46:24:ae:ae:64:c3:69:07:2e:31:c4:
06:85:bf:38:43:89:96:ef:f4:36:4b:df:cd:4b:b8:e9:f1:66:
42:a8:35:34:d4:3e:81:ab:8e:3f:2c:9c:52:60:48:53:58:da:
50:bb:1d:cc:ee:58:41:ca:5f:ed:0f:88:f3:5f:78:a8:22:f6:
98:95:cc:41:e5:19:db:d3:8d:f2:9c:2d:a5:9f:d0:24:b0:4f:
5a:bb:10:ad:20:2f:02:c7:67:64:df:f7:ca:ae:19:b3:d1:d3:
85:7a:1e:1e:3e:66:2b:a2:d1:0e:3e:90:e2:a0:6e:64:ef:26:
c0:a6:60:ff:0f:ce:dc:82:03:4b:c1:a8:0e:13:0f:24:3b:5b:
76:fd:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:25:41 2025 by rpki-client