Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ouo6OKnMbjcJRfDt_Mp7TTppDVM.roa
File: Ouo6OKnMbjcJRfDt_Mp7TTppDVM.roa (raw, json)
Hash identifier: wHjLYoFdAYJzXQcYiowFVbZnOuJPWA28W2aLZw3G314=
Subject key identifier: 3A:EA:3A:38:A9:CC:6E:37:09:45:F0:ED:FC:CA:7B:4D:3A:69:0D:53
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786E9936DB942D1C93772C565888F9D0F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ouo6OKnMbjcJRfDt_Mp7TTppDVM.roa
Signing time: Thu 19 Jun 2025 06:39:03 +0000
ROA not before: Thu 19 Jun 2025 06:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:e9:93:6d:b9:42:d1:c9:37:72:c5:65:88:8f:9d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3aea3a38a9cc6e370945f0edfcca7b4d3a690d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:c7:86:df:e5:01:c0:8f:8b:2d:ad:be:f1:
a2:08:89:08:c1:a9:5f:28:38:49:f9:57:ff:b9:e0:
b6:fa:db:da:77:48:a7:ea:c6:5d:de:7f:2c:f6:ca:
bb:84:20:b9:6b:47:b6:e5:27:f8:86:05:e2:c7:51:
72:d8:65:6c:37:e0:70:fa:96:8b:83:7d:7d:ce:9c:
00:43:c5:2f:ca:4f:e0:79:67:b7:2d:99:a5:66:99:
b9:8e:51:68:7d:4c:6b:88:3b:45:16:f3:eb:97:ec:
9f:b0:2f:e6:56:78:95:70:44:d5:f4:ff:00:d8:16:
65:ea:88:d3:79:3a:77:0c:1a:f3:23:f9:c6:7d:51:
69:ba:3a:ed:11:de:1f:8b:a2:0b:3e:8c:8a:50:c3:
23:ef:92:dd:90:7d:bc:3e:a5:a2:a2:88:ee:12:33:
b8:9c:20:95:52:79:40:27:7b:6b:04:a1:c4:71:7e:
67:4a:08:db:a2:20:7e:4e:df:b2:43:20:d1:8f:dd:
c6:6c:eb:22:d5:4b:3f:28:34:9f:52:1a:d4:6e:c6:
15:cc:35:91:44:7f:dd:b9:47:04:29:d2:19:4a:7e:
ec:d5:67:47:a0:44:bf:ef:84:3d:22:9e:6f:31:71:
b2:89:c6:a6:e3:f0:7e:ba:3b:a1:c6:ff:93:8e:39:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EA:3A:38:A9:CC:6E:37:09:45:F0:ED:FC:CA:7B:4D:3A:69:0D:53
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ouo6OKnMbjcJRfDt_Mp7TTppDVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.40.0/24
151.242.64.0/24
151.242.242.0/24
151.243.115.0/24
151.243.120.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
Signature Algorithm: sha256WithRSAEncryption
23:64:d7:ff:f7:0d:dd:2a:7c:f2:e4:1c:f5:48:53:bd:c3:ed:
50:36:1f:ec:00:f0:b4:d6:b3:cc:3a:7c:4b:63:e7:e7:b9:0a:
79:03:f0:b3:82:0c:cf:eb:5e:67:36:ea:2a:ca:9d:06:de:2c:
19:c8:8b:f3:4d:11:22:62:88:15:aa:6c:a0:98:89:42:05:72:
80:14:02:a3:66:0c:b6:00:36:01:2c:40:80:e1:01:b1:c1:43:
57:2f:37:3c:52:ac:be:3b:2f:aa:94:85:2d:a5:9f:ed:b9:74:
da:19:89:95:1c:bc:1b:27:de:8a:c8:8a:d1:88:ca:34:8b:23:
f5:a8:b3:32:1d:84:5f:d2:9d:b6:38:a8:b9:07:89:1d:ac:3b:
eb:64:4e:d9:75:02:54:85:76:c9:35:3e:76:1d:78:78:f2:e3:
32:7b:b9:b8:70:f7:97:30:dc:22:59:72:52:00:98:14:8a:76:
2d:82:4f:25:16:c1:cd:1c:23:fe:5e:ec:5d:91:2c:fa:18:5d:
ab:55:ea:b2:94:1c:44:23:48:77:bf:8c:da:51:08:40:ca:e0:
1f:b2:c2:a8:71:60:85:05:98:76:dc:54:d2:30:fa:ab:9f:fe:
8b:5c:97:1c:d8:fd:af:b0:f2:83:ce:55:82:64:10:e1:15:b8:
76:37:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:48:17 2025 by rpki-client