Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SDKiRdn28U1X_RIBRTdHK7W8-KM.roa
File: SDKiRdn28U1X_RIBRTdHK7W8-KM.roa (raw, json)
Hash identifier: C7X6tkDodHnXw4CrbwPDTmerEBVIaOMpOjlkb7kYKDc=
Subject key identifier: 48:32:A2:45:D9:F6:F1:4D:57:FD:12:01:45:37:47:2B:B5:BC:F8:A3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01968509BF861FB112FD3B8D6F56D3546DB3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SDKiRdn28U1X_RIBRTdHK7W8-KM.roa
Signing time: Wed 30 Apr 2025 04:52:10 +0000
ROA not before: Wed 30 Apr 2025 04:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 37.202.219.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.226.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.242.9.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.46.0/24 maxlen: 24
151.242.47.0/24 maxlen: 24
151.242.48.0/24 maxlen: 24
151.242.60.0/24 maxlen: 24
151.242.62.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.166.0/23 maxlen: 24
151.242.195.0/24 maxlen: 24
151.243.140.0/24 maxlen: 24
151.244.59.0/24 maxlen: 24
151.244.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:09:bf:86:1f:b1:12:fd:3b:8d:6f:56:d3:54:6d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 04:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4832a245d9f6f14d57fd12014537472bb5bcf8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:0a:b4:56:d2:3a:84:0e:47:3c:ec:c2:fa:
bb:f9:6c:55:71:c4:28:92:85:c4:27:c5:37:b9:31:
da:91:9a:99:37:38:cf:d2:19:d1:0e:c2:88:1b:1e:
ec:cb:76:ea:9d:92:ca:ab:58:3b:7b:56:eb:b7:e9:
26:78:d5:52:0f:2b:8a:76:69:eb:4a:11:3f:0a:bc:
3f:d9:9c:59:ca:99:0d:db:32:b9:fe:9e:d7:55:fa:
7f:da:55:a4:89:13:06:23:80:fe:7c:42:7a:cf:f0:
fc:48:5c:9d:f3:9f:6a:6f:54:78:c1:39:96:bd:1e:
b0:e2:55:bf:5c:27:da:f1:6e:2b:a3:02:b7:03:a8:
a9:96:d0:6f:35:cf:e7:4e:d0:1f:aa:84:76:7a:f6:
ab:21:4b:75:77:4d:28:cb:a0:7e:b7:b3:1f:f9:da:
7f:fa:41:a0:23:d6:ca:08:2b:4a:22:f7:31:f7:7b:
56:1d:13:c9:0a:46:fe:6a:6a:35:7f:62:fc:db:6c:
58:5b:61:39:7f:5f:fb:ee:5c:f8:7f:00:6d:14:29:
4a:fa:6e:9d:1f:c4:b8:bc:39:95:d9:ed:6f:0f:ae:
d8:82:fa:b2:b1:4e:e1:13:92:a0:46:4b:58:e4:2f:
f2:00:c7:94:30:39:1b:51:7b:7f:05:97:6f:03:50:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:A2:45:D9:F6:F1:4D:57:FD:12:01:45:37:47:2B:B5:BC:F8:A3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SDKiRdn28U1X_RIBRTdHK7W8-KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.240.31.0/24
151.240.226.0-151.240.247.255
151.240.249.0-151.240.253.255
151.242.9.0/24
151.242.13.0/24
151.242.46.0-151.242.48.255
151.242.60.0/24
151.242.62.0/24
151.242.64.0/24
151.242.121.0/24
151.242.166.0/23
151.242.195.0/24
151.243.140.0/24
151.244.59.0/24
151.244.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:86:7f:22:d8:4c:f8:29:d7:b0:bf:c5:cf:47:9a:b5:85:2a:
05:bc:aa:ef:98:6e:99:2b:25:02:8c:ea:14:fd:17:ec:68:b5:
21:1b:0e:a5:a8:88:2d:18:23:d1:0d:d7:94:4e:5c:d3:02:9a:
37:ac:d8:ec:f8:74:3a:be:3e:17:a9:42:28:05:f6:7a:b3:2f:
a9:71:1f:6d:04:af:34:aa:3b:54:7f:6a:f7:bd:73:8c:eb:16:
98:0e:65:d9:5f:bf:23:58:02:bd:3c:44:e1:9b:5e:5b:8e:f0:
5d:dc:e9:78:1d:36:b7:1a:22:7f:ae:7e:17:dd:c3:a2:30:be:
74:4b:62:16:ce:01:ea:d1:b9:fd:f1:3d:63:63:71:27:8e:e7:
90:8b:65:ab:50:bb:ec:3a:ae:c9:9c:b4:d3:d1:d9:28:f2:cc:
ce:5f:dd:1d:e1:3f:e1:d0:d5:55:14:74:04:bf:da:7e:2f:ba:
03:ab:cc:73:8a:c6:54:7f:0e:2d:f9:d0:21:a1:e2:9e:6a:e9:
7d:f1:bf:a6:4a:dd:d3:9d:b1:b1:02:df:66:b1:0d:7f:4c:58:
b8:5e:fc:91:dc:83:d5:18:e6:4d:c2:99:a1:c2:71:e2:17:f2:
31:1f:0d:82:d5:7f:37:c7:4c:f3:f3:ce:82:9e:ca:5d:01:11:
b8:dd:5e:6b
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZaFCb+GH7ES/TuNb1bTVG2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDMwMDQ1MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODMyYTI0NWQ5ZjZmMTRkNTdmZDEyMDE0NTM3NDcyYmI1YmNmOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsKtFbSOoQORzzswvq7+WxVccQo
koXEJ8U3uTHakZqZNzjP0hnRDsKIGx7sy3bqnZLKq1g7e1brt+kmeNVSDyuKdmnr
ShE/Crw/2ZxZypkN2zK5/p7XVfp/2lWkiRMGI4D+fEJ6z/D8SFyd859qb1R4wTmW
vR6w4lW/XCfa8W4rowK3A6ipltBvNc/nTtAfqoR2evarIUt1d00oy6B+t7Mf+dp/
+kGgI9bKCCtKIvcx93tWHRPJCkb+amo1f2L822xYW2E5f1/77lz4fwBtFClK+m6d
H8S4vDmV2e1vD67YgvqysU7hE5KgRktY5C/yAMeUMDkbUXt/BZdvA1DNHQIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFEgyokXZ9vFNV/0SAUU3Ryu1vPijMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvU0RLaVJkbjI4VTFYX1JJQlJUZEhLN1c4LUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQAJcrb
AwQAl/AfMAwDBAGX8OIDBAOX8PAwDAMEAJfw+QMEAZfw/AMEAJfyCQMEAJfyDTAM
AwQBl/IuAwQAl/IwAwQAl/I8AwQAl/I+AwQAl/JAAwQAl/J5AwQBl/KmAwQAl/LD
AwQAl/OMAwQAl/Q7AwQAl/R1MA0GCSqGSIb3DQEBCwUAA4IBAQCihn8i2Ez4Kdew
v8XPR5q1hSoFvKrvmG6ZKyUCjOoU/RfsaLUhGw6lqIgtGCPRDdeUTlzTApo3rNjs
+HQ6vj4XqUIoBfZ6sy+pcR9tBK80qjtUf2r3vXOM6xaYDmXZX78jWAK9PEThm15b
jvBd3Ol4HTa3GiJ/rn4X3cOiML50S2IWzgHq0bn98T1jY3EnjueQi2WrULvsOq7J
nLTT0dko8szOX90d4T/h0NVVFHQEv9p+L7oDq8xzisZUfw4t+dAhoeKeaul98b+m
St3TnbGxAt9msQ1/TFi4XvyR3IPVGOZNwpmhwnHiF/IxHw2C1X83x0zz886Cnspd
ARG43V5r
-----END CERTIFICATE-----
Generated at Fri May 9 02:46:05 2025 by rpki-client