Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SSF4hmaLa75MUQmthJbYhIKqdus.roa
File: SSF4hmaLa75MUQmthJbYhIKqdus.roa (raw, json)
Hash identifier: 8XkFgjdrJuiDKOSmRxyoNKCrO64N5D/3yq1DxLmLEMg=
Subject key identifier: 49:21:78:86:66:8B:6B:BE:4C:51:09:AD:84:96:D8:84:82:AA:76:EB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196519439FA29F1A1F2AD0285AB815372B9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SSF4hmaLa75MUQmthJbYhIKqdus.roa
Signing time: Sun 20 Apr 2025 05:03:10 +0000
ROA not before: Sun 20 Apr 2025 05:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4637
IP address blocks: 151.242.1.0/24 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.7.0/24 maxlen: 24
151.242.12.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.29.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.242.89.0/24 maxlen: 24
151.242.90.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.243.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:94:39:fa:29:f1:a1:f2:ad:02:85:ab:81:53:72:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 20 05:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49217886668b6bbe4c5109ad8496d88482aa76eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:55:4c:69:10:eb:55:ff:d8:5e:6d:4b:c0:
9d:27:25:8a:c9:2c:cc:44:02:6c:43:cb:d1:f7:7a:
ce:f7:06:6d:6d:bb:66:ef:c3:46:1a:25:c8:75:5e:
aa:bf:8a:19:bc:5f:37:45:e2:2f:9a:82:91:5b:0a:
ac:c0:00:ee:5b:15:5b:bb:f3:1a:7f:41:d4:b3:29:
1b:4e:9b:8a:24:a9:4e:d9:75:e2:4c:85:de:f9:43:
76:28:0c:2b:7b:03:a2:96:39:01:6b:ca:aa:a4:d5:
0a:b7:08:91:f3:c7:c5:d7:70:d4:52:72:ef:38:92:
16:a7:c3:97:ed:6f:a2:5b:8c:9e:f0:fe:43:b3:a0:
27:0c:73:f2:8a:80:05:46:c2:ea:a8:9b:e0:34:e5:
dc:c2:9b:6c:83:d4:e3:00:39:0e:e9:a5:e0:97:08:
40:6c:b2:36:c8:fc:0d:9d:ee:7f:3d:e0:97:b6:b4:
3e:8c:5a:21:f0:45:99:43:a0:e4:0b:ee:4c:c4:5a:
aa:2d:84:1d:0f:a8:30:41:5b:a6:ac:0f:60:90:28:
f8:7d:a1:34:22:44:5d:d2:ae:5a:3d:f9:d6:f8:70:
59:83:17:b9:a3:6c:9d:de:11:a0:87:12:c1:9a:11:
19:c9:98:41:d5:b0:d2:ed:5c:aa:39:60:30:7f:60:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:78:86:66:8B:6B:BE:4C:51:09:AD:84:96:D8:84:82:AA:76:EB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SSF4hmaLa75MUQmthJbYhIKqdus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.1.0/24
151.242.4.0/24
151.242.7.0/24
151.242.12.0/24
151.242.17.0/24
151.242.20.0/24
151.242.29.0/24
151.242.32.0/24
151.242.88.0/22
151.243.202.0/23
Signature Algorithm: sha256WithRSAEncryption
96:00:aa:01:45:4a:96:cb:26:1c:d2:20:fb:7a:cb:ef:d9:ed:
ba:68:f4:80:74:f4:6f:e8:75:98:37:de:bc:a2:71:92:fb:58:
e6:b2:80:7e:f9:2a:a4:a2:82:5f:39:ad:80:2b:91:81:d2:e3:
19:6f:ec:ff:96:80:40:aa:67:56:91:89:63:69:dc:39:7f:bf:
7f:96:37:9e:ae:3d:b8:4c:c2:10:15:97:78:10:ec:dc:f4:22:
b4:6b:9b:8b:fe:69:2d:7b:88:1a:6f:18:99:f4:2b:89:bb:b5:
d0:2b:e5:a8:c2:31:47:50:e1:bc:5d:f9:b2:06:c9:f0:88:32:
cd:1c:d9:0c:46:c6:34:b8:af:96:87:84:14:bd:f9:b7:f0:2f:
d2:53:c6:6a:61:d9:84:08:9b:dc:11:95:6c:e2:b1:e4:3f:b3:
74:73:65:79:65:fb:72:01:ce:cb:bb:28:88:54:04:ef:3f:4f:
45:1d:44:a8:1b:8e:78:8a:83:a7:dc:8b:72:83:f9:e5:ad:57:
d6:8b:80:e2:88:1f:a8:6f:62:18:d7:f4:8a:aa:97:0e:3e:9d:
7f:c0:3e:a1:d3:9b:bb:89:59:89:6f:a2:60:31:d9:65:8b:84:
9a:b5:93:d8:d4:30:02:f1:04:02:4e:25:26:39:9d:42:12:a7:
c2:1c:9b:49
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZZRlDn6KfGh8q0ChauBU3K5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDIwMDUwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTIxNzg4NjY2OGI2YmJlNGM1MTA5YWQ4NDk2ZDg4NDgyYWE3NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm5VTGkQ61X/2F5tS8CdJyWKySzM
RAJsQ8vR93rO9wZtbbtm78NGGiXIdV6qv4oZvF83ReIvmoKRWwqswADuWxVbu/Ma
f0HUsykbTpuKJKlO2XXiTIXe+UN2KAwrewOiljkBa8qqpNUKtwiR88fF13DUUnLv
OJIWp8OX7W+iW4ye8P5Ds6AnDHPyioAFRsLqqJvgNOXcwptsg9TjADkO6aXglwhA
bLI2yPwNne5/PeCXtrQ+jFoh8EWZQ6DkC+5MxFqqLYQdD6gwQVumrA9gkCj4faE0
IkRd0q5aPfnW+HBZgxe5o2yd3hGghxLBmhEZyZhB1bDS7VyqOWAwf2CNUwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFEkheIZmi2u+TFEJrYSW2ISCqnbrMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvU1NGNGhtYUxhNzVNVVFtdGhKYlloSUtxZHVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAl/IBAwQA
l/IEAwQAl/IHAwQAl/IMAwQAl/IRAwQAl/IUAwQAl/IdAwQAl/IgAwQCl/JYAwQB
l/PKMA0GCSqGSIb3DQEBCwUAA4IBAQCWAKoBRUqWyyYc0iD7esvv2e26aPSAdPRv
6HWYN968onGS+1jmsoB++SqkooJfOa2AK5GB0uMZb+z/loBAqmdWkYljadw5f79/
ljeerj24TMIQFZd4EOzc9CK0a5uL/mkte4gabxiZ9CuJu7XQK+WowjFHUOG8Xfmy
BsnwiDLNHNkMRsY0uK+Wh4QUvfm38C/SU8ZqYdmECJvcEZVs4rHkP7N0c2V5Zfty
Ac7LuyiIVATvP09FHUSoG454ioOn3Ityg/nlrVfWi4DiiB+ob2IY1/SKqpcOPp1/
wD6h05u7iVmJb6JgMdlli4SatZPY1DAC8QQCTiUmOZ1CEqfCHJtJ
-----END CERTIFICATE-----
Generated at Fri May 16 09:56:59 2025 by rpki-client