Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TUlUpA0NRc5A49NeTWlbA8uyah4.roa
File: TUlUpA0NRc5A49NeTWlbA8uyah4.roa (raw, json)
Hash identifier: aKxfrJPrUghhpBmEKZdS1ipwdemFJ56mrYCGHnE5mwE=
Subject key identifier: 4D:49:54:A4:0D:0D:45:CE:40:E3:D3:5E:4D:69:5B:03:CB:B2:6A:1E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196944F0F8D889CFE5CBE247474AC542513
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TUlUpA0NRc5A49NeTWlbA8uyah4.roa
Signing time: Sat 03 May 2025 04:02:11 +0000
ROA not before: Sat 03 May 2025 04:02:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 151.242.61.0/24 maxlen: 24
151.242.97.0/24 maxlen: 24
151.244.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:4f:0f:8d:88:9c:fe:5c:be:24:74:74:ac:54:25:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 3 04:02:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4954a40d0d45ce40e3d35e4d695b03cbb26a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:42:86:c2:42:78:56:76:2a:48:8d:2b:44:
17:c8:9f:61:cc:0e:7a:70:8a:4b:36:c1:ac:23:9a:
f4:74:42:37:d3:49:7f:9b:ff:1b:01:49:a7:8e:a3:
51:98:62:6b:5e:6b:db:91:2a:37:a2:df:a8:29:72:
b1:d9:48:03:a9:bd:59:46:87:91:6a:7a:39:f1:67:
1b:af:dd:6d:ad:f0:b9:24:0b:92:d4:43:91:19:a4:
e4:ae:8d:44:21:15:9c:0a:08:57:e7:7d:d7:f1:de:
3a:87:00:ce:bc:2c:42:39:46:de:a6:f7:d5:83:73:
ac:7b:63:72:a9:e7:7c:e7:9d:e1:ca:87:f7:ce:62:
ff:e7:f3:ab:6e:8a:e0:65:e3:c8:ca:9d:43:e0:10:
99:d2:86:ca:d9:04:f0:3c:8f:dc:3f:16:4e:7c:35:
77:0a:6c:12:7d:d4:a8:fe:a7:36:a2:80:b1:d8:d4:
3f:f0:98:29:6f:13:0b:c1:83:db:d3:d6:0a:86:22:
fe:7c:dc:95:54:c0:97:a5:e3:f4:6d:a3:ae:d6:be:
70:88:36:91:72:c3:a0:a0:ce:97:63:ce:07:eb:65:
c1:73:07:72:82:2d:54:d7:96:d0:d7:cc:12:04:b0:
89:fe:97:44:5b:bb:91:10:98:39:43:a8:eb:d3:55:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:54:A4:0D:0D:45:CE:40:E3:D3:5E:4D:69:5B:03:CB:B2:6A:1E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TUlUpA0NRc5A49NeTWlbA8uyah4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.61.0/24
151.242.97.0/24
151.244.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a2:4d:07:e1:7b:f7:fc:5b:db:7d:d7:f0:32:12:c0:ab:97:
33:82:f3:49:ca:b5:75:d6:30:c6:bd:d3:c7:c3:74:6a:a2:68:
90:44:b7:21:cc:9d:5e:5f:8a:f1:2a:e1:90:6f:54:68:8b:28:
dc:6e:7c:1f:df:9b:53:bb:5e:17:e5:a8:b6:43:76:e7:e0:1d:
76:b4:46:bf:df:ce:73:f3:61:dc:02:ce:60:f6:8a:58:99:fa:
9c:4c:35:8d:6e:f6:05:4f:09:b8:2b:90:cc:a5:94:ce:b1:77:
c1:e0:d4:36:58:ef:47:9b:5b:e5:55:a4:6e:52:ad:e3:ce:e1:
a2:e5:63:f6:90:6e:3a:7a:bd:f9:75:ef:ae:7b:bb:b3:bd:e4:
72:f8:ed:e6:a8:13:ac:27:b7:82:13:de:5c:86:ca:96:3a:cc:
f5:19:15:ba:2f:23:67:7a:16:f1:f0:e8:fe:54:86:c8:33:d1:
7b:85:30:fd:d4:e1:38:e1:01:ba:33:51:47:8f:82:1b:5c:24:
1f:4b:a0:ac:e4:3b:c6:68:60:f9:14:46:23:69:2c:06:d2:e3:
c4:e4:2b:0c:69:9a:6d:a0:d6:74:77:b0:e1:2f:8e:52:4d:7a:
d4:2d:0d:7b:dc:c7:b7:b4:ac:b5:5e:a5:69:af:eb:a4:b9:c0:
ee:7b:06:16
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZaUTw+NiJz+XL4kdHSsVCUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTAzMDQwMjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDQ5NTRhNDBkMGQ0NWNlNDBlM2QzNWU0ZDY5NWIwM2NiYjI2YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeBChsJCeFZ2KkiNK0QXyJ9hzA56
cIpLNsGsI5r0dEI300l/m/8bAUmnjqNRmGJrXmvbkSo3ot+oKXKx2UgDqb1ZRoeR
ano58Wcbr91trfC5JAuS1EORGaTkro1EIRWcCghX533X8d46hwDOvCxCOUbepvfV
g3Ose2Nyqed8553hyof3zmL/5/OrborgZePIyp1D4BCZ0obK2QTwPI/cPxZOfDV3
CmwSfdSo/qc2ooCx2NQ/8JgpbxMLwYPb09YKhiL+fNyVVMCXpeP0baOu1r5wiDaR
csOgoM6XY84H62XBcwdygi1U15bQ18wSBLCJ/pdEW7uREJg5Q6jr01W3HQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE1JVKQNDUXOQOPTXk1pWwPLsmoeMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVFVsVXBBME5SYzVBNDlOZVRXbGJBOHV5YWg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/I9AwQA
l/JhAwQAl/RjMA0GCSqGSIb3DQEBCwUAA4IBAQCdok0H4Xv3/FvbfdfwMhLAq5cz
gvNJyrV11jDGvdPHw3RqomiQRLchzJ1eX4rxKuGQb1Roiyjcbnwf35tTu14X5ai2
Q3bn4B12tEa/385z82HcAs5g9opYmfqcTDWNbvYFTwm4K5DMpZTOsXfB4NQ2WO9H
m1vlVaRuUq3jzuGi5WP2kG46er35de+ue7uzveRy+O3mqBOsJ7eCE95chsqWOsz1
GRW6LyNnehbx8Oj+VIbIM9F7hTD91OE44QG6M1FHj4IbXCQfS6Cs5DvGaGD5FEYj
aSwG0uPE5CsMaZptoNZ0d7DhL45STXrULQ173Me3tKy1XqVpr+ukucDuewYW
-----END CERTIFICATE-----
Generated at Sun May 11 01:29:00 2025 by rpki-client