Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eMQMKzyuw8sCW1pDk95CbtMyUiA.roa
File: eMQMKzyuw8sCW1pDk95CbtMyUiA.roa (raw, json)
Hash identifier: Yba6v3+rwen+d/X4OkHVM4BqEXPy2EPMbwO+4GIzhxc=
Subject key identifier: 78:C4:0C:2B:3C:AE:C3:CB:02:5B:5A:43:93:DE:42:6E:D3:32:52:20
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A58AF9D978BF05453B0EDBF60454D136
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eMQMKzyuw8sCW1pDk95CbtMyUiA.roa
Signing time: Tue 06 May 2025 12:21:10 +0000
ROA not before: Tue 06 May 2025 12:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 20:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:8a:f9:d9:78:bf:05:45:3b:0e:db:f6:04:54:d1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 12:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78c40c2b3caec3cb025b5a4393de426ed3325220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:28:bd:1d:ff:41:7b:97:23:45:df:0b:cc:
cf:b2:24:8b:d4:e9:2f:65:6a:9d:c7:0b:d4:a1:98:
46:1f:55:db:53:f6:3f:07:fe:f4:70:4c:7f:b7:9e:
c4:71:02:5d:79:00:0d:c2:78:56:2c:87:85:d0:80:
ef:2c:08:19:b6:30:7f:6e:1b:13:9e:f2:6c:ae:6f:
7d:e4:ce:ab:71:4d:97:98:23:21:c3:51:2a:f9:ee:
bf:6a:89:c8:b4:8f:b8:5c:cd:f8:8b:06:ea:bc:52:
54:90:01:fc:fe:50:1a:c9:90:0b:08:c9:c3:93:50:
7a:3e:e6:d7:06:d6:58:fb:69:4c:36:4e:c1:0b:e0:
ac:d4:d9:0d:0e:3d:c5:4f:1a:7b:bc:9a:01:f7:b5:
27:8e:80:e2:89:c9:a6:11:2d:65:55:8c:f4:01:07:
c6:09:5b:bd:c2:e5:03:98:3f:ac:53:b2:ee:fd:ce:
71:59:9d:cf:e4:1e:72:e1:03:8f:21:3f:d9:3a:1e:
10:a0:0f:ac:be:b8:90:42:05:ba:f1:50:36:b0:5c:
53:ea:9f:b6:1a:22:0f:de:a5:3c:91:bd:76:f2:75:
2f:48:cf:a7:d1:65:2e:1c:12:e2:1a:c1:db:9f:eb:
7a:b3:e0:49:95:8b:9d:74:20:e6:09:e5:15:ea:c2:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:0C:2B:3C:AE:C3:CB:02:5B:5A:43:93:DE:42:6E:D3:32:52:20
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eMQMKzyuw8sCW1pDk95CbtMyUiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.241.132.0/22
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:7f:3b:6f:90:9c:5f:9d:86:1b:11:62:47:83:af:27:dc:d0:
1e:9a:d1:5f:19:55:25:f6:a0:d0:3a:d3:f1:82:ec:61:1a:43:
a1:41:a2:03:d3:53:62:a3:73:94:8e:bd:36:25:74:66:0f:3b:
0c:dc:ca:e7:12:c1:4c:2a:a1:9a:4a:03:f5:eb:97:77:1a:bf:
58:74:cb:b5:6e:c6:8b:3b:f6:27:0c:08:04:8e:f4:fc:c1:fc:
4a:f2:67:2e:fd:dd:6d:bc:6b:d5:88:ca:f7:cf:68:57:bf:1c:
99:90:b5:3e:04:4a:df:62:b4:48:1b:5f:d6:6e:0d:37:de:5d:
67:04:88:f0:ab:70:fe:2f:e8:f5:8b:a3:c2:55:af:56:84:b0:
89:f0:1e:e3:f6:c9:3d:b8:da:25:a7:45:d7:95:13:b6:6e:e3:
d0:79:8f:14:06:6a:f6:6f:76:f8:9a:9b:1f:a4:68:47:e1:92:
97:76:bd:a1:d3:f1:1b:cb:cf:ae:b1:26:64:e3:10:f5:fe:c6:
02:fc:a5:fa:15:39:64:b0:ac:8a:d0:8f:3e:ea:0c:ee:c5:ff:
44:b4:37:3c:0c:7f:9e:1d:2a:60:d3:4a:b1:4e:00:8d:ed:53:
21:5f:65:b0:03:d1:35:dc:1b:68:f3:35:ab:ec:f6:2a:6d:5a:
8a:3e:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 04:38:16 2025 by rpki-client