Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fEvWpTNr9MCi5EGh-sUPX9sGD_E.roa
File: fEvWpTNr9MCi5EGh-sUPX9sGD_E.roa (raw, json)
Hash identifier: 8jIIr/TmnMkwSuhEt63ANFuARzfKUcoez7aAaja3u8Y=
Subject key identifier: 7C:4B:D6:A5:33:6B:F4:C0:A2:E4:41:A1:FA:C5:0F:5F:DB:06:0F:F1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01965BC1D20287E55CF24E595E9E5AE41384
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fEvWpTNr9MCi5EGh-sUPX9sGD_E.roa
Signing time: Tue 22 Apr 2025 04:29:10 +0000
ROA not before: Tue 22 Apr 2025 04:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 151.242.11.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.180.0/22 maxlen: 22
151.242.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:c1:d2:02:87:e5:5c:f2:4e:59:5e:9e:5a:e4:13:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 22 04:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c4bd6a5336bf4c0a2e441a1fac50f5fdb060ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:98:c3:9a:ea:0c:03:6b:cc:db:4a:6e:ef:
f1:eb:40:80:ad:b5:5b:0a:33:65:c5:c8:07:52:ee:
02:c0:50:a1:09:53:dc:af:6d:90:ae:72:13:c6:64:
47:bc:93:3d:6c:7f:35:4c:80:e6:79:b7:4e:56:0e:
a6:88:e2:a6:eb:2e:6a:97:06:78:05:ed:13:6e:30:
9c:9a:69:66:57:0a:5e:f9:45:66:cd:6f:78:74:15:
af:80:ea:6f:e8:f3:ce:d8:52:22:1d:26:fc:72:10:
d1:77:ea:3c:7d:59:a3:fb:1e:89:3d:6e:a8:23:eb:
75:35:e5:ba:2e:2d:99:f3:6a:c4:1a:c7:3a:9c:46:
c3:0d:1e:95:86:f0:00:65:76:1b:3c:1f:3f:37:3b:
b8:8c:87:33:4a:85:ef:f5:47:cf:1e:8d:59:fa:5a:
25:4d:67:9a:8f:55:90:12:88:5b:4d:d9:f1:d2:7e:
82:10:1f:86:36:1d:94:31:1d:19:d0:25:3c:b4:3a:
3c:33:23:ad:ac:9b:48:75:e7:84:6c:83:41:9f:ba:
82:dd:d6:ee:7c:d1:ce:6d:27:ca:9d:db:24:22:c8:
8e:60:8e:2b:52:4c:db:89:d2:03:51:71:d1:e4:81:
8f:ea:56:53:b4:ed:36:43:94:18:f8:46:06:7d:b1:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:D6:A5:33:6B:F4:C0:A2:E4:41:A1:FA:C5:0F:5F:DB:06:0F:F1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fEvWpTNr9MCi5EGh-sUPX9sGD_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.11.0/24
151.242.14.0/24
151.242.27.0/24
151.242.180.0/22
151.242.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:77:43:95:2a:ec:fa:15:ef:3f:0c:51:a7:d1:26:fe:0e:46:
12:ed:21:43:50:41:9e:d5:23:ac:9f:a4:81:35:a0:70:4a:33:
44:d7:5a:07:e9:42:23:fb:8e:12:97:19:bb:3e:b7:7b:e8:b1:
8e:8e:3e:ff:60:15:fd:14:d0:ef:58:79:d2:4f:2b:2e:5c:38:
0c:55:63:4d:0d:91:a1:7c:f3:ef:4b:c0:e8:c3:6f:41:7d:a2:
7a:4a:8a:36:ab:6e:94:13:cc:8a:09:76:27:74:e9:87:b9:5c:
cd:97:26:a3:9a:23:6a:e6:1f:59:2b:4f:c1:c1:36:68:a9:6d:
4f:e6:6b:b4:cd:5e:fe:5e:4a:02:fa:17:d6:c4:9d:fb:96:4a:
c4:50:89:d3:df:c2:ad:d7:c7:38:49:3c:2f:84:97:d8:d3:17:
5f:0a:31:e7:86:c3:71:1f:9c:b6:32:97:62:23:d1:23:3b:33:
7f:06:30:09:e0:7b:cb:c3:7e:6f:38:32:a1:b7:96:dd:ca:c1:
d9:a3:b7:4b:c4:63:e4:86:f7:96:c2:bd:6e:1d:74:e2:ca:5f:
49:db:f6:0a:14:14:31:50:09:c6:f4:6b:b1:55:dd:13:6e:c4:
ff:00:09:19:3b:0f:b6:ee:b1:b6:16:bd:0f:36:4b:7c:ba:06:
85:36:46:cc
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZZbwdICh+Vc8k5ZXp5a5BOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDIyMDQyOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzRiZDZhNTMzNmJmNGMwYTJlNDQxYTFmYWM1MGY1ZmRiMDYwZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslWYw5rqDANrzNtKbu/x60CArbVb
CjNlxcgHUu4CwFChCVPcr22QrnITxmRHvJM9bH81TIDmebdOVg6miOKm6y5qlwZ4
Be0TbjCcmmlmVwpe+UVmzW94dBWvgOpv6PPO2FIiHSb8chDRd+o8fVmj+x6JPW6o
I+t1NeW6Li2Z82rEGsc6nEbDDR6VhvAAZXYbPB8/Nzu4jIczSoXv9UfPHo1Z+lol
TWeaj1WQEohbTdnx0n6CEB+GNh2UMR0Z0CU8tDo8MyOtrJtIdeeEbINBn7qC3dbu
fNHObSfKndskIsiOYI4rUkzbidIDUXHR5IGP6lZTtO02Q5QY+EYGfbFoQwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHxL1qUza/TAouRBofrFD1/bBg/xMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZkV2V3BUTnI5TUNpNUVHaC1zVVBYOXNHRF9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/ILAwQA
l/IOAwQAl/IbAwQCl/K0AwQAl/L/MA0GCSqGSIb3DQEBCwUAA4IBAQC0d0OVKuz6
Fe8/DFGn0Sb+DkYS7SFDUEGe1SOsn6SBNaBwSjNE11oH6UIj+44Slxm7Prd76LGO
jj7/YBX9FNDvWHnSTysuXDgMVWNNDZGhfPPvS8Dow29BfaJ6Soo2q26UE8yKCXYn
dOmHuVzNlyajmiNq5h9ZK0/BwTZoqW1P5mu0zV7+XkoC+hfWxJ37lkrEUInT38Kt
18c4STwvhJfY0xdfCjHnhsNxH5y2MpdiI9EjOzN/BjAJ4HvLw35vODKht5bdysHZ
o7dLxGPkhveWwr1uHXTiyl9J2/YKFBQxUAnG9GuxVd0TbsT/AAkZOw+27rG2Fr0P
Nkt8ugaFNkbM
-----END CERTIFICATE-----
Generated at Wed May 14 19:39:19 2025 by rpki-client