Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jE35sge-bhSY6pzrElfNEjkKLeY.roa
File: jE35sge-bhSY6pzrElfNEjkKLeY.roa (raw, json)
Hash identifier: 2tPNE/fuLsL4RdMcfIn6U5GkmZNpz1tMf6asva+8C2c=
Subject key identifier: 8C:4D:F9:B2:07:BE:6E:14:98:EA:9C:EB:12:57:CD:12:39:0A:2D:E6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197968D2D184A6963E1A2F111E2D92F3CDF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jE35sge-bhSY6pzrElfNEjkKLeY.roa
Signing time: Sun 22 Jun 2025 07:32:03 +0000
ROA not before: Sun 22 Jun 2025 07:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 151.240.75.0/24 maxlen: 24
151.243.15.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:8d:2d:18:4a:69:63:e1:a2:f1:11:e2:d9:2f:3c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 22 07:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c4df9b207be6e1498ea9ceb1257cd12390a2de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:f4:27:09:04:11:e7:ab:cd:24:96:60:20:
e3:1c:00:9e:b4:d0:f1:1d:ee:5c:20:1e:a4:7d:18:
fb:aa:df:83:b7:77:33:9c:f2:8a:0e:9c:b7:03:09:
21:42:57:e5:9c:d0:fc:a0:0b:73:5e:9c:9c:00:81:
32:14:f3:92:9d:86:5f:3d:73:85:e7:3f:f7:16:fb:
4f:c7:e5:a3:8d:11:ff:34:61:80:53:91:3e:3d:ac:
be:50:26:6b:4e:17:97:fe:c7:44:f5:54:ac:2d:fe:
ce:ee:3b:8e:8d:ef:0c:d8:e2:86:7d:d6:ca:63:d3:
2f:ad:1e:e7:61:5d:ad:51:5d:42:54:05:41:a7:e7:
3f:b6:b6:a5:02:2d:c8:a9:a4:43:14:f6:7b:f3:75:
22:97:2c:1e:fc:e9:57:26:cf:91:43:6d:c6:43:38:
0d:79:90:0b:64:a6:a7:ed:ce:9e:79:fc:93:70:40:
06:90:7b:f1:a0:56:39:b7:47:40:40:35:e5:77:63:
dd:5c:2e:99:79:28:2f:b0:fd:e7:55:20:75:8c:a6:
03:0b:c2:61:13:42:0d:bb:4c:ec:10:ed:6e:63:d5:
c3:cf:e4:74:52:e9:b7:fd:fe:8d:f1:66:7f:03:ce:
0b:35:c4:2e:f3:a1:da:4c:73:e5:0c:e1:cf:37:59:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:F9:B2:07:BE:6E:14:98:EA:9C:EB:12:57:CD:12:39:0A:2D:E6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jE35sge-bhSY6pzrElfNEjkKLeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.75.0/24
151.243.15.0/24
151.243.255.0/24
Signature Algorithm: sha256WithRSAEncryption
41:47:c7:83:6e:81:ca:de:a8:b0:c0:d4:53:bc:e3:79:41:2e:
95:de:5c:8a:98:87:1b:44:51:62:51:09:7a:ba:60:f5:1d:9e:
73:c6:3d:c1:a7:dd:4d:da:24:e0:26:89:d4:29:0b:3c:66:71:
2e:4c:8d:1e:44:f0:b3:1b:62:d1:ea:70:e5:b2:51:f2:2e:71:
6c:65:b2:77:20:50:c2:ea:3e:0f:82:ee:88:75:e7:7f:eb:1d:
61:52:83:5b:7a:a6:08:b8:52:ed:1b:79:74:c3:b4:56:23:c7:
a3:63:96:11:91:8b:37:ec:7f:67:98:c2:33:95:75:79:35:cc:
ef:c2:33:5f:86:84:85:72:fe:33:f0:4b:7b:2e:b3:62:47:76:
9c:86:b9:0d:a6:86:5d:7a:4f:e3:f4:7e:56:2d:4b:eb:6e:81:
70:d5:f3:71:df:42:b2:83:4e:71:57:70:61:9f:4f:f0:da:1f:
e7:51:b7:ae:03:17:ab:9f:32:42:bf:1f:ac:b2:9b:0a:fa:63:
6e:45:51:35:0a:73:74:c6:4a:c5:de:a6:c6:0a:c2:67:c5:e2:
df:e1:c5:87:a6:18:43:64:43:6e:4c:86:98:e1:30:4e:24:9b:
a1:30:81:0d:d3:ac:63:b1:6c:60:de:d7:cc:a6:8e:b4:1f:71:
8e:da:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:32:05 2025 by rpki-client