Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sl8_OV6yn82r1ADqUaw_N1wStBg.roa
File: sl8_OV6yn82r1ADqUaw_N1wStBg.roa (raw, json)
Hash identifier: lZLz+2L5aIN+yX8ucXAmXVakXQAJlx7I0gKf2w+MZcs=
Subject key identifier: B2:5F:3F:39:5E:B2:9F:CD:AB:D4:00:EA:51:AC:3F:37:5C:12:B4:18
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197968B571844FFE7439F48B344189DD3DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sl8_OV6yn82r1ADqUaw_N1wStBg.roa
Signing time: Sun 22 Jun 2025 07:30:03 +0000
ROA not before: Sun 22 Jun 2025 07:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 151.242.146.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:8b:57:18:44:ff:e7:43:9f:48:b3:44:18:9d:d3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 22 07:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b25f3f395eb29fcdabd400ea51ac3f375c12b418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:f3:07:23:5c:d2:2b:36:69:dc:b0:4b:32:
18:1f:44:aa:8d:05:ff:22:d0:7b:e6:d6:b2:05:2b:
b1:73:4f:7b:d3:16:60:44:2e:7b:49:72:4e:33:51:
64:bb:29:be:5d:e8:f7:3d:18:ee:f2:67:4e:9d:5e:
91:67:7d:59:a4:3c:83:a1:88:8f:77:1c:39:6f:b0:
e2:70:d9:aa:bd:0c:6b:c3:6a:5e:de:22:28:93:c8:
23:5c:d2:19:69:72:51:a5:45:84:db:b0:a4:cf:7b:
3b:7e:5e:d1:df:45:22:72:1b:e0:ea:91:ce:be:8c:
fc:f6:5d:66:9f:4c:f2:64:9b:73:8b:64:58:db:b5:
a1:7d:35:95:7e:8e:94:ea:26:1f:30:b8:c4:9b:81:
18:df:33:33:fa:ac:46:55:35:51:37:b0:52:93:ab:
43:31:ea:fb:83:63:df:e5:a9:11:e3:40:2b:87:c0:
b1:25:25:d1:2c:11:2f:09:14:11:d6:ed:14:d1:24:
df:78:37:96:63:f0:19:c3:e7:e6:78:d0:e2:b9:f9:
93:f9:7d:61:28:52:80:3a:08:f7:1b:4e:9f:65:c9:
d4:ae:07:1b:ab:69:73:39:41:80:50:04:ae:9a:c1:
af:fc:c3:0b:9e:68:f0:ad:0b:27:68:04:0b:b8:ed:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:3F:39:5E:B2:9F:CD:AB:D4:00:EA:51:AC:3F:37:5C:12:B4:18
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sl8_OV6yn82r1ADqUaw_N1wStBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.146.0/24
151.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
38:04:9a:10:e3:10:c9:33:17:4f:e3:b4:ba:72:5d:c1:e8:ea:
4c:57:81:5b:b4:0d:fc:63:b5:46:b7:fd:73:2d:f7:5f:1c:da:
7a:f7:c7:03:85:e0:d3:60:72:32:54:4c:cf:ec:cf:8b:e7:b4:
2c:bc:a2:8f:13:35:41:d1:4e:f4:95:7a:43:a0:4b:e7:61:82:
bb:d1:08:ad:12:37:c2:d4:4a:ff:9f:a3:25:1b:ed:9d:11:a7:
70:76:a3:c1:fe:b7:0b:b4:a2:5b:c8:9f:e4:8f:26:0e:f4:77:
81:5a:f2:92:d9:b7:1d:9f:5e:ca:35:0f:b9:e7:d0:47:08:a1:
2e:26:d4:ef:db:5f:6e:be:f6:73:a9:95:56:03:d9:3a:8b:c8:
0a:c1:5e:e3:c0:0d:1c:6a:1b:bb:79:4d:02:92:30:f6:82:ef:
5d:ee:20:6f:f5:8a:ce:0c:a8:e8:5d:53:07:21:4c:2d:b0:35:
af:fa:e3:1c:dd:54:e2:37:21:8f:d9:70:aa:ec:fd:b4:2f:60:
c6:ad:13:64:40:61:4a:cd:7b:05:19:a0:02:05:5d:6c:f3:71:
bd:93:a0:5b:79:2b:67:41:6c:b3:71:f0:ed:a1:03:43:03:c9:
ec:0f:11:23:06:40:03:37:bf:52:96:97:ee:1e:6e:80:bc:d2:
a5:47:1c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:29:15 2025 by rpki-client