Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GUB36csyI0S99skQWwXQxNus4xs.roa
File: GUB36csyI0S99skQWwXQxNus4xs.roa (raw, json)
Hash identifier: Mrav1xPZ+2IWnnq44KIDVe8X61EOtuw3/bS5Mdv2N9g=
Subject key identifier: 19:40:77:E9:CB:32:23:44:BD:F6:C9:10:5B:05:D0:C4:DB:AC:E3:1B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196AABA80520FDD7475B6343989CE9F52DF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GUB36csyI0S99skQWwXQxNus4xs.roa
Signing time: Wed 07 May 2025 12:31:11 +0000
ROA not before: Wed 07 May 2025 12:31:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211407
IP address blocks: 151.242.116.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:ba:80:52:0f:dd:74:75:b6:34:39:89:ce:9f:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 7 12:31:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=194077e9cb322344bdf6c9105b05d0c4dbace31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:a9:03:e4:91:03:ff:97:17:8d:ea:5c:6a:
98:45:91:26:9b:c8:54:22:51:ea:fd:37:bc:de:06:
8f:25:35:9c:bb:98:30:03:e6:68:c8:13:ab:e8:3c:
ba:82:ea:eb:87:54:1c:43:c8:ca:60:d6:5d:9d:b9:
2a:33:bb:16:55:09:dd:94:3b:fb:7c:30:ec:eb:20:
b1:7a:f7:eb:7d:8a:4d:83:52:30:65:c2:e6:63:a1:
e5:e3:0c:66:bf:95:bc:8d:f5:13:23:02:c6:01:db:
7f:1d:91:42:44:c4:a4:52:8c:4b:e6:56:f3:a7:9f:
37:b8:f9:2a:d3:c0:1a:ab:46:fb:fe:0e:07:9a:99:
69:69:5d:15:5c:f6:70:f9:e4:a4:f9:52:0b:30:4a:
f7:d7:21:b7:b8:dd:08:04:1f:66:a7:74:3c:6d:f2:
9a:ce:af:0d:8b:40:3b:55:08:46:6f:2b:d9:7f:5c:
40:48:2f:ef:d9:58:27:e4:1a:66:1a:92:72:45:b9:
ca:71:47:31:48:6c:89:ec:0d:7e:13:0c:65:6a:c3:
1d:36:80:5c:03:52:4f:b4:1e:11:59:54:86:59:6b:
35:b1:4b:bb:1e:86:4a:87:b3:f5:06:d6:75:b8:2d:
6c:1d:e4:9c:08:72:0f:6e:0f:17:87:58:b5:ae:7f:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:77:E9:CB:32:23:44:BD:F6:C9:10:5B:05:D0:C4:DB:AC:E3:1B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GUB36csyI0S99skQWwXQxNus4xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.116.0/24
151.242.139.0/24
Signature Algorithm: sha256WithRSAEncryption
68:cc:47:ba:91:d6:f4:40:94:13:54:00:d0:4a:04:b1:55:1c:
b0:7f:cc:04:b5:d0:bd:78:79:cc:54:a5:f3:48:05:25:3c:e2:
cb:d3:d6:c6:54:f8:d8:ab:a7:d1:91:e1:4c:ee:da:36:31:5c:
aa:d9:2d:f2:cc:33:7a:fa:22:93:ef:fd:7b:43:69:c7:ad:dd:
a8:d2:d5:c8:4b:ee:c4:ce:b6:9e:b9:3b:5f:9d:c3:d6:e5:a9:
d3:37:bc:f8:23:32:06:d2:1a:32:b0:0d:cc:3a:20:04:f3:be:
8b:e1:7c:50:ee:45:04:5d:91:b2:b7:40:dd:a7:4c:70:e1:b8:
ab:fb:82:d9:d8:33:f9:e9:a1:ec:21:cc:e1:04:93:73:2d:dc:
e0:46:e4:77:0f:60:18:72:25:7e:dd:3b:13:a5:58:72:fd:34:
10:85:d1:04:bd:1b:b5:15:4d:1e:58:93:ec:14:07:70:6e:6f:
24:63:c9:53:12:e4:b6:6f:c3:ab:63:9c:1b:53:ab:30:31:46:
82:3b:94:b3:9d:f9:69:cc:ab:d0:27:50:df:ff:96:63:19:9a:
43:6c:11:5e:81:38:ac:22:65:75:95:bf:2c:66:49:15:f3:62:
70:20:6c:43:5e:3f:2f:2a:d3:da:95:5c:ab:d9:98:69:52:ce:
8a:c8:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:41:52 2025 by rpki-client