Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GZqzYSWH_Gfing3uJWjBsu_R150.roa
File: GZqzYSWH_Gfing3uJWjBsu_R150.roa (raw, json)
Hash identifier: ckkhHjS2gvm1qNDoLQFRrGVhaJirGeGR/+EpALsdgtE=
Subject key identifier: 19:9A:B3:61:25:87:FC:67:E2:9E:0D:EE:25:68:C1:B2:EF:D1:D7:9D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019676AA3EED034FD659C1333C0A9C4D2E7B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GZqzYSWH_Gfing3uJWjBsu_R150.roa
Signing time: Sun 27 Apr 2025 09:53:10 +0000
ROA not before: Sun 27 Apr 2025 09:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215672
IP address blocks: 151.242.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:aa:3e:ed:03:4f:d6:59:c1:33:3c:0a:9c:4d:2e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 27 09:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=199ab3612587fc67e29e0dee2568c1b2efd1d79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:01:c3:58:6c:62:98:61:69:19:5e:39:ed:
5d:ef:e9:38:f2:eb:0d:27:bf:40:c2:60:e0:b3:ed:
de:a4:56:ef:58:66:66:b3:a8:26:dd:7b:8c:5b:06:
0d:c5:0a:e6:bd:7c:3d:2a:18:52:76:9a:eb:cf:ad:
05:28:f2:2d:67:55:9c:1b:ca:b4:31:b8:b5:fd:70:
e5:7b:50:d3:01:08:29:71:3d:65:ca:9a:e4:82:22:
42:17:3d:0a:3b:c8:3a:1b:3e:c1:24:28:34:fe:79:
f3:a6:3f:2e:3f:c5:d3:e5:93:f0:f5:c8:24:ab:0f:
fe:a2:f4:04:b6:e2:dc:e7:ce:92:4b:fd:bf:2f:58:
2c:cd:27:60:00:40:43:00:15:37:f3:90:fe:ba:50:
36:9d:89:f3:51:d7:1d:d6:26:dc:80:9a:99:5b:13:
b9:2f:3f:38:ec:18:3f:97:b3:10:cf:78:23:4b:e1:
b8:d0:ff:c3:97:db:77:62:8f:34:c3:46:8c:3c:59:
2f:58:89:38:c4:e1:aa:10:18:03:8d:2b:6f:42:b7:
9b:23:18:ac:28:01:26:dc:55:4f:f1:40:e3:27:9f:
ec:c0:f4:02:8a:5d:65:8e:76:b9:ba:4d:93:74:42:
24:a9:4c:32:7e:34:3e:b3:36:12:15:35:41:c9:9d:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:B3:61:25:87:FC:67:E2:9E:0D:EE:25:68:C1:B2:EF:D1:D7:9D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GZqzYSWH_Gfing3uJWjBsu_R150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.10.0/24
Signature Algorithm: sha256WithRSAEncryption
77:40:90:36:73:a8:ae:3d:60:c4:92:47:7c:2f:e9:03:52:4a:
05:86:df:ec:cf:83:09:b1:f4:0c:24:9b:46:20:6c:f2:1d:01:
a9:aa:a1:6d:2f:a4:7e:4d:a3:06:33:27:98:44:a9:86:12:06:
ee:ae:3c:ab:56:be:a3:48:07:bc:ee:54:3b:ba:f0:c4:8b:54:
d1:5e:3c:b2:34:a0:28:47:08:1b:43:e3:68:70:31:6c:fc:03:
f5:a6:74:f6:50:a7:7c:7f:b2:0e:04:fb:f9:2f:b2:eb:f0:70:
5d:aa:8a:90:1a:91:9f:64:48:93:f5:32:9c:91:7f:e2:5f:c8:
e6:87:32:de:91:89:1b:0e:65:c1:4a:78:54:bb:16:d6:ca:df:
0d:f0:f5:df:67:55:aa:99:f5:4c:f9:d3:ad:a6:3c:13:18:ad:
56:2b:02:a3:8e:40:4c:d7:f6:a7:98:cd:50:11:f7:92:39:8d:
b1:57:78:14:47:ff:b0:bd:c5:97:93:ac:e2:fc:3c:40:99:cf:
93:de:3d:b4:5e:7c:78:43:30:b5:39:9c:ed:df:18:eb:f4:5d:
3d:2d:02:46:0e:f4:a7:92:b0:68:6d:ea:1b:d5:88:bc:23:9f:
e5:c8:df:33:d5:21:58:e9:0f:1f:13:1f:26:ef:17:a7:44:53:
97:eb:90:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZ2qj7tA0/WWcEzPAqcTS57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDI3MDk1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTlhYjM2MTI1ODdmYzY3ZTI5ZTBkZWUyNTY4YzFiMmVmZDFkNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCYBw1hsYphhaRleOe1d7+k48usN
J79AwmDgs+3epFbvWGZms6gm3XuMWwYNxQrmvXw9KhhSdprrz60FKPItZ1WcG8q0
Mbi1/XDle1DTAQgpcT1lyprkgiJCFz0KO8g6Gz7BJCg0/nnzpj8uP8XT5ZPw9cgk
qw/+ovQEtuLc586SS/2/L1gszSdgAEBDABU385D+ulA2nYnzUdcd1ibcgJqZWxO5
Lz847Bg/l7MQz3gjS+G40P/Dl9t3Yo80w0aMPFkvWIk4xOGqEBgDjStvQrebIxis
KAEm3FVP8UDjJ5/swPQCil1ljna5uk2TdEIkqUwyfjQ+szYSFTVByZ1WGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmas2Elh/xn4p4N7iVowbLv0dedMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR1pxellTV0hfR2ZpbmczdUpXakJzdV9SMTUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IKMA0G
CSqGSIb3DQEBCwUAA4IBAQB3QJA2c6iuPWDEkkd8L+kDUkoFht/sz4MJsfQMJJtG
IGzyHQGpqqFtL6R+TaMGMyeYRKmGEgburjyrVr6jSAe87lQ7uvDEi1TRXjyyNKAo
RwgbQ+NocDFs/AP1pnT2UKd8f7IOBPv5L7Lr8HBdqoqQGpGfZEiT9TKckX/iX8jm
hzLekYkbDmXBSnhUuxbWyt8N8PXfZ1WqmfVM+dOtpjwTGK1WKwKjjkBM1/anmM1Q
EfeSOY2xV3gUR/+wvcWXk6zi/DxAmc+T3j20Xnx4QzC1OZzt3xjr9F09LQJGDvSn
krBobeob1Yi8I5/lyN8z1SFY6Q8fEx8m7xenRFOX65BS
-----END CERTIFICATE-----
Generated at Wed May 14 08:28:51 2025 by rpki-client