Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_rgabHvGT9c9D0kUMyOcX-uqlk.roa
File: G_rgabHvGT9c9D0kUMyOcX-uqlk.roa (raw, json)
Hash identifier: QDfFxo7z8LbHIzDv38PPY2k3fF8PAwTzonEy9uhx1cM=
Subject key identifier: 1B:FA:E0:69:B1:EF:19:3F:5C:F4:3D:24:50:CC:8E:71:7F:AE:AA:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196804D974E188422E6C66DB937D3984FE8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_rgabHvGT9c9D0kUMyOcX-uqlk.roa
Signing time: Tue 29 Apr 2025 06:48:10 +0000
ROA not before: Tue 29 Apr 2025 06:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 151.242.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:4d:97:4e:18:84:22:e6:c6:6d:b9:37:d3:98:4f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 29 06:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bfae069b1ef193f5cf43d2450cc8e717faeaa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:69:26:12:68:6c:ca:c5:cc:72:ac:72:69:
bf:a5:79:9f:a2:f1:c6:45:c2:3b:5e:27:52:a0:f7:
a6:07:10:f6:2d:92:0e:1f:c7:b9:23:5f:1b:bb:0e:
a6:4e:11:01:1d:de:56:e9:9e:67:20:1f:ad:64:e3:
b8:67:0a:a4:35:92:c6:df:77:3f:1a:d0:1f:c4:5d:
ad:5b:66:3c:6c:76:0b:92:3c:03:83:12:8a:65:04:
a9:91:a3:71:50:36:dc:dc:61:e8:7d:e2:20:34:d9:
50:4e:1b:23:45:52:72:f4:fc:e1:7e:4f:94:f3:8f:
8b:c3:b7:51:ef:09:7b:ab:68:0c:37:30:af:0f:50:
35:e5:eb:f8:52:51:16:cf:7b:82:0d:a6:ba:b3:a8:
23:e9:38:28:74:08:19:fe:39:be:71:6a:dd:58:cc:
92:64:67:58:d6:1d:34:fc:c7:30:dd:b1:56:04:1e:
c6:d6:e8:0e:03:c3:61:12:08:0a:fd:cd:21:cf:e5:
c1:7c:8a:10:2b:d8:c2:dd:15:ec:41:4e:08:19:96:
dc:0b:3b:88:72:0f:86:dc:26:e5:2a:67:46:09:f5:
4a:9c:20:19:28:d3:92:fb:6f:6c:84:a3:ac:65:48:
4b:94:b1:dd:8b:f5:12:4f:63:29:d2:63:e7:d9:3f:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:E0:69:B1:EF:19:3F:5C:F4:3D:24:50:CC:8E:71:7F:AE:AA:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_rgabHvGT9c9D0kUMyOcX-uqlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:14:62:63:9e:de:08:cc:12:61:16:4b:6d:81:bb:8e:5d:84:
4e:a6:d0:e5:fc:16:89:97:24:88:5d:98:ca:32:93:cc:05:1e:
8b:80:f7:79:1d:09:61:4e:85:19:0d:b3:8d:2e:c0:31:aa:ea:
7a:de:87:51:f5:f9:d5:f2:ac:38:6f:bc:62:33:c6:f2:57:1a:
6b:fb:52:60:eb:cb:51:03:60:d7:8f:c2:06:ac:aa:28:fc:91:
95:1f:36:8d:1c:42:26:d2:f2:fd:58:04:01:73:0c:6f:11:99:
4d:0a:d4:09:65:da:c4:ee:b3:4d:21:eb:45:ea:cb:4b:9f:33:
38:0e:54:9f:3c:1f:bd:79:b1:a3:58:06:b3:10:1c:c1:ed:e5:
35:11:f3:86:3e:75:12:8a:73:6a:7b:bc:a7:1d:37:b8:37:be:
9c:bc:42:3b:6d:b1:6d:5f:15:54:f9:38:3d:6a:bd:c2:6f:f6:
3c:a4:68:38:0f:67:6b:91:b8:4b:61:e6:1b:5f:ad:61:2b:68:
73:e8:49:99:58:39:b1:5a:5e:9e:3f:97:43:e5:00:e7:54:a2:
fe:1c:9d:e7:92:e3:11:1e:51:d9:14:4f:1c:ed:ac:fb:08:bf:
38:3b:52:b9:cc:b2:4d:8c:95:a2:2d:d7:01:67:e0:cb:16:a8:
92:51:0d:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaATZdOGIQi5sZtuTfTmE/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDI5MDY0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmZhZTA2OWIxZWYxOTNmNWNmNDNkMjQ1MGNjOGU3MTdmYWVhYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKFpJhJobMrFzHKscmm/pXmfovHG
RcI7XidSoPemBxD2LZIOH8e5I18buw6mThEBHd5W6Z5nIB+tZOO4ZwqkNZLG33c/
GtAfxF2tW2Y8bHYLkjwDgxKKZQSpkaNxUDbc3GHofeIgNNlQThsjRVJy9Pzhfk+U
84+Lw7dR7wl7q2gMNzCvD1A15ev4UlEWz3uCDaa6s6gj6TgodAgZ/jm+cWrdWMyS
ZGdY1h00/Mcw3bFWBB7G1ugOA8NhEggK/c0hz+XBfIoQK9jC3RXsQU4IGZbcCzuI
cg+G3CblKmdGCfVKnCAZKNOS+29shKOsZUhLlLHdi/UST2Mp0mPn2T9BWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBv64Gmx7xk/XPQ9JFDMjnF/rqpZMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR19yZ2FiSHZHVDljOUQwa1VNeU9jWC11cWxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KEMA0G
CSqGSIb3DQEBCwUAA4IBAQBuFGJjnt4IzBJhFkttgbuOXYROptDl/BaJlySIXZjK
MpPMBR6LgPd5HQlhToUZDbONLsAxqup63odR9fnV8qw4b7xiM8byVxpr+1Jg68tR
A2DXj8IGrKoo/JGVHzaNHEIm0vL9WAQBcwxvEZlNCtQJZdrE7rNNIetF6stLnzM4
DlSfPB+9ebGjWAazEBzB7eU1EfOGPnUSinNqe7ynHTe4N76cvEI7bbFtXxVU+Tg9
ar3Cb/Y8pGg4D2drkbhLYeYbX61hK2hz6EmZWDmxWl6eP5dD5QDnVKL+HJ3nkuMR
HlHZFE8c7az7CL84O1K5zLJNjJWiLdcBZ+DLFqiSUQ3D
-----END CERTIFICATE-----
Generated at Fri May 16 00:02:21 2025 by rpki-client