Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GbpsXUSaFae_Y6sWe7_WNU5VfJE.roa
File: GbpsXUSaFae_Y6sWe7_WNU5VfJE.roa (raw, json)
Hash identifier: 9X9yRdTSqO4clKKZkABc9vA/4AHIJrZiJ9hfTbRxGw8=
Subject key identifier: 19:BA:6C:5D:44:9A:15:A7:BF:63:AB:16:7B:BF:D6:35:4E:55:7C:91
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197C5C85F343D2B2FF8CF7873657BBC455A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GbpsXUSaFae_Y6sWe7_WNU5VfJE.roa
Signing time: Tue 01 Jul 2025 11:38:52 +0000
ROA not before: Tue 01 Jul 2025 11:38:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 151.243.162.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:c8:5f:34:3d:2b:2f:f8:cf:78:73:65:7b:bc:45:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 11:38:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19ba6c5d449a15a7bf63ab167bbfd6354e557c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:c7:18:d9:da:2b:76:52:f4:7a:21:0c:6b:
8d:ce:ca:aa:4b:9c:a4:a7:12:9a:4a:5d:4f:73:8c:
e8:2f:09:e2:7a:d1:1a:52:38:cc:c4:01:b0:34:1b:
51:ac:81:0a:1b:f3:33:af:73:54:44:80:87:7b:4e:
4a:3a:3f:e2:89:35:23:23:3e:47:59:10:64:6f:0f:
b5:55:a7:bb:35:31:1d:78:6a:b1:a8:22:11:24:86:
8b:1c:aa:af:f9:90:50:f6:14:d0:40:af:ad:f4:59:
b8:b0:29:05:75:72:85:bb:97:89:95:4a:1d:b4:ba:
02:81:f9:ac:9f:60:cd:7e:68:19:86:6d:20:54:c0:
cc:8c:56:dd:74:ba:1d:32:7e:3c:6f:6a:c6:50:e0:
fa:e1:cd:99:0a:3b:36:30:0d:d1:ba:5d:8a:c1:20:
71:09:5c:c5:e3:b0:2d:ca:57:96:bf:26:43:38:60:
75:25:17:62:83:6c:4e:a2:46:b5:03:d2:0a:49:c8:
6b:72:8d:03:f5:20:4e:2d:26:e5:0a:b9:04:92:dc:
60:29:20:1e:d8:62:50:e2:6a:f1:c4:93:c6:8b:48:
65:46:29:88:4c:ce:47:bd:cc:25:24:2a:e7:90:1e:
0e:fa:4e:2f:99:d1:07:0b:5d:16:a0:20:76:ec:8c:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BA:6C:5D:44:9A:15:A7:BF:63:AB:16:7B:BF:D6:35:4E:55:7C:91
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GbpsXUSaFae_Y6sWe7_WNU5VfJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.162.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cd:2c:1b:e5:3f:84:51:3d:ab:7d:d2:5e:e0:86:26:c3:99:
b4:09:c5:7e:0a:ee:d5:a0:6d:47:36:bc:7a:7a:fa:5f:d4:7a:
a1:a7:8d:05:c5:e3:92:94:d1:23:8a:66:cc:ff:db:2f:bc:4c:
fe:cd:57:92:00:e7:20:44:2d:ee:db:64:a2:c0:2c:e5:72:74:
b4:75:62:0e:5b:7a:aa:f0:0e:df:d6:fd:ea:2f:d1:86:81:f3:
26:09:32:34:45:17:8a:c6:cd:ed:02:93:88:c6:5e:4e:16:09:
50:5d:f6:17:a6:b5:47:5b:26:db:ea:e3:79:9f:fd:9a:8b:6c:
d6:5a:b7:b2:63:61:9e:0b:e3:87:a5:eb:e1:4c:5f:7c:87:5d:
4d:0d:ae:9d:dc:99:7a:1d:1d:de:51:ab:8d:68:d0:65:55:8f:
bc:67:a0:4c:85:d3:45:52:34:7d:72:e2:e5:35:47:33:a8:ab:
53:1a:8e:9a:76:55:c9:6d:86:bc:fe:4e:39:43:19:e5:14:52:
94:da:7f:76:ff:2f:55:e7:48:32:c6:cc:67:c6:5e:df:26:cc:
38:62:4c:ba:a1:9c:cf:60:a9:25:cb:1a:16:48:bd:a2:ef:fd:
7c:f5:d7:f1:65:95:b4:d3:73:09:2b:bc:4b:87:6a:8d:7f:da:
a6:34:f2:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZfFyF80PSsv+M94c2V7vEVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzAxMTEzODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWJhNmM1ZDQ0OWExNWE3YmY2M2FiMTY3YmJmZDYzNTRlNTU3YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjfHGNnaK3ZS9HohDGuNzsqqS5yk
pxKaSl1Pc4zoLwnietEaUjjMxAGwNBtRrIEKG/Mzr3NURICHe05KOj/iiTUjIz5H
WRBkbw+1Vae7NTEdeGqxqCIRJIaLHKqv+ZBQ9hTQQK+t9Fm4sCkFdXKFu5eJlUod
tLoCgfmsn2DNfmgZhm0gVMDMjFbddLodMn48b2rGUOD64c2ZCjs2MA3Rul2KwSBx
CVzF47AtyleWvyZDOGB1JRdig2xOoka1A9IKSchrco0D9SBOLSblCrkEktxgKSAe
2GJQ4mrxxJPGi0hlRimITM5HvcwlJCrnkB4O+k4vmdEHC10WoCB27IzZvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBm6bF1EmhWnv2OrFnu/1jVOVXyRMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR2Jwc1hVU2FGYWVfWTZzV2U3X1dOVTVWZkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/OiAwQA
l/P+MA0GCSqGSIb3DQEBCwUAA4IBAQCSzSwb5T+EUT2rfdJe4IYmw5m0CcV+Cu7V
oG1HNrx6evpf1Hqhp40FxeOSlNEjimbM/9svvEz+zVeSAOcgRC3u22SiwCzlcnS0
dWIOW3qq8A7f1v3qL9GGgfMmCTI0RReKxs3tApOIxl5OFglQXfYXprVHWybb6uN5
n/2ai2zWWreyY2GeC+OHpevhTF98h11NDa6d3Jl6HR3eUauNaNBlVY+8Z6BMhdNF
UjR9cuLlNUczqKtTGo6adlXJbYa8/k45QxnlFFKU2n92/y9V50gyxsxnxl7fJsw4
Yky6oZzPYKklyxoWSL2i7/189dfxZZW003MJK7xLh2qNf9qmNPJN
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:50:34 2025 by rpki-client