Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GtwybuXSPDbJ4I2-HmdVGNB_DAo.roa
File: GtwybuXSPDbJ4I2-HmdVGNB_DAo.roa (raw, json)
Hash identifier: UlkOO8SiNc5wHlIAdLdxISIB2XCTub6UvqnJ1ktlTbs=
Subject key identifier: 1A:DC:32:6E:E5:D2:3C:36:C9:E0:8D:BE:1E:67:55:18:D0:7F:0C:0A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D57B03B4EA6B3C0AD062520DBF547F65
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GtwybuXSPDbJ4I2-HmdVGNB_DAo.roa
Signing time: Sat 23 Aug 2025 05:51:05 +0000
ROA not before: Sat 23 Aug 2025 05:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149573
IP address blocks: 151.242.51.0/24 maxlen: 24
151.243.12.0/24 maxlen: 24
151.243.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:7b:03:b4:ea:6b:3c:0a:d0:62:52:0d:bf:54:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 23 05:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1adc326ee5d23c36c9e08dbe1e675518d07f0c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:17:b3:23:e0:e6:c6:cd:93:bd:39:5f:40:
57:08:bb:68:f6:5f:f3:88:03:e9:5d:15:74:f1:48:
55:21:b8:18:78:43:74:a0:32:f3:a8:4e:e6:d7:39:
09:3f:58:5c:2e:d5:52:c7:34:fe:4b:1a:87:8c:bb:
7d:4a:aa:cc:5e:41:7d:59:b4:35:e9:c9:37:cb:30:
10:63:d9:53:43:07:b9:9f:03:fe:7a:a4:61:a3:1d:
5f:57:8c:03:88:d1:f8:23:49:05:23:fd:be:69:10:
f8:fe:2e:e8:b1:66:37:65:fb:b4:06:bf:dd:ad:dd:
66:3d:5e:1a:70:b6:9e:ab:19:c9:9d:e2:25:fb:32:
2b:11:33:9d:39:1a:c4:30:20:86:77:f0:96:72:e5:
83:ab:7f:bd:a2:93:a3:f4:ac:c2:d0:7b:05:4b:67:
78:5d:64:d6:d7:c8:1b:b7:72:e0:d7:94:25:0e:29:
92:66:97:23:7f:26:d3:da:bd:ee:16:05:94:bf:99:
f1:64:71:d9:ca:90:8e:9a:8a:83:38:32:33:e1:1e:
1d:d6:a6:43:df:03:17:52:d8:44:aa:b1:17:ea:e2:
b8:10:69:63:7a:e9:b7:57:9a:a8:89:86:3b:2b:45:
d4:cc:d3:5a:07:b2:a4:ca:18:d8:87:04:90:87:ed:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:32:6E:E5:D2:3C:36:C9:E0:8D:BE:1E:67:55:18:D0:7F:0C:0A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GtwybuXSPDbJ4I2-HmdVGNB_DAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.51.0/24
151.243.12.0/24
151.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2b:2d:1f:16:89:4b:0f:eb:29:38:b6:13:17:32:9f:52:35:
99:12:de:73:29:35:d5:1a:e2:64:31:b9:f1:d2:ee:01:50:85:
5c:15:90:d4:b5:89:1c:db:3f:ee:d3:e0:28:ad:3a:99:e7:58:
16:82:1c:15:53:32:49:8a:da:63:b1:aa:b6:f0:0b:a6:2b:c5:
0d:d9:4b:ec:7b:09:10:db:a9:a7:e4:79:f7:b4:4c:1f:1e:8b:
ea:d6:24:af:c5:c6:af:ac:57:0a:a7:9c:8b:13:ec:55:12:5b:
6a:af:9c:cc:83:ab:37:6e:bf:e9:b1:85:28:84:3f:5a:10:70:
e8:53:40:e9:e8:5e:16:b5:b8:fc:a9:cf:71:e3:c2:80:8f:7b:
3a:2b:19:84:e5:88:62:d7:16:94:7c:2b:4e:5e:22:c5:2a:ef:
b2:0a:ce:a0:3e:b7:2e:49:62:38:52:c0:62:6c:3e:2e:e1:4f:
0a:40:a6:3f:f3:13:99:1f:08:b2:64:cf:b7:fe:45:24:cc:fb:
68:bd:41:b5:3f:5b:41:49:7b:6c:f0:5e:45:d7:97:df:23:23:
32:d2:75:48:75:d8:c3:c5:26:45:e6:88:13:5b:8f:74:94:8b:
5d:8f:2a:b8:a7:1d:98:08:b1:d2:d7:09:fb:3b:61:b9:26:d1:
ab:cd:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:32 2025 by rpki-client