Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uLeekH66xFKsNwVA1_191EXTv3s.roa
File: uLeekH66xFKsNwVA1_191EXTv3s.roa (raw, json)
Hash identifier: QYW3n4iVGrDOmHCdmruvs8LV3d+TgAfQ58tQwtzZw1E=
Subject key identifier: B8:B7:9E:90:7E:BA:C4:52:AC:37:05:40:D7:FD:7D:D4:45:D3:BF:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196DCECD8645CE0E15B18374E3299E07229
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uLeekH66xFKsNwVA1_191EXTv3s.roa
Signing time: Sat 17 May 2025 06:27:11 +0000
ROA not before: Sat 17 May 2025 06:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202662
IP address blocks: 151.245.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:ec:d8:64:5c:e0:e1:5b:18:37:4e:32:99:e0:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 17 06:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8b79e907ebac452ac370540d7fd7dd445d3bf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:0b:2f:c2:bd:66:aa:80:6f:3a:27:bb:9c:
ce:fd:83:0d:01:d9:36:fe:f5:65:f5:40:ac:99:7d:
ac:78:61:9b:04:c9:f2:ab:68:bb:c4:01:7d:9d:f3:
bf:96:ea:c8:6a:7d:43:a1:b7:40:40:4f:e3:86:92:
47:25:15:ae:d2:c9:30:96:f8:6f:a3:07:38:83:fe:
57:d2:9b:01:bc:98:45:c8:1a:4c:83:27:ea:f9:82:
07:fd:a1:3e:f0:7a:00:ba:87:25:3d:b0:61:e4:c7:
83:b4:45:7a:c5:c4:e4:fe:b2:8d:4e:14:16:9f:a6:
e9:21:28:86:9d:1e:9a:c6:72:f5:bd:b1:5d:43:07:
5c:63:28:31:48:5f:47:9c:8e:bd:e8:1f:c0:54:41:
af:d6:80:8e:9d:9e:5b:c9:91:e1:25:7e:e3:2d:a3:
c2:06:10:e4:da:ba:c6:58:f1:05:85:e4:18:62:05:
0c:e1:54:24:73:01:b1:54:a0:a9:ea:03:d6:bc:8b:
1a:87:34:12:e9:21:d2:e5:12:b9:52:de:01:23:ef:
e2:a8:bc:8c:00:ed:f5:fe:10:c0:fd:31:86:a3:03:
89:1c:3a:f5:63:0d:2b:58:80:b4:3d:16:3a:75:8d:
a2:2e:a9:4a:ff:f6:0d:85:bb:95:ae:49:28:f4:11:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:9E:90:7E:BA:C4:52:AC:37:05:40:D7:FD:7D:D4:45:D3:BF:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uLeekH66xFKsNwVA1_191EXTv3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.98.0/24
Signature Algorithm: sha256WithRSAEncryption
33:26:ad:bb:83:b3:4e:ae:25:07:d5:0f:cc:77:df:9d:f7:51:
b0:ec:fc:5a:7c:3b:f0:f0:4d:f5:8d:fc:72:11:7a:ea:3a:95:
fe:20:cb:f8:53:bd:83:ec:43:8a:eb:08:b5:36:95:24:23:c0:
8d:69:53:c7:4c:9d:5e:3c:ef:40:f8:b4:a8:1a:dd:0c:e8:4f:
53:3a:ac:07:9b:b3:3a:f1:d5:a9:ef:24:45:dc:ec:19:f8:d7:
0e:82:21:92:cc:88:8d:03:5b:6e:56:85:52:15:49:07:11:4a:
9e:50:5f:2c:ad:9b:4f:c8:39:b0:79:15:ba:9f:f0:7a:a0:00:
4f:c1:86:40:b1:86:a8:16:6d:38:b4:6b:54:ac:8a:11:0b:d4:
09:6b:ea:a1:14:2c:cc:51:3b:25:fa:4b:61:27:8f:af:49:40:
e8:c8:5d:b0:98:3e:99:2f:10:e4:73:a7:af:c0:ea:9f:4f:5d:
87:78:b2:9e:b7:99:6f:13:2b:ca:cb:c0:88:7f:4d:15:2b:b7:
28:46:75:e6:fe:bf:11:12:34:f4:d5:05:d3:09:ab:b7:2e:cd:
e4:97:68:16:7a:52:b8:63:eb:55:9f:d1:5d:b1:92:bc:5f:6c:
95:7b:e3:e2:43:cb:85:be:5c:6b:70:ca:bc:32:4c:38:84:ff:
5c:3b:75:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbc7NhkXODhWxg3TjKZ4HIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTE3MDYyNzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGI3OWU5MDdlYmFjNDUyYWMzNzA1NDBkN2ZkN2RkNDQ1ZDNiZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfkLL8K9ZqqAbzonu5zO/YMNAdk2
/vVl9UCsmX2seGGbBMnyq2i7xAF9nfO/lurIan1DobdAQE/jhpJHJRWu0skwlvhv
owc4g/5X0psBvJhFyBpMgyfq+YIH/aE+8HoAuoclPbBh5MeDtEV6xcTk/rKNThQW
n6bpISiGnR6axnL1vbFdQwdcYygxSF9HnI696B/AVEGv1oCOnZ5byZHhJX7jLaPC
BhDk2rrGWPEFheQYYgUM4VQkcwGxVKCp6gPWvIsahzQS6SHS5RK5Ut4BI+/iqLyM
AO31/hDA/TGGowOJHDr1Yw0rWIC0PRY6dY2iLqlK//YNhbuVrkko9BHrMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLi3npB+usRSrDcFQNf9fdRF0797MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdUxlZWtINjZ4RktzTndWQTFfMTkxRVhUdjNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ViMA0G
CSqGSIb3DQEBCwUAA4IBAQAzJq27g7NOriUH1Q/Md9+d91Gw7PxafDvw8E31jfxy
EXrqOpX+IMv4U72D7EOK6wi1NpUkI8CNaVPHTJ1ePO9A+LSoGt0M6E9TOqwHm7M6
8dWp7yRF3OwZ+NcOgiGSzIiNA1tuVoVSFUkHEUqeUF8srZtPyDmweRW6n/B6oABP
wYZAsYaoFm04tGtUrIoRC9QJa+qhFCzMUTsl+kthJ4+vSUDoyF2wmD6ZLxDkc6ev
wOqfT12HeLKet5lvEyvKy8CIf00VK7coRnXm/r8REjT01QXTCau3Ls3kl2gWelK4
Y+tVn9FdsZK8X2yVe+PiQ8uFvlxrcMq8Mkw4hP9cO3Uu
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:06:09 2025 by rpki-client