Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GL1PK6huMygyVmVJPGI64xT10pU.roa
File: GL1PK6huMygyVmVJPGI64xT10pU.roa (raw, json)
Hash identifier: rmgjXqA3kYdqAUo5coHRxykKv+PcwJwnxPhhJITdBAI=
Subject key identifier: 18:BD:4F:2B:A8:6E:33:28:32:56:65:49:3C:62:3A:E3:14:F5:D2:95
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01981D4F7FF8304CC0F8F9FBDB01F26FE679
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GL1PK6huMygyVmVJPGI64xT10pU.roa
Signing time: Fri 18 Jul 2025 11:33:26 +0000
ROA not before: Fri 18 Jul 2025 11:33:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 151.242.202.0/23 maxlen: 23
151.242.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:4f:7f:f8:30:4c:c0:f8:f9:fb:db:01:f2:6f:e6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 18 11:33:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18bd4f2ba86e3328325665493c623ae314f5d295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:68:40:89:c9:90:66:a1:4c:25:e1:86:89:
d2:c7:82:5b:0b:12:76:9c:86:bb:5e:62:58:b4:3c:
87:55:87:93:c5:ee:bf:0c:41:ec:1a:1c:1e:aa:d7:
5b:f4:5b:c2:f2:06:1c:e0:8a:4a:c0:4c:00:ee:44:
c1:18:ba:32:fc:c1:1f:af:4d:00:d8:d0:a2:ff:c7:
c6:bc:12:db:d2:ce:1a:e0:96:df:4a:4a:be:20:9d:
91:47:00:42:02:87:6d:38:64:55:d3:9b:25:d2:c8:
3c:d4:44:bd:74:93:5c:c6:ac:f3:53:75:38:d9:27:
9c:24:b5:29:27:aa:aa:a5:e0:a8:53:8e:57:4e:d8:
f5:06:97:0e:0d:83:37:c8:be:c6:b5:f2:93:a3:7e:
0e:d4:3c:a9:7a:d8:41:a4:c0:28:de:ff:e0:51:4c:
29:f8:bd:bf:27:58:10:ba:cc:9a:85:b3:c0:8e:f5:
18:89:97:2e:11:11:eb:13:7b:4a:00:1d:63:25:25:
3d:3e:86:0f:7f:70:57:8a:63:b3:6c:31:b1:65:28:
86:c6:47:92:0d:06:d1:dd:d5:ae:2e:76:bc:6f:3f:
52:63:1e:7c:a7:74:34:7a:4f:81:32:c2:ed:89:93:
31:59:18:80:47:1e:bb:6c:19:2a:f1:88:18:fe:5e:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BD:4F:2B:A8:6E:33:28:32:56:65:49:3C:62:3A:E3:14:F5:D2:95
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GL1PK6huMygyVmVJPGI64xT10pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.202.0/23
151.242.252.0/24
Signature Algorithm: sha256WithRSAEncryption
af:95:a4:af:20:eb:86:2d:87:8e:af:b5:87:ac:c6:31:1e:0e:
b5:12:57:45:72:99:a7:b4:e3:6a:fc:22:50:e3:40:3d:8f:16:
5a:ff:55:9e:be:9b:0a:ba:42:5e:67:b2:51:69:6a:a1:1b:c3:
7f:28:98:64:42:5c:37:7b:69:d2:ef:64:50:56:a2:9a:12:90:
47:b4:67:e4:65:e1:ed:32:68:79:96:b0:a5:65:4d:18:2b:ca:
66:fe:6b:5a:79:5b:38:a9:c0:44:e5:88:7a:65:3d:c7:92:aa:
bc:c7:ec:57:4f:5a:b4:9c:ec:1e:6e:a2:ea:71:cc:bd:61:fc:
24:f6:28:2d:b1:dc:84:a9:c1:d0:f7:c2:37:9b:ea:27:18:4a:
70:86:fa:28:ec:e4:28:c3:76:de:5f:10:9a:fe:12:52:c1:9e:
a5:da:d1:22:7e:6e:4a:ea:b6:7a:87:92:4a:4c:a2:bc:e0:2a:
28:96:f0:68:21:9b:fb:60:1b:f5:61:17:6c:83:dc:b5:91:6b:
5d:50:50:47:01:9f:26:f0:2f:5c:d3:40:1a:3e:1f:11:a1:01:
6c:83:f3:b0:b4:5c:74:78:4c:4a:18:d8:b0:f2:c4:fc:a1:a0:
ce:92:34:19:c5:8a:84:ba:b6:ba:19:5a:32:7d:99:0c:d8:e9:
b5:27:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:47:57 2025 by rpki-client