Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/465WKGEh6GM-FXs120O1Qy5pjMQ.roa
File: 465WKGEh6GM-FXs120O1Qy5pjMQ.roa (raw, json)
Hash identifier: wfSFykIgqXlttctFtHzc5lA+1vVp0/MTN6LzZZdJysg=
Subject key identifier: E3:AE:56:28:61:21:E8:63:3E:15:7B:35:DB:43:B5:43:2E:69:8C:C4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195A28EEBB3F6CA93188FC25CAC8D5A0142
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/465WKGEh6GM-FXs120O1Qy5pjMQ.roa
Signing time: Mon 17 Mar 2025 05:23:50 +0000
ROA not before: Mon 17 Mar 2025 05:23:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 151.242.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:8e:eb:b3:f6:ca:93:18:8f:c2:5c:ac:8d:5a:01:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 17 05:23:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ae56286121e8633e157b35db43b5432e698cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:18:2a:1e:49:26:16:81:db:92:ce:fd:b0:
24:0a:86:6f:06:ba:7a:0f:5a:df:56:10:04:7a:18:
33:88:b0:74:50:71:69:56:53:d0:4a:88:e5:ee:02:
a7:33:e9:18:4b:f4:c6:31:a9:da:bc:4b:95:d4:08:
4e:b7:f2:1b:3c:a6:e8:93:06:5f:e0:bd:7d:03:ed:
c5:11:28:7f:51:5f:e5:8a:0a:d0:3c:b9:29:92:dd:
47:de:06:ca:2c:94:74:ef:4c:02:76:58:0c:c2:1b:
44:a1:a9:3c:ea:de:d2:c5:b2:4d:55:ab:38:ab:10:
e0:59:f7:6f:9b:83:63:29:7a:00:33:28:36:a5:d4:
57:8a:4a:de:4e:3e:e1:7b:71:5a:bc:5e:bb:84:49:
9f:a6:c1:74:a7:d6:f8:ce:70:43:89:d8:04:19:c6:
6b:c4:f2:bf:91:e4:e5:33:e1:bb:9e:e9:e6:7c:0f:
36:03:4d:7c:21:56:e3:83:7b:41:a5:3f:52:b7:9c:
92:50:1e:77:94:6e:13:19:f6:7d:32:3e:aa:96:ba:
15:76:a2:1a:d1:61:e0:9b:a7:0b:4b:b8:9c:87:91:
ee:d5:f9:4c:41:3f:5b:bd:45:e4:cf:bc:40:00:89:
2a:90:58:6f:78:90:9a:23:b9:d7:9d:73:9c:18:4b:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:56:28:61:21:E8:63:3E:15:7B:35:DB:43:B5:43:2E:69:8C:C4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/465WKGEh6GM-FXs120O1Qy5pjMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.38.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5c:d2:5a:23:e3:ad:91:bd:e2:44:f0:b0:93:ed:c2:65:b2:
5e:50:c1:41:dc:97:f2:5b:0e:b3:88:de:fb:d1:71:d7:65:9a:
14:84:a2:55:42:0b:cf:97:f1:71:bd:d2:0a:e0:d9:d3:5f:f4:
96:f9:2b:a0:e3:7f:a2:20:6f:8b:e9:bc:6b:bc:e5:b5:c9:17:
cb:fb:2e:93:8e:ae:dc:e3:1f:6b:de:3c:6e:3b:f6:dd:66:f5:
10:dd:65:fc:6e:09:1a:b9:0d:d2:e1:93:c1:dc:09:c7:87:05:
35:e1:66:cf:5d:5b:10:33:67:6b:21:48:81:64:38:bf:29:2a:
a4:28:e1:3d:16:82:78:06:a2:65:2e:4d:5c:4e:20:6f:da:8a:
4b:fc:6f:6b:a6:4d:1c:1b:48:41:93:a8:45:c9:dc:7c:25:3a:
d7:26:91:99:91:a2:77:dd:62:c6:e6:bd:23:7a:d6:dc:41:02:
b6:f6:8c:ad:81:c9:ec:ad:59:15:9b:36:54:30:4b:5a:b3:2e:
5f:d4:fb:d3:32:db:74:88:59:bc:5c:4c:67:b3:c2:55:94:fe:
2e:f8:df:d1:5b:4a:10:54:40:da:36:4f:4b:31:40:ff:9e:a0:
b6:19:b4:b9:54:2e:ce:8c:c8:6d:42:d1:f5:2c:de:c3:20:fb:
d1:a1:94:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWijuuz9sqTGI/CXKyNWgFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzE3MDUyMzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2FlNTYyODYxMjFlODYzM2UxNTdiMzVkYjQzYjU0MzJlNjk4Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9oYKh5JJhaB25LO/bAkCoZvBrp6
D1rfVhAEehgziLB0UHFpVlPQSojl7gKnM+kYS/TGManavEuV1AhOt/IbPKbokwZf
4L19A+3FESh/UV/ligrQPLkpkt1H3gbKLJR070wCdlgMwhtEoak86t7SxbJNVas4
qxDgWfdvm4NjKXoAMyg2pdRXikreTj7he3FavF67hEmfpsF0p9b4znBDidgEGcZr
xPK/keTlM+G7nunmfA82A018IVbjg3tBpT9St5ySUB53lG4TGfZ9Mj6qlroVdqIa
0WHgm6cLS7ich5Hu1flMQT9bvUXkz7xAAIkqkFhveJCaI7nXnXOcGEvHUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOuVihhIehjPhV7NdtDtUMuaYzEMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNDY1V0tHRWg2R00tRlhzMTIwTzFReTVwak1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ImMA0G
CSqGSIb3DQEBCwUAA4IBAQABXNJaI+Otkb3iRPCwk+3CZbJeUMFB3JfyWw6ziN77
0XHXZZoUhKJVQgvPl/FxvdIK4NnTX/SW+Sug43+iIG+L6bxrvOW1yRfL+y6Tjq7c
4x9r3jxuO/bdZvUQ3WX8bgkauQ3S4ZPB3AnHhwU14WbPXVsQM2drIUiBZDi/KSqk
KOE9FoJ4BqJlLk1cTiBv2opL/G9rpk0cG0hBk6hFydx8JTrXJpGZkaJ33WLG5r0j
etbcQQK29oytgcnsrVkVmzZUMEtasy5f1PvTMtt0iFm8XExns8JVlP4u+N/RW0oQ
VEDaNk9LMUD/nqC2GbS5VC7OjMhtQtH1LN7DIPvRoZTW
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:39 2025 by rpki-client