Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G0VXCGGwz_nDgd0pmScDRh_r5lY.roa
File: G0VXCGGwz_nDgd0pmScDRh_r5lY.roa (raw, json)
Hash identifier: UBVEh4pLRKjT9l73mCMvoSzNEbyc4S4CyqLaiwIliiU=
Subject key identifier: 1B:45:57:08:61:B0:CF:F9:C3:81:DD:29:99:27:03:46:1F:EB:E6:56
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B4D6754F4718C5D0733A065595E1D2C2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G0VXCGGwz_nDgd0pmScDRh_r5lY.roa
Signing time: Sat 28 Jun 2025 04:40:43 +0000
ROA not before: Sat 28 Jun 2025 04:40:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.241.132.0/22 maxlen: 22
151.241.232.0/21 maxlen: 24
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.16.0/21 maxlen: 21
151.245.56.0/22 maxlen: 22
151.245.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b4:d6:75:4f:47:18:c5:d0:73:3a:06:55:95:e1:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 28 04:40:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b45570861b0cff9c381dd29992703461febe656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:ad:66:50:06:5b:37:96:80:71:28:c0:d8:
1a:3c:cc:b3:e2:54:11:57:c2:fd:e9:a9:68:b1:58:
ce:aa:d8:9c:86:e8:7d:2a:c5:e5:8a:8c:63:ad:af:
a6:8d:fc:ba:d8:fb:af:7d:c6:e3:fd:fd:fa:24:a6:
da:67:95:1e:01:e7:b7:59:10:84:b2:c8:17:55:00:
aa:3b:4d:eb:c1:e7:93:11:d1:f3:a3:34:70:11:37:
cc:bf:01:d2:54:8e:d9:04:2e:06:13:8d:43:dc:85:
de:0d:12:ed:5a:70:8d:b5:c4:54:24:2e:db:a5:40:
e8:82:53:18:0a:14:57:db:ca:01:66:3a:1b:30:63:
f7:61:82:fa:f7:2a:82:33:8e:9e:54:63:fc:55:02:
1e:e2:40:66:7e:73:f8:2d:5a:dc:9a:99:72:49:c4:
2f:b5:29:2f:c4:0e:f5:42:39:26:32:e8:03:8e:d6:
ab:8a:56:07:34:30:ac:39:83:28:75:c6:a7:54:5a:
7d:0e:c5:05:0c:2f:3f:21:14:b3:74:2a:1f:81:75:
48:14:ad:83:97:1d:df:a7:7a:3d:82:ed:0e:f0:8b:
6e:61:e2:2a:d1:4d:3d:45:29:16:e9:53:9c:0e:88:
25:8c:1d:f6:f3:56:0d:44:bc:73:d3:51:c8:27:4d:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:57:08:61:B0:CF:F9:C3:81:DD:29:99:27:03:46:1F:EB:E6:56
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G0VXCGGwz_nDgd0pmScDRh_r5lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.241.132.0/22
151.241.232.0/21
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.16.0/21
151.245.56.0/22
151.245.188.0/24
Signature Algorithm: sha256WithRSAEncryption
05:db:65:a1:ce:a4:5c:87:15:f3:4b:b9:8f:b1:5f:ec:1f:9e:
5e:f7:11:5a:fb:37:43:ed:75:ac:f7:f2:14:2b:0a:cf:e0:3f:
3f:4d:e5:85:d7:cc:32:a1:be:3a:6d:6d:84:85:d1:9f:af:01:
1f:9f:46:b6:b4:78:fb:92:4d:a7:82:cd:2d:94:da:8e:3b:8c:
fe:32:fc:be:d6:91:05:44:ee:04:37:1a:5c:98:ba:b3:d7:f0:
04:c3:b5:c8:f9:4a:23:fd:be:0a:00:25:c5:0d:46:29:c8:75:
88:47:cc:20:28:15:f2:0f:83:34:de:59:93:48:b3:3e:83:32:
7d:2e:d0:b1:00:26:48:82:21:13:60:4c:87:6d:5a:08:a1:b1:
bf:c1:f6:dd:74:dc:60:48:d2:d5:d8:85:88:35:40:5a:4e:c0:
a3:56:24:a5:6e:c8:54:58:6e:fd:6a:31:ee:94:7b:f4:66:fa:
18:8d:ab:08:3f:f1:84:86:8f:33:a2:e3:23:60:8a:e7:b2:81:
26:77:bf:ea:d6:b9:ca:2d:c4:fa:e0:f6:93:94:5d:e1:2e:26:
7c:b0:a1:4a:dc:68:b9:ea:96:e4:06:c6:b0:e6:bc:16:e6:7f:
4e:c4:7e:0c:15:dd:65:82:ea:b6:43:41:a4:d6:a1:27:37:76:
c6:94:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:16:45 2025 by rpki-client