Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GaBJMrCdP-W4ELk836ECR-RKCvs.roa
File: GaBJMrCdP-W4ELk836ECR-RKCvs.roa (raw, json)
Hash identifier: 4L3JSOAHSUt9pvgmj0XcLWHC8feN58zPkH0ptMZYIQg=
Subject key identifier: 19:A0:49:32:B0:9D:3F:E5:B8:10:B9:3C:DF:A1:02:47:E4:4A:0A:FB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196EC237F57FD68B7E122E145CE0E3330C8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GaBJMrCdP-W4ELk836ECR-RKCvs.roa
Signing time: Tue 20 May 2025 05:21:11 +0000
ROA not before: Tue 20 May 2025 05:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 151.242.44.0/24 maxlen: 24
151.243.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:23:7f:57:fd:68:b7:e1:22:e1:45:ce:0e:33:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 05:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19a04932b09d3fe5b810b93cdfa10247e44a0afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:8e:2d:9f:6a:e5:27:63:f2:b8:45:e8:a0:
c7:97:5d:00:44:29:ce:0f:a4:0e:6e:f8:9b:7f:39:
08:c3:b0:40:31:ba:26:75:9e:27:35:f7:bf:ed:69:
43:1e:d5:4c:ce:3a:6c:73:ff:4b:65:dd:30:43:26:
bb:f8:3c:24:22:84:15:ac:3f:2a:12:a0:2d:64:8a:
d8:d7:aa:47:c3:d9:23:0e:81:b6:3a:4b:d6:bf:67:
28:00:88:1a:88:49:ca:41:55:fb:4c:67:c1:e0:87:
af:41:cb:f5:4a:ae:7e:0d:fa:5f:19:c1:76:af:91:
b3:49:f2:1e:80:78:65:67:a4:36:ab:51:e6:0c:76:
24:d2:46:50:de:b2:a9:89:2d:38:71:97:06:29:f8:
78:e4:cd:c8:2a:06:10:da:d5:e3:dc:29:cb:ba:6c:
37:2a:2a:22:da:6e:90:bc:27:ef:56:32:7c:0a:05:
c6:c5:09:f5:24:42:96:54:98:b2:3a:2a:5e:e0:97:
11:a9:08:9c:ec:9d:9f:a3:c4:17:c0:76:e0:63:d6:
df:10:a6:1b:e1:24:83:ef:66:8f:e3:e4:03:93:de:
7b:12:57:59:21:da:b7:50:33:4c:d8:b4:91:bc:a1:
cb:a5:c2:e9:bf:ef:15:b5:b2:f3:dd:82:e9:2c:61:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:49:32:B0:9D:3F:E5:B8:10:B9:3C:DF:A1:02:47:E4:4A:0A:FB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GaBJMrCdP-W4ELk836ECR-RKCvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.44.0/24
151.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
32:f5:10:a9:79:de:1a:79:8b:59:22:93:fa:f4:a3:c2:cb:f4:
14:66:a1:67:7d:63:bf:7c:16:e7:b3:53:33:36:35:a1:e8:1e:
35:49:a9:3e:72:62:fa:eb:e3:41:97:85:b3:bf:ad:69:e8:5f:
f5:99:37:a9:6c:0a:18:76:75:3d:4f:1b:6f:f4:88:1b:0d:d2:
a1:e2:25:40:e6:b5:5b:99:da:0e:3e:97:e0:11:61:2d:17:1c:
87:29:a0:00:67:61:56:e6:80:45:b7:f2:da:ab:bc:02:fc:33:
a1:1d:bf:b3:1e:15:2d:56:55:6a:f4:8f:84:5b:73:1f:a5:7a:
9e:a8:3e:30:d8:05:46:30:51:f1:7f:44:a6:8f:da:3a:a3:bd:
9e:76:8b:80:71:f8:be:7c:25:d6:0f:5a:b5:e7:4f:dd:c8:13:
70:5f:2d:1d:74:19:50:8f:de:de:ab:be:43:3d:01:e5:b4:ad:
d7:43:01:f1:02:a9:a5:68:e7:37:15:a6:7b:70:da:e3:71:bb:
a0:02:7c:13:a9:9e:2c:60:74:31:3d:12:4f:04:d9:2b:68:8d:
5f:b9:7e:df:bd:25:ff:07:76:c3:88:99:be:11:2f:1a:0a:bb:
bc:66:99:64:6e:e0:65:84:77:b6:5e:9b:e5:f2:1a:da:61:87:
db:22:ed:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbsI39X/Wi34SLhRc4OMzDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTIwMDUyMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWEwNDkzMmIwOWQzZmU1YjgxMGI5M2NkZmExMDI0N2U0NGEwYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbaOLZ9q5Sdj8rhF6KDHl10ARCnO
D6QObvibfzkIw7BAMbomdZ4nNfe/7WlDHtVMzjpsc/9LZd0wQya7+DwkIoQVrD8q
EqAtZIrY16pHw9kjDoG2OkvWv2coAIgaiEnKQVX7TGfB4IevQcv1Sq5+DfpfGcF2
r5GzSfIegHhlZ6Q2q1HmDHYk0kZQ3rKpiS04cZcGKfh45M3IKgYQ2tXj3CnLumw3
Kioi2m6QvCfvVjJ8CgXGxQn1JEKWVJiyOipe4JcRqQic7J2fo8QXwHbgY9bfEKYb
4SSD72aP4+QDk957EldZIdq3UDNM2LSRvKHLpcLpv+8VtbLz3YLpLGGfYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBmgSTKwnT/luBC5PN+hAkfkSgr7MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR2FCSk1yQ2RQLVc0RUxrODM2RUNSLVJLQ3ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/IsAwQC
l/McMA0GCSqGSIb3DQEBCwUAA4IBAQAy9RCped4aeYtZIpP69KPCy/QUZqFnfWO/
fBbns1MzNjWh6B41Sak+cmL66+NBl4Wzv61p6F/1mTepbAoYdnU9Txtv9IgbDdKh
4iVA5rVbmdoOPpfgEWEtFxyHKaAAZ2FW5oBFt/Laq7wC/DOhHb+zHhUtVlVq9I+E
W3MfpXqeqD4w2AVGMFHxf0Smj9o6o72edouAcfi+fCXWD1q150/dyBNwXy0ddBlQ
j97eq75DPQHltK3XQwHxAqmlaOc3FaZ7cNrjcbugAnwTqZ4sYHQxPRJPBNkraI1f
uX7fvSX/B3bDiJm+ES8aCru8ZplkbuBlhHe2Xpvl8hraYYfbIu0e
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:59 2025 by rpki-client