Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ugtj9OquDrXxDkHSWDCWn9dg89c.roa
File: Ugtj9OquDrXxDkHSWDCWn9dg89c.roa (raw, json)
Hash identifier: ch6nOoMYknMpPD5NPobm4+tzPgtzTi1IslJBPhGQFmE=
Subject key identifier: 52:0B:63:F4:EA:AE:0E:B5:F1:0E:41:D2:58:30:96:9F:D7:60:F3:D7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195D8FD3D89DD13EB4D386A4B73BEF086B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ugtj9OquDrXxDkHSWDCWn9dg89c.roa
Signing time: Thu 27 Mar 2025 19:03:49 +0000
ROA not before: Thu 27 Mar 2025 19:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 151.242.11.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.37.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:fd:3d:89:dd:13:eb:4d:38:6a:4b:73:be:f0:86:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 27 19:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=520b63f4eaae0eb5f10e41d25830969fd760f3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:04:6f:34:9c:a7:17:56:32:ee:80:5e:59:
6c:59:1c:51:e0:d4:78:36:3e:42:df:c2:d7:6e:a6:
87:a5:36:c2:73:e6:2d:ea:69:d0:20:ef:3b:60:0c:
91:36:e8:49:97:8a:6f:21:1c:1f:17:c4:c5:ca:d8:
2e:5d:8e:1c:b6:e9:2a:f7:d8:e2:d2:10:7b:34:cf:
50:85:c8:6a:0a:f1:01:ed:ff:30:45:78:c5:92:c1:
a5:de:d0:6f:33:fc:08:49:83:02:b4:97:0a:36:98:
bd:01:fc:fd:40:f8:c1:ea:f7:1a:ee:04:d4:40:41:
5a:e1:1c:ff:2d:9f:bd:03:20:f0:8c:82:33:03:3c:
b4:1a:7d:c8:5a:25:de:00:32:75:57:59:a9:0a:c3:
bf:00:b8:cb:e7:7f:9b:60:c7:79:ce:ca:94:14:ac:
32:2b:93:d3:6a:4d:a1:2a:fd:3d:90:26:ee:40:4b:
9c:d3:24:38:73:bd:4c:a3:05:50:73:27:af:41:10:
4c:13:0d:75:d0:9a:a0:0e:1a:d4:04:f2:d8:aa:91:
35:77:63:2a:34:31:56:f8:93:75:1f:e6:cb:9c:f3:
48:fc:10:3d:a4:5f:7b:5b:7f:3a:78:04:aa:7f:a0:
4a:07:0b:55:86:3d:74:86:39:35:60:63:bb:f4:e5:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:63:F4:EA:AE:0E:B5:F1:0E:41:D2:58:30:96:9F:D7:60:F3:D7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ugtj9OquDrXxDkHSWDCWn9dg89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.11.0/24
151.242.14.0/24
151.242.27.0/24
151.243.2.0/23
151.243.10.0/24
151.243.35.0/24
151.243.37.0-151.243.39.255
Signature Algorithm: sha256WithRSAEncryption
61:89:4a:ba:b0:02:0e:b2:c9:06:5e:fb:23:09:af:96:cf:91:
fa:8b:2a:e8:43:57:57:e4:0a:4b:91:c0:2e:dd:5b:38:2d:57:
7c:e1:22:2f:bf:8d:61:39:8d:0e:b4:a4:b1:eb:86:10:53:d2:
14:89:50:0c:35:87:c0:07:d6:10:14:ed:b7:f5:1c:1c:db:d7:
a6:7f:7a:48:9b:ea:4d:ad:8a:99:56:3e:7a:90:34:ef:fd:e2:
0e:c0:a3:c0:e6:fd:e9:8e:81:ac:e0:53:98:88:38:ac:e4:13:
48:d7:50:f0:44:5d:dd:14:48:47:5d:44:c0:a9:16:26:a3:1a:
83:92:59:0a:81:d0:45:e5:91:0c:3e:93:fc:46:9c:c8:04:e8:
8b:db:a2:dc:5e:e5:5c:e6:da:90:06:2f:f3:31:c1:61:0c:c0:
c2:07:ad:11:a4:91:64:57:c5:e0:e5:12:88:cf:f3:80:be:02:
1a:94:15:c4:93:98:a7:7f:52:33:82:cb:ed:0b:cf:d1:81:15:
1c:2d:18:d4:4d:7a:7a:ee:fd:0d:8e:b8:40:fa:ad:70:0c:63:
9a:ba:d8:cf:14:5c:a9:18:08:40:7e:47:02:65:ca:2b:64:e6:
8d:fb:78:48:03:ed:9a:7b:a8:c9:09:a1:b3:44:ad:52:ed:68:
de:39:ff:85
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZXY/T2J3RPrTThqS3O+8Ia0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzI3MTkwMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjBiNjNmNGVhYWUwZWI1ZjEwZTQxZDI1ODMwOTY5ZmQ3NjBmM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSMEbzScpxdWMu6AXllsWRxR4NR4
Nj5C38LXbqaHpTbCc+Yt6mnQIO87YAyRNuhJl4pvIRwfF8TFytguXY4ctukq99ji
0hB7NM9QhchqCvEB7f8wRXjFksGl3tBvM/wISYMCtJcKNpi9Afz9QPjB6vca7gTU
QEFa4Rz/LZ+9AyDwjIIzAzy0Gn3IWiXeADJ1V1mpCsO/ALjL53+bYMd5zsqUFKwy
K5PTak2hKv09kCbuQEuc0yQ4c71MowVQcyevQRBMEw110JqgDhrUBPLYqpE1d2Mq
NDFW+JN1H+bLnPNI/BA9pF97W386eASqf6BKBwtVhj10hjk1YGO79OUjEwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFFILY/Tqrg618Q5B0lgwlp/XYPPXMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVWd0ajlPcXVEclh4RGtIU1dEQ1duOWRnODljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAl/ILAwQA
l/IOAwQAl/IbAwQBl/MCAwQAl/MKAwQAl/MjMAwDBACX8yUDBAOX8yAwDQYJKoZI
hvcNAQELBQADggEBAGGJSrqwAg6yyQZe+yMJr5bPkfqLKuhDV1fkCkuRwC7dWzgt
V3zhIi+/jWE5jQ60pLHrhhBT0hSJUAw1h8AH1hAU7bf1HBzb16Z/ekib6k2tiplW
PnqQNO/94g7Ao8Dm/emOgazgU5iIOKzkE0jXUPBEXd0USEddRMCpFiajGoOSWQqB
0EXlkQw+k/xGnMgE6Ivbotxe5Vzm2pAGL/MxwWEMwMIHrRGkkWRXxeDlEojP84C+
AhqUFcSTmKd/UjOCy+0Lz9GBFRwtGNRNenru/Q2OuED6rXAMY5q62M8UXKkYCEB+
RwJlyitk5o37eEgD7Zp7qMkJobNErVLtaN45/4U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:57 2025 by rpki-client