Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b5gpab_HK7TILwUmDdNejDgIJYM.roa
File: b5gpab_HK7TILwUmDdNejDgIJYM.roa (raw, json)
Hash identifier: 0JvrJZtD6poVcPf6IUxKGlMEGreOGcutslMJnYrK4oo=
Subject key identifier: 6F:98:29:69:BF:C7:2B:B4:C8:2F:05:26:0D:D3:5E:8C:38:08:25:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019458D91D8B7BB83B7A5466BCBF1216FBFA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b5gpab_HK7TILwUmDdNejDgIJYM.roa
Signing time: Sun 12 Jan 2025 04:50:11 +0000
ROA not before: Sun 12 Jan 2025 04:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 151.243.137.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:58:d9:1d:8b:7b:b8:3b:7a:54:66:bc:bf:12:16:fb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 12 04:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f982969bfc72bb4c82f05260dd35e8c38082583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:0f:23:51:00:76:48:85:05:0b:5d:48:59:
bb:8d:93:0f:07:c0:fd:90:cb:f9:60:da:e3:9f:bb:
e6:ab:11:56:bf:30:de:a1:59:3c:f7:1a:b3:b5:11:
42:d3:26:20:c2:5e:82:4d:95:98:ca:93:55:a6:f3:
88:52:25:7b:ba:d0:ee:08:f1:28:75:6b:95:59:2b:
9d:48:aa:01:22:b3:f4:bb:21:86:88:6f:ef:c5:34:
cd:50:5f:dc:56:05:8a:97:51:07:50:34:2d:95:dd:
73:a8:d4:54:5d:bc:b2:85:ac:04:98:fa:03:43:ee:
58:1f:d9:4d:23:ce:c9:f0:22:23:aa:21:db:18:73:
ff:ad:0f:a4:8f:95:8a:76:b9:7c:bd:df:d7:9c:15:
74:2b:20:b0:d1:fe:79:24:4a:00:9f:57:79:d5:75:
56:b0:38:da:cd:33:7b:49:04:b1:af:d1:04:85:17:
2c:8f:6d:90:9a:2d:1f:db:08:89:1c:b4:cd:28:82:
17:fe:96:5a:07:96:60:62:5b:55:fe:79:25:21:f8:
d5:e9:73:e7:13:63:9b:0b:b4:d6:4d:52:da:75:5b:
50:df:03:8a:06:c8:0f:6e:25:a2:97:c3:2c:4b:d2:
c2:d3:75:3d:e1:8e:80:c8:67:a3:63:aa:a4:91:43:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:98:29:69:BF:C7:2B:B4:C8:2F:05:26:0D:D3:5E:8C:38:08:25:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b5gpab_HK7TILwUmDdNejDgIJYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.137.0/24
151.243.162.0/24
151.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f3:4a:88:b6:10:b6:69:ab:61:61:04:75:ab:21:de:42:c6:
a0:de:90:9c:0f:a8:6f:c4:41:d7:51:ff:3c:2c:b8:84:ca:c5:
f1:db:8a:c9:be:5a:e8:73:88:6d:1c:7d:4f:8f:c0:f9:cf:d3:
fd:c7:00:6e:d1:26:6f:0b:33:f8:1b:9b:ea:f5:d4:2b:f3:d9:
2c:62:52:ff:10:1d:45:5b:ad:e1:5c:a1:43:ec:8e:ae:2e:8f:
1f:76:7e:68:24:62:a7:03:2e:8e:a0:35:53:26:7d:64:d9:66:
d6:e5:72:b2:f1:69:b6:69:65:b2:c2:2f:2d:9e:c2:c8:6d:c7:
19:e5:83:f4:97:42:78:48:1e:85:da:85:1a:84:04:87:74:da:
df:01:1b:d9:92:ab:eb:4f:94:31:53:0a:d6:84:61:94:5c:d8:
02:50:0d:f5:be:11:d3:40:5a:fd:cf:85:6c:41:31:dc:c4:10:
55:7e:78:be:47:cd:ea:94:9e:d1:81:5f:36:07:5f:c8:e8:91:
89:fa:44:25:08:9c:ab:93:95:49:3f:1a:3f:4d:f4:a7:f4:a4:
13:77:e1:60:60:0f:65:a4:3d:53:12:1b:79:5b:5b:83:11:72:
e5:f3:e1:61:a2:79:a8:7f:67:ed:55:81:38:3a:c6:97:5a:5f:
a3:13:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:00:11 2025 by rpki-client