Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gAeLBl6fxdwykpplKM7FxOz38oU.roa
File: gAeLBl6fxdwykpplKM7FxOz38oU.roa (raw, json)
Hash identifier: SGkC82n5yFetnlXvXpAsvahw6DdRHomfm8AX2ItD92U=
Subject key identifier: 80:07:8B:06:5E:9F:C5:DC:32:92:9A:65:28:CE:C5:C4:EC:F7:F2:85
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D4A527FCF601D5AEF2774D581F625BA4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gAeLBl6fxdwykpplKM7FxOz38oU.roa
Signing time: Fri 04 Jul 2025 08:54:42 +0000
ROA not before: Fri 04 Jul 2025 08:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401541
IP address blocks: 151.244.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 06:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:a5:27:fc:f6:01:d5:ae:f2:77:4d:58:1f:62:5b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 4 08:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80078b065e9fc5dc32929a6528cec5c4ecf7f285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:e2:4b:57:45:08:f3:3c:51:84:22:49:5f:
e6:3f:3e:a7:9b:03:61:72:23:eb:5d:77:25:b1:7f:
f8:5d:df:3d:bd:ce:2e:5d:83:17:0a:80:6c:5f:a0:
ce:8e:32:7c:ba:e9:da:07:9e:69:aa:b0:b7:f0:44:
75:e2:43:e9:91:4b:2c:c7:a9:31:75:e4:b8:06:42:
b4:d6:a1:81:d1:c7:e0:5b:77:c3:e3:8d:c4:b2:ae:
28:20:78:b7:6f:63:64:24:1d:af:64:b4:0e:db:7a:
53:38:78:13:60:55:de:da:7e:7c:68:ce:3f:68:7a:
99:f3:86:3b:69:c1:9a:72:35:1e:ae:11:77:3e:8d:
e6:20:1d:f9:9d:72:9b:94:6a:11:82:48:69:51:29:
4c:37:fe:04:84:f2:60:68:fb:11:ee:80:8e:4b:74:
eb:a0:a5:ae:86:55:fe:ee:76:0e:bf:22:54:e1:b6:
8d:ef:82:c4:7f:5a:b9:d6:52:28:f6:61:51:c5:4f:
74:c3:55:6a:86:53:4d:4e:d5:1d:45:4f:f4:a1:62:
e3:40:f2:cb:49:00:3c:88:06:bc:11:67:16:19:d8:
cf:f5:cc:25:02:1d:65:3a:42:54:70:22:49:39:85:
a7:d3:f5:43:ae:61:4e:45:fb:7f:e1:50:09:de:12:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:07:8B:06:5E:9F:C5:DC:32:92:9A:65:28:CE:C5:C4:EC:F7:F2:85
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gAeLBl6fxdwykpplKM7FxOz38oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:27:85:19:45:c4:36:67:1e:df:56:fd:da:82:ac:df:fa:84:
27:b6:c4:6b:d5:ff:cd:5e:7a:6c:22:3a:e9:72:cd:7a:f1:3b:
70:18:31:92:b1:4a:ac:de:e7:f8:ab:91:af:18:08:f3:af:22:
04:b3:d1:5a:9c:8e:e4:de:73:35:ef:82:5e:33:2e:4e:3c:58:
23:9e:bf:e7:1c:95:75:d9:9e:07:af:68:ba:d4:3c:45:ec:07:
96:11:27:5b:84:4b:c4:bf:a7:2c:26:67:65:0f:d5:aa:b9:9c:
31:aa:b3:ae:26:93:db:e1:26:fc:fc:5d:dc:86:08:a3:88:a6:
0d:22:7c:d6:f6:f1:fe:bb:8f:cc:ac:f8:48:00:6b:ee:9e:bf:
87:53:30:01:a6:27:8b:f6:cb:2d:c7:de:d3:a3:1b:a2:16:a1:
09:21:01:da:53:6d:25:9c:0f:ab:2e:7a:4a:6a:d9:a4:25:81:
3f:0d:53:fb:12:b7:ac:1b:42:26:51:e9:59:7d:fa:92:4f:c7:
a7:83:4c:1d:34:51:7f:90:42:a7:3d:46:eb:89:44:2d:1b:96:
b7:20:5b:7b:7b:4e:6f:e6:01:a6:cd:de:b4:a1:8e:2d:13:45:
1f:4b:4f:e7:a2:13:fb:ee:86:bd:17:94:96:82:8c:4a:5d:c5:
65:61:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 14:07:10 2025 by rpki-client