Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QGkGYPSj2KA9UC8vTm-aG8LnJho.roa
File: QGkGYPSj2KA9UC8vTm-aG8LnJho.roa (raw, json)
Hash identifier: trtEdIvtCgzyGE7kB+rcXevzdq/oCsOZCow2Se43t/w=
Subject key identifier: 40:69:06:60:F4:A3:D8:A0:3D:50:2F:2F:4E:6F:9A:1B:C2:E7:26:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01975835FB46F8C54B0F973A6A069A9CE0F0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QGkGYPSj2KA9UC8vTm-aG8LnJho.roa
Signing time: Tue 10 Jun 2025 05:00:22 +0000
ROA not before: Tue 10 Jun 2025 05:00:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.152.0/22 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:35:fb:46:f8:c5:4b:0f:97:3a:6a:06:9a:9c:e0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 10 05:00:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40690660f4a3d8a03d502f2f4e6f9a1bc2e7261a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:14:6b:98:ac:c7:d8:6a:35:9c:37:a4:83:
2b:16:f6:3a:8a:c8:da:34:54:be:a9:e3:67:73:59:
7e:c5:0e:fc:fb:bd:79:f3:1d:f1:b8:d6:03:04:2f:
71:b4:85:37:e8:af:96:52:86:e9:45:0f:cc:35:64:
23:07:0f:a4:2e:6a:67:19:22:35:6e:60:46:3b:7c:
c5:b5:a6:2e:a7:18:8a:e9:33:dc:4f:26:ba:0c:40:
31:d2:67:d0:c7:07:7f:a5:c9:ab:89:8c:53:e1:1a:
ed:12:62:71:47:42:6d:a4:24:46:70:64:1d:ec:83:
22:79:4b:38:c9:33:3e:e8:e0:a6:06:46:b9:bd:e0:
e4:6c:ca:9a:76:72:11:74:66:65:85:89:61:a3:c0:
a8:08:60:66:a5:06:25:a3:37:77:af:29:de:80:d4:
63:40:55:09:6b:ac:77:11:b1:69:5b:1c:14:2c:bf:
0a:61:67:c3:9f:44:fe:13:f7:63:05:0e:d1:c4:c3:
99:df:19:6b:ed:44:dc:b9:9a:81:a4:f9:d9:be:d0:
54:bb:90:e6:ef:af:99:c3:83:71:47:1d:c8:e5:64:
dd:7b:d4:66:be:78:c3:9a:17:68:17:9a:74:27:6a:
52:7d:3b:6c:a0:51:70:91:d9:ed:32:f6:4f:64:16:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:06:60:F4:A3:D8:A0:3D:50:2F:2F:4E:6F:9A:1B:C2:E7:26:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QGkGYPSj2KA9UC8vTm-aG8LnJho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.243.7.0/24
151.243.10.0/24
151.243.152.0/22
151.243.228.0/24
151.243.243.0/24
151.244.54.0/24
151.245.1.0/24
151.245.4.0/24
151.245.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:9c:6b:bb:a2:b8:0d:45:33:8f:5b:b9:8c:b7:48:5c:89:da:
46:b0:02:c2:2e:95:78:47:e1:cb:c7:1f:b5:4a:21:c1:2f:66:
18:93:12:52:6b:63:63:51:a8:34:1c:78:b1:7f:01:69:13:ef:
bf:dd:aa:a8:73:fd:6f:b8:90:c1:33:65:a7:bf:93:38:dd:b2:
11:6c:b6:79:95:4f:92:23:b0:af:31:63:d4:a9:c2:0f:11:74:
9e:60:6f:78:33:be:21:3f:21:87:29:92:0b:ef:10:45:3b:15:
74:f5:c4:70:73:9e:a9:6a:0c:b7:93:e4:ab:90:a2:97:08:90:
2f:2c:04:24:bd:02:8a:fe:05:51:32:cf:67:42:0e:32:14:8c:
5c:81:fc:7c:95:12:c2:c1:96:93:c4:67:fb:ad:50:19:d3:f9:
4a:31:b1:2e:1f:0d:f5:e8:fe:d3:53:eb:b2:86:69:af:2c:72:
0a:ef:75:4d:7c:44:0a:60:c8:ef:a2:44:25:96:aa:33:63:f5:
e9:71:50:9f:15:6a:17:46:0f:9c:1d:8f:98:29:9b:82:6a:55:
76:a7:53:ae:03:cc:5b:e8:a3:d3:30:b5:14:7d:1b:1c:2b:4d:
e5:93:b3:8b:b0:ff:33:43:be:30:b7:79:5c:0f:a6:df:89:bc:
50:cc:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:18:03 2025 by rpki-client