Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa
File:                     Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa (raw, json)
Hash identifier:          XmoZ91/pkNWZ+kcdqr7S2mJAWOBYH2TBEvZdqMLp/SA=
Subject key identifier:   67:A1:60:0C:6D:94:60:9B:74:01:6D:30:5E:C8:32:B4:CE:D4:6C:99
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0198693A5F77CCC559DB454A6C066A5DCA23
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa
Signing time:             Sat 02 Aug 2025 05:21:29 +0000
ROA not before:           Sat 02 Aug 2025 05:21:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     273478
IP address blocks:        151.244.241.0/24 maxlen: 24
                          151.245.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:69:3a:5f:77:cc:c5:59:db:45:4a:6c:06:6a:5d:ca:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Aug  2 05:21:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67a1600c6d94609b74016d305ec832b4ced46c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:1e:ec:29:64:f5:61:61:dc:58:a2:7c:18:
                    62:c0:30:52:bd:ab:30:6d:5d:e4:b0:cc:87:3a:27:
                    31:ce:a3:2a:9a:67:6d:62:68:3f:69:ee:82:6d:ce:
                    e3:38:3c:85:cf:8c:d6:c9:ef:1f:10:ec:0c:be:64:
                    1e:03:ae:d4:01:a7:6a:ff:f0:aa:a1:a7:67:c7:17:
                    af:c3:9d:85:e9:9f:b7:e8:d7:d7:17:56:50:f3:85:
                    c0:2b:16:8f:b8:9b:ff:b7:6f:15:51:4a:f1:01:97:
                    69:c3:34:6c:4f:6a:96:a9:18:65:4a:46:eb:6a:e7:
                    37:16:c6:68:73:26:eb:e7:24:50:dc:97:4f:76:37:
                    77:45:2f:87:0c:f8:37:f2:02:d2:9c:cc:3f:51:b5:
                    c7:36:13:37:90:c3:72:38:40:7d:15:61:9b:14:92:
                    54:6b:d4:52:58:a8:9e:b0:d5:1e:ec:9b:44:a7:b7:
                    fa:27:f5:91:4a:ca:41:4b:ac:38:dd:80:9b:36:79:
                    a4:93:21:fc:40:68:b8:7c:14:81:f0:5b:66:1b:39:
                    ba:52:3f:0b:38:a9:b5:e7:22:89:d5:17:69:d8:ea:
                    ba:a1:fa:7c:36:47:17:e7:1e:b4:f5:67:f1:00:f9:
                    8d:ec:4a:28:c2:c0:d4:32:2a:94:ac:1e:6f:5f:6e:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:60:0C:6D:94:60:9B:74:01:6D:30:5E:C8:32:B4:CE:D4:6C:99
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.244.241.0/24
                  151.245.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:8d:a9:e0:d2:ed:fe:36:9e:1b:38:f0:df:a6:9e:9e:7c:
         36:b2:7d:fe:3f:68:1e:c8:68:40:20:12:17:fd:77:52:71:28:
         13:a4:aa:4b:94:da:c3:e4:0a:db:e9:ce:8b:5f:24:37:9d:bb:
         7e:18:6a:60:27:af:f3:3b:d2:3c:78:59:68:ad:56:57:aa:0b:
         d6:e2:72:a1:f3:52:6c:2c:83:ea:8f:99:4b:ff:ea:e4:b1:2c:
         15:2c:6b:d1:62:2c:db:e5:d1:1a:84:a8:60:66:a7:cd:50:15:
         74:0d:3e:70:d6:fd:9d:e2:01:54:69:e2:b4:30:b2:d3:d1:b7:
         44:0c:ca:b8:f2:0f:d7:b9:ff:1a:6a:c1:c1:19:ff:a1:42:cc:
         55:7f:00:ec:b5:4b:c3:dc:49:a2:3e:b7:40:c6:da:02:cf:db:
         6c:11:42:10:f9:64:15:7a:cf:dc:56:44:cf:88:15:a0:71:a4:
         3f:d1:5e:c7:6b:a9:bb:67:5e:79:58:bd:cb:5a:90:18:31:73:
         87:5e:e4:a1:c9:9b:a8:6a:a9:db:39:10:a4:3c:76:b3:13:63:
         57:c3:23:4a:25:f8:a8:c8:1a:ab:e0:77:44:98:ec:d8:c5:ad:
         db:e8:0c:d9:7a:7d:f2:a3:2a:88:06:7c:fc:97:f3:85:52:6d:
         52:9c:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:42 2025 by rpki-client