Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gVD7kBCPDtg588TS1jEMoRuexr8.roa
File: gVD7kBCPDtg588TS1jEMoRuexr8.roa (raw, json)
Hash identifier: WUn4YLlRivEWLasx9Jur5/oIEgf9zG6yihAVQl/3QKs=
Subject key identifier: 81:50:FB:90:10:8F:0E:D8:39:F3:C4:D2:D6:31:0C:A1:1B:9E:C6:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01971156935C08A16F0D1E403B9137D448AF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gVD7kBCPDtg588TS1jEMoRuexr8.roa
Signing time: Tue 27 May 2025 10:42:55 +0000
ROA not before: Tue 27 May 2025 10:42:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209263
IP address blocks: 151.243.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:56:93:5c:08:a1:6f:0d:1e:40:3b:91:37:d4:48:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 10:42:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8150fb90108f0ed839f3c4d2d6310ca11b9ec6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:31:c7:7f:1d:63:f0:29:fc:d1:70:fd:1d:
65:cc:53:95:cf:ab:68:0d:31:75:f9:f9:8d:e1:2e:
3f:95:12:06:91:d0:31:70:c3:31:f9:84:0b:d6:28:
a0:ff:dc:87:29:da:4c:3f:9a:f8:a2:80:d4:77:8f:
6e:d1:bd:4b:3b:e1:4b:18:cc:3e:55:38:34:84:f4:
60:f9:7a:fa:fe:8c:e2:61:ba:18:30:7d:60:48:8c:
5c:7c:96:c6:07:c6:b4:57:9e:28:15:ca:e4:03:6d:
30:ff:46:1e:b2:2f:d4:2a:3c:9c:e3:11:7d:b2:b1:
81:25:a3:fe:1a:3d:fb:0e:c3:be:25:0b:2f:db:c0:
d9:8e:c9:9e:28:2f:99:1e:50:86:e8:0d:1d:e5:a8:
ea:2e:76:1b:e5:4e:14:68:dc:3c:a5:ef:b4:05:7c:
9f:f9:3c:f3:07:bc:d7:8e:49:91:91:2c:31:aa:de:
13:40:2b:9d:92:22:a1:e5:84:5c:94:ae:e2:6e:a6:
c3:bc:75:a1:81:c3:5c:6d:ac:94:a8:87:a5:10:a1:
e5:ec:cc:5c:7b:27:82:76:a8:bf:1f:ac:64:6f:9e:
2f:46:ac:97:84:90:cf:15:2e:37:6c:19:33:83:07:
aa:5c:7b:eb:a1:5a:14:aa:f2:92:f2:ee:91:87:61:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:50:FB:90:10:8F:0E:D8:39:F3:C4:D2:D6:31:0C:A1:1B:9E:C6:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gVD7kBCPDtg588TS1jEMoRuexr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:25:4d:a9:30:4e:68:08:86:30:b4:6f:97:77:44:04:ba:86:
db:fe:41:50:82:75:6e:13:12:5f:b8:f3:ff:62:04:23:e7:9f:
f1:b5:23:43:ac:b1:b9:44:ca:7d:9a:20:58:c0:ea:50:f6:d1:
d2:43:27:34:de:7b:d0:5c:8a:df:05:5d:db:52:6c:09:1b:6a:
fb:cc:29:02:ad:07:7a:45:04:bc:ab:a1:16:31:87:48:f8:b7:
e7:ae:35:2e:9b:96:2d:29:06:cb:ce:4e:59:77:9a:ff:02:b2:
64:55:f8:35:79:26:e1:c4:e1:8f:b2:81:c7:95:00:02:8a:20:
f9:42:a3:31:a3:36:95:e7:09:18:cf:05:86:d8:46:a9:71:e3:
7e:fe:14:87:ee:56:90:7a:00:d9:db:0c:81:df:a7:52:43:13:
04:56:fc:20:e6:3a:00:c4:84:84:b1:78:e1:35:9c:97:61:da:
97:61:86:f4:72:69:b7:a1:6b:d2:81:35:4d:5a:b3:5c:6c:b3:
db:bb:60:3e:7c:08:18:63:74:4e:0b:0b:45:39:2a:85:1f:8e:
fe:1c:18:2f:8f:89:09:88:ef:60:a5:02:aa:f3:bb:9d:12:29:
fd:a5:97:a3:69:86:a1:4f:c4:8d:0a:f8:9d:80:3a:24:f2:84:
d1:d7:89:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:37:37 2025 by rpki-client