Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/94Pi9ncCZGDbw9IRfaMsHBlDwSM.roa
File: 94Pi9ncCZGDbw9IRfaMsHBlDwSM.roa (raw, json)
Hash identifier: mDRht3FcEXnYtdzCQFuOjMARws0sMWz+igwZ4aoJ2ns=
Subject key identifier: F7:83:E2:F6:77:02:64:60:DB:C3:D2:11:7D:A3:2C:1C:19:43:C1:23
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018CC5003DAB3A51EEDBBF1FBB957B8B9815
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/94Pi9ncCZGDbw9IRfaMsHBlDwSM.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3d:ab:3a:51:ee:db:bf:1f:bb:95:7b:8b:98:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f783e2f677026460dbc3d2117da32c1c1943c123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:52:78:73:16:63:11:01:ea:77:d1:4b:f0:
7c:da:f8:89:d1:6e:e8:c2:53:87:bc:d2:54:69:17:
4b:4b:fb:7d:47:98:36:c3:e9:65:5a:73:ea:a5:28:
6f:3f:2b:14:cf:d4:7a:db:49:18:3c:ec:8a:07:81:
65:89:f6:55:46:da:a0:c0:e9:ed:4f:5c:cb:0f:d0:
ff:72:a0:c2:25:ce:11:22:e2:b6:e3:34:de:d2:7c:
58:98:cf:25:af:72:9f:9a:a3:3f:e0:a1:1d:9c:58:
91:cd:bc:29:77:4a:ff:38:1c:c7:51:9d:4d:a6:e8:
62:91:f8:5a:f6:d1:94:3b:f3:9b:86:97:36:eb:a9:
81:77:62:ed:b4:c2:b1:11:37:65:f5:4d:7a:80:82:
3f:38:95:b8:35:d3:c9:c5:d4:16:4e:63:cb:fa:54:
80:97:39:1b:fb:1e:d4:15:4c:9d:a7:45:2b:97:62:
95:15:91:07:6a:7a:25:ad:19:da:4c:7c:cd:e6:f5:
aa:f9:e7:35:5f:fe:c6:44:b0:17:39:4a:9e:8c:84:
2a:89:e6:c1:6e:83:d5:80:b4:1f:a5:db:51:0f:2d:
bf:25:f6:a8:df:ec:41:aa:5a:94:67:c3:81:50:7a:
55:93:f7:f9:cd:45:61:c2:cc:43:c9:a0:36:56:10:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:E2:F6:77:02:64:60:DB:C3:D2:11:7D:A3:2C:1C:19:43:C1:23
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/94Pi9ncCZGDbw9IRfaMsHBlDwSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c3:cd:67:04:2b:1f:6a:90:ff:e3:76:06:eb:94:a7:2c:06:
0b:50:38:11:88:36:94:04:3b:f9:ed:b4:39:46:9d:5d:34:29:
fd:f9:25:74:9f:74:9a:4d:6d:8e:d9:b4:8e:66:ff:b9:3e:8b:
d6:d5:80:d1:89:b7:cd:c0:8e:ec:28:8e:19:88:ec:b6:83:23:
6c:7b:43:6f:c5:9d:e6:b9:af:4f:77:93:76:5b:ab:32:31:87:
b5:4d:f1:e6:ae:cf:1a:e3:7a:a4:4e:c8:b0:d6:f7:c5:ad:0a:
9c:ee:64:c4:e7:b1:9b:6b:f1:f0:58:dc:ed:19:de:03:2f:46:
41:f7:e7:c0:31:2b:c0:86:9f:4e:63:bc:26:87:94:b2:6c:fb:
3c:ea:87:d5:af:41:ed:e0:15:a5:3f:d0:31:4f:bd:4f:38:41:
90:36:ce:23:34:1f:c2:9c:2c:2f:92:8c:0d:6f:d8:e9:8c:7a:
93:d9:41:20:e0:ee:8a:75:6e:2f:e7:8d:41:69:74:d1:a9:61:
62:ee:da:9b:ef:c0:d6:25:36:76:5f:76:9e:fa:b9:c3:f5:5b:
a6:7b:da:51:ec:29:70:8d:f4:50:5a:e6:30:a1:27:30:79:38:
15:b4:33:3b:05:27:16:5a:95:d4:e5:57:91:0a:6c:6a:44:c0:
4d:2d:c2:da
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzFAD2rOlHu278fu5V7i5gVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz
MWUzZjkwHhcNMjQwMTAxMTIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzgzZTJmNjc3MDI2NDYwZGJjM2QyMTE3ZGEzMmMxYzE5NDNjMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwZSeHMWYxEB6nfRS/B82viJ0W7o
wlOHvNJUaRdLS/t9R5g2w+llWnPqpShvPysUz9R620kYPOyKB4FlifZVRtqgwOnt
T1zLD9D/cqDCJc4RIuK24zTe0nxYmM8lr3KfmqM/4KEdnFiRzbwpd0r/OBzHUZ1N
puhikfha9tGUO/Obhpc266mBd2LttMKxETdl9U16gII/OJW4NdPJxdQWTmPL+lSA
lzkb+x7UFUydp0Url2KVFZEHanolrRnaTHzN5vWq+ec1X/7GRLAXOUqejIQqiebB
boPVgLQfpdtRDy2/Jfao3+xBqlqUZ8OBUHpVk/f5zUVhwsxDyaA2VhD56QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFPeD4vZ3AmRg28PSEX2jLBwZQ8EjMB8GA1UdIwQY
MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt
MWM3YjJiOTFkMzA4LzEvOTRQaTluY0NaR0RidzlJUmZhTXNIQmxEd1NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4
LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALuSDMAwD
BAAu5IcDBAEu5IgDBAAu5IwwDQYJKoZIhvcNAQELBQADggEBAEjDzWcEKx9qkP/j
dgbrlKcsBgtQOBGINpQEO/nttDlGnV00Kf35JXSfdJpNbY7ZtI5m/7k+i9bVgNGJ
t83AjuwojhmI7LaDI2x7Q2/Fnea5r093k3ZbqzIxh7VN8eauzxrjeqROyLDW98Wt
CpzuZMTnsZtr8fBY3O0Z3gMvRkH358AxK8CGn05jvCaHlLJs+zzqh9WvQe3gFaU/
0DFPvU84QZA2ziM0H8KcLC+SjA1v2OmMepPZQSDg7op1bi/njUFpdNGpYWLu2pvv
wNYlNnZfdp76ucP1W6Z72lHsKXCN9FBa5jChJzB5OBW0MzsFJxZaldTlV5EKbGpE
wE0twto=
-----END CERTIFICATE-----
Generated at Thu May 2 18:27:54 2024 by rpki-client on console-ams.rpki-client.org