Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/G0mfJKH5XthYEp56dZd7amNIFIg.roa
File: G0mfJKH5XthYEp56dZd7amNIFIg.roa (raw, json)
Hash identifier: ZdlmpS8KB0XJ2RMI8I0V6gnsbS1MxMfFNBLIs6WQ0tQ=
Subject key identifier: 1B:49:9F:24:A1:F9:5E:D8:58:12:9E:7A:75:97:7B:6A:63:48:14:88
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 019422200C9AF3402C20690854A8F3F538FE
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/G0mfJKH5XthYEp56dZd7amNIFIg.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16273
IP address blocks: 46.228.128.0/23 maxlen: 24
46.228.128.0/24 maxlen: 24
46.228.129.0/24 maxlen: 24
46.228.130.0/24 maxlen: 24
46.228.131.0/24 maxlen: 24
46.228.132.0/23 maxlen: 23
46.228.134.0/23 maxlen: 23
46.228.134.0/24 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.141.0/24 maxlen: 24
46.228.143.0/24 maxlen: 24
193.110.108.0/23 maxlen: 23
193.110.108.0/24 maxlen: 24
2a03:7800:a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0c:9a:f3:40:2c:20:69:08:54:a8:f3:f5:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b499f24a1f95ed858129e7a75977b6a63481488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:39:67:54:66:44:7f:3f:6c:75:f1:e1:3d:
ad:b9:1e:71:61:5f:d5:f0:aa:9c:71:10:4f:b0:33:
eb:49:b3:82:e7:20:a5:16:94:82:1b:d7:2d:e6:c1:
fe:47:c6:9e:49:70:35:4d:3b:93:e0:9a:e3:b1:d7:
75:2e:1e:c6:5c:c0:b3:d7:46:2f:dd:c2:0e:c1:8a:
a7:9c:48:a4:4a:9b:b1:f2:45:e1:83:56:68:39:81:
99:4c:8f:5b:d1:13:42:5a:79:c1:db:5f:81:dc:a0:
8b:e4:19:6b:51:b5:f6:1f:88:96:86:24:bc:06:5c:
69:87:cc:fd:79:79:1f:47:08:02:79:30:d8:8d:6d:
3f:5a:5a:1e:3c:3a:eb:04:c9:ad:f0:8b:47:b5:10:
56:fd:53:ac:c8:27:26:05:b0:b2:5d:1f:4d:6c:bd:
72:9a:c1:6a:79:bd:c9:21:6f:9a:2c:92:ac:4c:87:
35:e7:94:64:b9:2b:28:b0:05:c3:76:cf:25:36:b1:
d2:4d:cf:5c:9f:26:96:ef:e1:81:cc:66:05:39:17:
5a:3a:a0:84:9f:78:dc:e5:45:95:79:3b:1c:ab:ce:
d4:8b:84:e3:d6:5c:e0:3f:39:40:d6:26:a2:31:8f:
00:e2:8c:e1:b8:fc:8b:8d:ff:be:85:a7:58:39:d8:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:49:9F:24:A1:F9:5E:D8:58:12:9E:7A:75:97:7B:6A:63:48:14:88
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/G0mfJKH5XthYEp56dZd7amNIFIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.128.0/21
46.228.141.0/24
46.228.143.0/24
193.110.108.0/23
IPv6:
2a03:7800:a00::/40
Signature Algorithm: sha256WithRSAEncryption
3f:88:fa:0d:ab:81:b8:12:d8:f8:06:c8:37:23:35:b7:4a:58:
91:2c:e5:3e:52:e7:b3:ab:f7:b7:71:ab:57:b6:93:fe:e9:b7:
e7:e5:67:d9:d0:21:0d:6d:f9:c8:6f:c8:c1:2f:63:37:a1:5c:
2c:1c:a9:4c:7f:4b:3f:8b:e8:6c:10:07:45:40:60:c2:53:b0:
d2:76:75:ac:2c:89:cd:6d:72:51:1e:c1:b8:92:21:4d:d0:15:
d9:76:0d:b6:40:bd:d4:14:f1:22:cf:81:1a:a6:e3:60:84:75:
91:23:ce:ae:05:b5:42:e3:e2:e6:75:ae:1e:18:2f:66:38:fd:
6e:68:1f:b2:e1:bc:a7:bb:7e:d0:26:2f:58:08:68:b6:c5:ed:
36:77:e8:94:57:2b:a5:9d:6f:f7:82:2c:03:4e:03:1b:99:8b:
d2:69:e2:71:9d:82:05:ac:b9:fa:25:41:74:25:28:23:65:d9:
b7:73:29:e6:17:e9:88:53:ec:02:85:63:f6:24:ad:95:6c:5a:
f5:75:2b:09:a6:51:62:26:a1:76:ce:41:d3:e3:85:5b:ce:c3:
25:b6:82:2d:34:e0:57:16:c0:36:68:dc:e0:2c:4a:9c:ba:b4:
a4:72:8f:c6:6c:3f:f5:8b:7e:97:92:77:13:18:ef:3e:11:46:
d3:d2:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:51 2025 by rpki-client