Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/H4XS9Jd4RgVQziQYba5Gfsonrvs.roa
File: H4XS9Jd4RgVQziQYba5Gfsonrvs.roa (raw, json)
Hash identifier: 55mfL9Yq4sSJVb8E/9Ead0lw9ritGLLPE3h22CvMkqI=
Subject key identifier: 1F:85:D2:F4:97:78:46:05:50:CE:24:18:6D:AE:46:7E:CA:27:AE:FB
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 019422200C42C9ACA8C048A178A1AA5AD146
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/H4XS9Jd4RgVQziQYba5Gfsonrvs.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0c:42:c9:ac:a8:c0:48:a1:78:a1:aa:5a:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f85d2f49778460550ce24186dae467eca27aefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:8d:d6:92:57:de:93:81:af:70:70:ee:c9:
27:14:bb:b2:b0:15:1b:af:38:29:28:50:97:ef:77:
b4:ba:10:d1:c0:ef:3a:42:0a:94:b8:fb:17:32:52:
b1:8b:9a:9d:47:51:c6:07:69:e1:df:66:89:02:97:
f2:d6:7f:62:6e:5d:10:15:6b:be:d8:6a:d6:f2:ca:
ad:3a:a1:d4:94:2b:c5:47:0f:dd:70:cf:6c:ff:36:
c0:c7:9a:99:fd:d4:8c:9f:75:83:8f:f8:8f:c0:c3:
8c:06:cd:8b:bc:17:4b:e0:44:eb:d7:ec:25:bb:07:
95:de:32:fc:5d:66:fa:b7:c4:89:13:1d:67:d9:75:
30:40:1c:27:58:57:ed:48:f8:6c:66:6c:4e:1d:9d:
a3:de:cc:bf:3f:77:7f:e4:36:f5:19:f0:f9:fb:6c:
89:41:4b:88:21:f3:0f:01:99:0c:c3:a2:a2:75:f9:
f8:76:f1:a8:e3:6d:46:3f:ad:60:64:40:b5:b4:cb:
39:69:b8:c3:71:58:70:ec:87:3d:db:d9:44:51:20:
c9:e6:54:32:78:eb:7c:2f:8d:d4:b5:53:23:c5:17:
35:4b:ed:ff:87:15:bf:57:eb:96:a4:7b:b5:6c:13:
71:cc:f3:28:cf:8a:0c:b1:87:e9:78:3c:c3:31:3b:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:85:D2:F4:97:78:46:05:50:CE:24:18:6D:AE:46:7E:CA:27:AE:FB
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/H4XS9Jd4RgVQziQYba5Gfsonrvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c4:de:70:5c:1a:70:37:ac:b0:bf:22:bd:6f:69:08:f0:99:
bb:d5:65:e6:c7:18:06:8d:0a:4f:ee:fa:ef:dc:0c:ee:8c:25:
7c:a3:b2:99:54:03:0f:05:ab:02:5c:b5:e3:29:48:e2:27:d5:
f4:b5:a1:0a:b9:62:63:c7:15:16:2f:2b:c7:eb:6e:72:28:d1:
5b:21:e0:a3:bb:a7:99:e1:93:a8:a9:21:6f:5b:4b:aa:7d:9a:
ed:64:dd:43:4c:43:73:a1:2a:92:c0:7b:b6:3f:fa:f0:e6:41:
1c:ec:0f:4b:03:ae:9e:7d:e9:ce:3e:ca:6d:50:bf:db:3b:35:
62:0d:38:6e:3b:83:c3:12:7b:0a:bd:55:c0:e6:14:23:c5:f4:
79:07:64:81:01:1e:e5:ec:12:eb:d1:ff:e9:7f:f3:d1:e0:e1:
f6:24:7b:7e:e6:7d:54:74:b3:61:ac:e9:85:2a:1a:9a:ae:1f:
39:d6:c2:a3:a0:f2:df:0e:e3:19:62:41:5d:5c:51:f6:d5:16:
65:c5:fa:08:b7:a3:e9:8e:35:79:90:43:ab:05:0d:ad:08:2c:
af:3a:7c:1c:56:f9:4a:56:10:47:de:75:27:65:72:8f:9a:7b:
70:a5:ff:1f:a7:ff:00:07:b7:a9:2e:e3:e5:93:15:c5:10:d6:
e6:47:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:42 2025 by rpki-client