Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/J3tQAc-R4PT9iUkojothol4LOyU.roa
File: J3tQAc-R4PT9iUkojothol4LOyU.roa (raw, json)
Hash identifier: 3yeSEY7/c0NLf9TAv7WKIHKi3Ggm4vF4/G3CEy8wx+U=
Subject key identifier: 27:7B:50:01:CF:91:E0:F4:FD:89:49:28:8E:8B:61:A2:5E:0B:3B:25
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 019422200E1A8FF349B73495A400E1A9B2C3
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/J3tQAc-R4PT9iUkojothol4LOyU.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201056
IP address blocks: 46.228.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0e:1a:8f:f3:49:b7:34:95:a4:00:e1:a9:b2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=277b5001cf91e0f4fd8949288e8b61a25e0b3b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:e4:85:ec:5e:c4:ab:fd:1c:70:5a:cf:30:
8d:e4:7d:1c:a4:62:50:a9:9f:33:a3:22:2d:e0:9d:
8f:de:ce:f9:72:5b:cc:2a:b1:6b:95:6d:9a:b6:55:
e6:69:65:8a:ad:aa:ee:51:e3:a3:ad:2c:67:8d:f8:
51:f5:6d:4e:fd:23:da:76:24:04:a5:99:36:fb:d1:
dd:d2:26:1c:c3:e1:a2:be:47:8d:78:1a:2d:fe:35:
4a:40:92:09:3d:22:0a:0b:1a:87:f1:d8:90:ab:dc:
54:a9:fc:af:bd:ff:fc:51:f0:89:15:98:b1:3b:4d:
22:9a:af:1e:e6:15:db:fc:ed:27:2e:69:63:33:bf:
25:92:81:89:46:4a:e1:b6:3d:e1:9f:7b:36:f4:fa:
14:2d:88:07:bb:17:03:e3:b7:05:31:56:c0:7a:79:
aa:10:56:5c:90:32:42:67:a1:0c:ea:32:f0:e3:cc:
e4:6c:d2:e4:57:f6:56:53:e8:07:a2:e2:98:15:07:
06:43:11:27:2c:b6:15:16:8e:c1:5b:e5:5b:44:5b:
f7:6b:32:db:cc:99:2a:72:22:fa:f4:00:e7:f6:63:
a4:26:db:93:7a:80:9b:07:45:84:04:d7:5c:62:fd:
4c:9c:47:bb:4e:cc:b1:65:69:5b:2f:2c:d6:49:a4:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:50:01:CF:91:E0:F4:FD:89:49:28:8E:8B:61:A2:5E:0B:3B:25
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/J3tQAc-R4PT9iUkojothol4LOyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c4:22:9b:e7:71:7b:ef:17:ef:8e:2b:37:d8:d0:92:2c:bf:
91:9c:8b:62:bc:f8:51:09:81:f0:0e:61:cd:e4:12:15:3e:8a:
60:fa:68:b1:77:21:69:e9:fd:4f:7a:e8:54:80:c0:54:db:3a:
14:09:8b:5c:bc:da:4c:96:6f:da:6e:b8:c4:70:e3:cc:c0:5b:
ad:7c:f7:19:b8:d7:78:52:72:0b:5d:5d:35:84:7a:02:8f:97:
cc:ed:6c:1d:7d:48:7e:e6:82:36:50:41:b7:0a:f3:c5:b4:0f:
f5:1c:6b:31:aa:0a:e8:47:49:7b:6d:79:e5:28:54:aa:e2:cb:
d0:be:3b:c0:95:2a:95:df:72:55:ab:2a:9b:b8:44:ff:1b:20:
b9:c7:33:f5:98:15:17:e6:ae:08:3c:25:a7:44:99:64:6e:ce:
6c:d4:42:35:b5:33:84:20:ba:13:c3:c8:3a:d2:88:7a:d9:41:
c6:ce:4e:3b:85:6a:5f:a6:98:b4:39:9e:e0:4a:78:40:e2:88:
06:f5:6a:d1:4f:48:15:ce:9b:6e:6b:f8:2a:68:78:97:9b:95:
2a:c2:3d:a4:73:13:6a:ab:ec:a0:a6:8c:83:2c:e7:02:72:3b:
f7:4a:98:1a:fb:c8:36:f6:10:4b:21:63:9a:5e:71:14:bf:70:
45:ed:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:43 2025 by rpki-client