Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa
File: SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa (raw, json)
Hash identifier: hyMLCE9dKw6nHLTE5zUsN701ouIzmTXWz2+LUwVBqEU=
Subject key identifier: 4A:34:F4:E2:70:3B:A9:7F:CC:0A:65:C0:FB:85:DF:DA:A3:8E:BF:29
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0196E7BAA3C84B1659E13DFC7E54EB471678
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa
Signing time: Mon 19 May 2025 08:48:10 +0000
ROA not before: Mon 19 May 2025 08:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.140.0/24 maxlen: 24
46.228.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:ba:a3:c8:4b:16:59:e1:3d:fc:7e:54:eb:47:16:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: May 19 08:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a34f4e2703ba97fcc0a65c0fb85dfdaa38ebf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fd:1e:4d:3f:c0:26:e4:01:b1:d4:e8:7b:90:
bb:d0:99:10:9f:9b:d5:a4:bb:70:f1:46:49:3c:d5:
99:08:20:1d:3a:25:f9:45:b5:5b:b3:26:e3:ff:d8:
b9:35:cd:18:5d:cf:86:96:ad:c2:53:89:ba:a0:8f:
4b:4b:e1:2e:6a:74:61:27:fa:fe:43:93:18:9c:61:
5f:4e:33:d7:d1:d8:15:29:3c:6b:7b:59:7c:b4:e5:
8e:cd:6f:2a:7a:26:74:30:20:f7:d5:20:41:3b:88:
37:40:e7:94:ed:34:5e:95:ad:36:55:82:ad:95:31:
3b:64:55:21:70:ea:67:45:4b:33:5a:de:c6:13:98:
21:6d:02:30:1f:3f:bf:e9:0b:34:95:be:e7:b6:96:
f3:22:a6:21:7e:aa:d7:68:85:09:ee:d0:dd:6b:a2:
a9:b2:3f:b9:31:fa:f9:a5:db:cb:39:83:90:ab:3c:
12:b2:d9:f6:7c:fd:12:99:72:0e:f9:52:01:09:ef:
9b:68:cf:6c:6a:b9:3a:69:42:58:79:ff:bd:79:f2:
45:9b:ac:99:b7:d7:ee:5c:e6:49:07:4d:f2:20:e1:
09:44:74:9d:d8:ca:83:7d:54:f6:d3:d7:6f:0c:6a:
36:e6:df:3d:a8:ab:51:94:8d:d3:89:7b:6c:9e:17:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:F4:E2:70:3B:A9:7F:CC:0A:65:C0:FB:85:DF:DA:A3:8E:BF:29
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
46.228.140.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a2:4d:25:0d:60:75:f4:12:3b:ba:ec:00:cd:26:3e:0d:5a:
e4:5c:28:da:24:16:f3:4e:38:49:a5:0f:5f:c3:bf:69:a1:69:
ad:e6:b8:c2:fc:1c:94:39:5c:50:d7:6a:5a:8c:f0:97:28:7a:
bc:8b:34:b2:e4:f3:2c:88:cf:44:8e:5f:4b:2c:39:a5:8e:e0:
c3:e1:83:59:56:2e:34:32:5a:a2:a2:fe:5f:5f:24:82:18:7c:
85:07:01:d5:46:18:99:5e:83:00:94:40:fe:42:7b:38:55:69:
db:27:17:96:e5:9e:6b:e1:e1:89:f6:97:06:60:82:80:2b:29:
a8:8f:96:17:30:b8:40:bc:ee:98:ce:c3:22:1d:02:fa:75:67:
62:89:c3:8e:9c:10:24:33:6e:f9:e8:26:a1:a0:ae:cf:87:49:
f2:e5:4f:66:ab:72:c2:0f:08:60:0f:f5:e6:e6:9f:7a:2a:86:
0e:0e:b0:2e:46:d2:6b:43:ca:6b:a9:d3:a3:c7:bd:96:4e:dd:
a7:53:df:5c:aa:8e:aa:5e:d6:d7:f6:a3:2d:e1:6e:0e:f0:ea:
22:f8:e4:45:33:c7:fd:3a:65:ed:d9:f1:1f:92:46:12:7b:9a:
1e:4b:da:19:dc:7d:96:3b:ac:1e:c8:29:2b:58:43:87:00:97:
35:fc:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:58:17 2025 by rpki-client