Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/gkNUdTJYKI-HrI5siVhEhSliy48.roa
File: gkNUdTJYKI-HrI5siVhEhSliy48.roa (raw, json)
Hash identifier: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=
Subject key identifier: 82:43:54:75:32:58:28:8F:87:AC:8E:6C:89:58:44:85:29:62:CB:8F
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 019422FB03223E78B2F22DECADAD2C5FEF9C
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/gkNUdTJYKI-HrI5siVhEhSliy48.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201091
IP address blocks: 46.45.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:03:22:3e:78:b2:f2:2d:ec:ad:ad:2c:5f:ef:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=824354753258288f87ac8e6c895844852962cb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:6f:2d:58:84:2d:cf:62:6b:a5:a2:e5:4f:
21:1f:8a:95:f2:07:10:41:ca:4f:fc:92:98:17:cf:
d8:58:b4:07:01:87:c4:48:c6:fc:2b:c3:07:81:cd:
e5:5a:7a:84:1c:de:a1:5e:a8:38:e7:d5:53:0e:b7:
26:d4:a4:e4:2c:53:b1:03:18:11:1a:34:7d:a2:17:
93:78:0b:ae:71:af:4e:4e:72:9b:d5:2f:6c:2f:17:
ae:17:ad:15:6d:c4:3e:84:1b:38:2a:ee:e4:09:2b:
c7:4f:27:3b:20:f4:95:6e:f6:ea:71:3f:c7:93:71:
8f:3e:3e:b0:b0:5f:1c:42:dd:7d:c9:ea:3c:78:02:
a4:c6:c0:7b:c8:1a:a4:e4:a4:21:1e:b1:86:84:11:
ff:71:fb:50:3f:d0:53:02:e3:32:66:b9:d5:0f:10:
8a:b5:cc:f3:48:e5:34:f2:65:a1:f7:47:12:ca:1e:
c4:21:2a:70:31:56:d5:23:f4:ff:1a:b6:b2:f9:b5:
4c:50:39:47:16:42:80:8b:e9:b5:d3:7f:9e:cc:c5:
1d:79:d0:cd:d6:40:5f:61:c6:8d:2b:43:1c:2b:69:
46:f3:cd:39:b4:b8:f8:96:01:f7:0a:2f:10:05:e2:
4d:04:80:f0:bf:cc:78:91:e7:5d:8a:de:28:fe:ab:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:43:54:75:32:58:28:8F:87:AC:8E:6C:89:58:44:85:29:62:CB:8F
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/gkNUdTJYKI-HrI5siVhEhSliy48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.116.0/24
Signature Algorithm: sha256WithRSAEncryption
70:be:6f:62:ce:7d:1d:a8:41:0d:44:d6:27:f0:34:24:f9:41:
79:bc:2d:51:e4:e0:d6:c4:f8:69:3d:b6:8b:fa:fb:78:0d:f4:
a8:e7:f1:74:5d:0d:8a:95:ae:33:82:04:1f:0b:f3:44:d6:82:
83:2a:86:aa:81:e9:1e:af:db:c3:ed:85:2d:b4:e7:bc:98:53:
d3:f8:9c:e0:84:1f:e0:c2:15:8d:49:56:23:c7:95:d9:ad:65:
5d:fb:4a:12:17:54:8f:9c:61:e3:b4:9b:93:05:49:5b:f1:aa:
57:59:b9:50:ff:ef:43:e1:b9:36:7d:93:a7:5c:54:23:9b:62:
36:ba:ab:d5:8f:16:aa:62:c0:41:6c:0b:de:86:16:80:a1:27:
19:c4:b3:b4:a4:c1:07:ae:92:c3:4a:a5:0a:c8:58:65:4e:58:
05:34:64:10:40:03:e2:3a:47:85:d3:a3:02:ee:6d:5c:82:80:
33:aa:5f:5e:f4:f0:67:57:6b:b1:7d:2f:57:d8:dc:ae:ac:87:
50:e9:e6:ea:45:3b:ee:5a:3c:54:d6:a9:07:3c:6c:5d:5f:b4:
17:ea:91:be:6c:d0:80:ca:99:05:22:fd:52:85:15:63:83:89:
f5:62:e1:69:fd:ff:cf:df:81:fb:95:1a:f4:c1:94:ce:a6:9a:
7b:86:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:21:30 2025 by rpki-client