Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gm2_gnl46sNQPVFnzfdySoZLMq8.roa
File: gm2_gnl46sNQPVFnzfdySoZLMq8.roa (raw, json)
Hash identifier: QMqrKN0JBhhpMH3oDQtTRMjgUu6fuM8lVGwpIzyKdDQ=
Subject key identifier: 82:6D:BF:82:79:78:EA:C3:50:3D:51:67:CD:F7:72:4A:86:4B:32:AF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0198BE2197D5ADEDFAD2FB48564437D0BDEF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gm2_gnl46sNQPVFnzfdySoZLMq8.roa
Signing time: Mon 18 Aug 2025 17:02:09 +0000
ROA not before: Mon 18 Aug 2025 17:02:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43330
IP address blocks: 146.120.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:be:21:97:d5:ad:ed:fa:d2:fb:48:56:44:37:d0:bd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 18 17:02:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=826dbf827978eac3503d5167cdf7724a864b32af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:83:78:d1:13:93:f1:62:e9:d3:92:11:05:3e:
d9:56:2a:3d:45:da:05:98:2a:ef:36:85:db:e7:70:
95:1c:aa:77:ce:23:d7:5b:f2:66:34:77:b7:51:e0:
bd:13:67:a6:6a:4e:48:ed:84:45:9b:d6:b9:8f:b3:
fa:c4:c4:ea:d3:78:25:4b:5b:0c:80:7f:7a:e1:b9:
96:fc:5f:44:b4:56:ec:a6:27:d5:9e:4a:dd:81:82:
69:b1:aa:dc:2c:86:30:a6:e1:0b:38:8c:bf:6a:bd:
6f:8a:64:f5:18:da:99:1c:b7:c9:1b:cd:a3:f3:99:
ea:4d:25:0d:16:2a:e1:0a:54:5b:1f:d2:7f:a1:ae:
f2:8e:6c:27:14:38:ba:2b:32:5e:f7:25:0f:8b:f2:
b8:bc:52:d4:34:11:bf:1b:7c:e9:53:aa:81:76:dc:
30:86:46:59:d0:28:bf:e8:ad:9d:6e:57:98:a3:16:
cf:3c:6e:bd:33:8c:bf:66:b2:36:7b:34:d4:70:ad:
1b:2b:fc:65:73:05:2a:6f:b2:b1:70:6d:6f:7c:0a:
3b:d3:f0:0a:fb:86:c4:7a:03:93:3c:b9:63:58:c3:
1d:2c:9e:6f:e1:61:8b:84:d9:5e:cc:c2:61:0d:20:
fb:ea:7c:b5:9a:c2:dc:dd:18:d9:dd:ab:44:6b:f0:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6D:BF:82:79:78:EA:C3:50:3D:51:67:CD:F7:72:4A:86:4B:32:AF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gm2_gnl46sNQPVFnzfdySoZLMq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.118.0/23
Signature Algorithm: sha256WithRSAEncryption
10:6e:e4:d0:66:3f:eb:c4:c0:03:17:f3:e3:1a:cf:9d:95:d4:
4a:b9:2e:88:61:78:31:b1:38:5b:57:7b:b6:94:97:19:eb:eb:
b1:a3:00:2d:3a:dc:1c:0c:cd:0a:ea:60:be:97:7c:7c:97:0f:
d0:3c:76:7e:a4:da:67:dc:76:86:c6:b9:39:2a:de:07:e8:1d:
78:8c:b9:8f:08:80:d1:5a:a8:68:43:94:b6:26:ca:78:9c:38:
92:5b:10:4d:97:27:b6:92:b0:45:0a:75:e1:2f:bd:18:4c:55:
7c:51:a1:ee:ac:9d:91:fb:fe:1b:ec:2f:b5:13:44:a6:ff:25:
d0:c6:2f:09:30:c1:17:f1:b7:0b:29:1a:3a:13:8b:e6:c3:bc:
c2:e3:4e:2f:45:e9:95:32:47:0b:c7:de:f2:16:65:43:d5:ad:
52:25:d1:7a:e9:3f:6d:78:7f:26:6f:13:3e:0f:b3:b5:b2:49:
02:98:fe:62:12:64:54:65:0a:7f:ec:84:e5:b0:16:f5:f5:08:
d6:9d:09:4b:f7:00:88:f5:ad:bb:3c:54:c7:29:9c:4a:29:2b:
c6:c0:09:e3:6a:a1:95:67:ca:f4:be:38:37:ea:ba:41:db:18:
3b:03:00:35:76:d0:9d:b5:7b:1d:d5:3c:ed:7f:4a:21:54:18:
33:3c:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:46 2025 by rpki-client