Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/M6NxINPSJ9x5-mZwOwxvNZ68J0k.roa
File: M6NxINPSJ9x5-mZwOwxvNZ68J0k.roa (raw, json)
Hash identifier: fD8hsYbBGFhWdhNAY2eDKn7cRDvQHe9GdkQmeMyqdsk=
Subject key identifier: 33:A3:71:20:D3:D2:27:DC:79:FA:66:70:3B:0C:6F:35:9E:BC:27:49
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019355B07E5994AF4CB04CE56C2CBF43606D
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/M6NxINPSJ9x5-mZwOwxvNZ68J0k.roa
Signing time: Fri 22 Nov 2024 21:04:10 +0000
ROA not before: Fri 22 Nov 2024 21:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.3.190.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.112.0/20 maxlen: 22
149.126.226.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:b0:7e:59:94:af:4c:b0:4c:e5:6c:2c:bf:43:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 22 21:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33a37120d3d227dc79fa66703b0c6f359ebc2749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:54:e2:a4:50:15:ac:6a:56:56:12:8f:6c:
b1:37:6d:bb:81:d0:35:a7:fa:30:e1:6c:ea:94:ba:
a9:ae:8b:ff:e1:00:f5:18:35:f5:7a:45:5b:b6:1b:
c9:a8:5a:15:a6:27:9f:c2:fe:c5:bb:05:b7:05:ba:
7f:ae:a0:27:73:bf:e2:60:10:5e:1e:78:e7:ee:1b:
f4:1a:6f:e4:55:13:5f:0d:91:da:7c:74:2b:3e:47:
91:56:2d:48:aa:a3:12:fe:12:c7:8a:55:f9:43:1d:
9c:8b:10:78:4d:ba:fb:6d:6d:1d:79:d1:dc:82:c8:
71:5a:dd:de:7d:f7:a6:ff:ec:47:7b:d3:c7:a7:d1:
97:af:40:1a:80:25:5e:53:13:81:ec:6a:b5:27:b7:
18:78:ae:f9:bc:4a:cb:5a:fe:44:7c:dd:9d:ba:a9:
0f:6f:ec:7c:a4:5d:29:da:6a:6b:b7:d6:14:1d:17:
cb:bc:70:cc:ed:94:15:49:a0:56:6d:08:6d:7a:0e:
22:1a:fc:54:06:74:7f:b5:9e:33:bf:af:88:5f:9d:
e8:12:71:6d:be:23:7a:b6:77:34:78:15:bb:c1:a9:
5e:af:e5:b7:f8:98:12:82:86:a2:a1:78:e8:20:02:
f1:80:57:8f:04:d8:ec:5f:88:5f:d9:08:cf:be:31:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A3:71:20:D3:D2:27:DC:79:FA:66:70:3B:0C:6F:35:9E:BC:27:49
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/M6NxINPSJ9x5-mZwOwxvNZ68J0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.190.0/24
46.3.208.0/21
46.3.220.0/23
46.3.230.0/23
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.69.0/24
46.232.112.0/20
149.126.226.0/24
149.126.244.0/24
149.126.246.0-149.126.250.255
Signature Algorithm: sha256WithRSAEncryption
7d:1b:11:d2:38:db:27:a9:2c:f1:6f:f8:67:51:12:e0:96:8a:
21:91:7f:dd:bb:c1:07:d8:64:bf:93:81:87:02:69:eb:6e:26:
21:eb:6a:33:ac:a5:d9:50:cc:d3:8e:1c:8b:73:c8:9a:fa:eb:
03:16:1c:46:f9:62:79:13:94:bd:9e:04:7a:01:80:1e:45:f0:
6c:50:76:cc:f0:92:59:2c:24:c0:f9:b2:db:ea:aa:0d:0a:bd:
2d:9f:b4:33:8a:62:b0:d2:f9:fb:ba:15:e4:51:0c:60:97:e5:
34:56:20:04:5e:06:af:a1:b5:94:b3:1d:51:f6:74:f0:90:22:
79:da:f1:89:86:0a:c2:6c:4d:3a:01:8c:bb:9c:1c:a8:78:e5:
d0:d7:7c:62:7e:d1:af:87:f7:63:6e:ab:2f:3f:21:68:48:74:
e7:5b:7f:9e:dd:53:ac:79:e4:b1:61:b9:4a:77:83:81:f8:34:
e7:a7:05:09:72:ac:f3:24:e6:b2:e6:59:e5:0b:81:30:f4:89:
67:c9:70:fe:99:41:38:a7:94:07:ed:86:5f:08:bc:f5:c3:bb:
f4:47:9f:ee:53:7d:96:55:8d:f5:55:94:b8:1e:01:5d:93:f7:
d7:e4:50:ab:04:7d:cb:7e:38:a8:3a:ff:0f:6d:d7:82:db:38:
ee:f1:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:46:16 2024 by rpki-client on console-fra.rpki-client.org