Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/S4YwyP2Mzmid58pfPww-W8HZJz8.roa
File: S4YwyP2Mzmid58pfPww-W8HZJz8.roa (raw, json)
Hash identifier: aponA+zqASHv6aObrhWjMDeZkUrnU9/nhBI7EMo94sM=
Subject key identifier: 4B:86:30:C8:FD:8C:CE:68:9D:E7:CA:5F:3F:0C:3E:5B:C1:D9:27:3F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E62D1DF79A70B6544BC56D42D5E93B47B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/S4YwyP2Mzmid58pfPww-W8HZJz8.roa
Signing time: Thu 21 Mar 2024 21:01:45 +0000
ROA not before: Thu 21 Mar 2024 21:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207636
IP address blocks: 46.3.20.0/24 maxlen: 24
46.3.21.0/24 maxlen: 24
46.3.22.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.85.0/24 maxlen: 24
46.3.128.0/24 maxlen: 24
46.3.129.0/24 maxlen: 24
46.3.131.0/24 maxlen: 24
46.3.192.0/19 maxlen: 19
46.3.224.0/19 maxlen: 19
46.3.237.0/24 maxlen: 24
46.232.8.0/22 maxlen: 22
46.232.12.0/22 maxlen: 22
80.243.128.0/20 maxlen: 24
149.126.194.0/24 maxlen: 24
149.126.199.0/24 maxlen: 24
149.126.209.0/24 maxlen: 24
149.126.211.0/24 maxlen: 24
149.126.212.0/24 maxlen: 24
149.126.227.0/24 maxlen: 24
149.126.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:d1:df:79:a7:0b:65:44:bc:56:d4:2d:5e:93:b4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 21 21:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b8630c8fd8cce689de7ca5f3f0c3e5bc1d9273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:7a:76:01:19:69:70:e5:ca:01:9a:d6:fb:
d6:8c:8e:3f:09:16:5a:3f:ef:3d:11:84:25:18:c4:
3c:bc:d1:05:90:6a:83:19:aa:80:bf:89:c3:20:7d:
bd:ec:6e:2c:1e:cb:2b:45:ee:ff:0e:28:60:24:bb:
ec:7e:c5:b3:b4:75:6e:0b:c7:05:77:a5:af:8f:5a:
29:45:39:81:b2:e9:23:5b:ea:39:da:fb:46:52:cc:
5b:ef:d0:5c:df:5f:b1:ba:31:57:3c:ed:bf:56:01:
1f:c1:90:20:db:d9:01:cf:2f:15:0e:c8:bc:2a:2d:
f0:a1:18:87:16:4c:8f:f0:74:0b:1d:b3:0c:e9:5f:
7a:8f:3a:c5:75:dc:39:3c:35:43:2f:51:8a:19:97:
15:e2:7c:ab:e5:a5:d1:04:13:59:fe:9f:2d:a7:17:
e7:05:d2:32:06:72:6b:31:78:26:77:a0:07:9d:ce:
3a:5c:4e:de:5e:43:e0:94:c0:ef:fe:da:78:30:03:
df:9d:a9:98:67:39:a0:15:c7:c7:fc:3c:0f:08:ed:
aa:fd:78:71:5d:de:22:54:86:ab:9a:07:e3:f0:b4:
d0:65:b3:1c:14:99:d5:ab:1d:ea:dd:10:70:08:bd:
ff:31:46:7d:a8:d9:17:0d:80:e8:65:04:8e:b5:54:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:30:C8:FD:8C:CE:68:9D:E7:CA:5F:3F:0C:3E:5B:C1:D9:27:3F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/S4YwyP2Mzmid58pfPww-W8HZJz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.20.0/22
46.3.85.0/24
46.3.128.0/23
46.3.131.0/24
46.3.192.0/18
46.232.8.0/21
80.243.128.0/20
149.126.194.0/24
149.126.199.0/24
149.126.209.0/24
149.126.211.0-149.126.212.255
149.126.227.0/24
149.126.241.0/24
Signature Algorithm: sha256WithRSAEncryption
19:45:4d:c4:a1:c7:f4:2e:9b:75:e3:7d:b6:49:cd:31:17:71:
bf:b9:3c:c3:25:08:c3:76:55:2c:57:1a:80:23:06:64:8f:85:
9f:31:ad:cb:fe:8b:25:68:2d:75:06:48:61:95:e2:97:2c:53:
f2:1a:06:1a:78:7c:f8:f8:3d:a4:74:18:49:5e:f5:d6:c1:7a:
6c:6b:f8:65:85:90:4e:6f:c1:e5:d7:6d:56:b4:f1:c0:d4:74:
7f:d6:a8:43:42:5a:2b:df:dc:96:50:fa:e8:c5:ff:dc:27:cf:
82:86:1d:99:e7:d4:68:98:02:4c:24:67:95:8e:4f:a3:60:0f:
a9:32:32:aa:53:71:6d:4c:69:6f:c3:3e:ae:b2:c2:4b:4c:7c:
2b:6b:82:0d:95:ae:c5:41:20:86:88:97:86:f9:83:27:3a:2a:
eb:18:8d:70:b4:43:40:04:e7:51:cc:25:dc:1c:e1:ba:cb:a8:
e5:fc:01:56:22:f1:be:75:af:04:e2:e9:17:e5:b6:2f:d0:8f:
02:2e:77:50:7c:27:1b:2f:0f:6b:b3:fa:c3:d7:0b:ed:4e:f0:
08:9b:80:aa:0c:06:c8:b1:32:4d:92:70:23:ba:5d:1f:2d:1a:
8f:f7:d9:6f:9c:7d:66:1c:62:2d:81:4d:63:aa:42:bb:98:e7:
29:44:aa:fc
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAY5i0d95pwtlRLxW1C1ek7R7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMzIxMjEwMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjg2MzBjOGZkOGNjZTY4OWRlN2NhNWYzZjBjM2U1YmMxZDkyNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDF6dgEZaXDlygGa1vvWjI4/CRZa
P+89EYQlGMQ8vNEFkGqDGaqAv4nDIH297G4sHssrRe7/DihgJLvsfsWztHVuC8cF
d6Wvj1opRTmBsukjW+o52vtGUsxb79Bc31+xujFXPO2/VgEfwZAg29kBzy8VDsi8
Ki3woRiHFkyP8HQLHbMM6V96jzrFddw5PDVDL1GKGZcV4nyr5aXRBBNZ/p8tpxfn
BdIyBnJrMXgmd6AHnc46XE7eXkPglMDv/tp4MAPfnamYZzmgFcfH/DwPCO2q/Xhx
Xd4iVIarmgfj8LTQZbMcFJnVqx3q3RBwCL3/MUZ9qNkXDYDoZQSOtVQZOwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFEuGMMj9jM5onefKXz8MPlvB2Sc/MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvUzRZd3lQMk16bWlkNThwZlB3dy1XOEhaSno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQCLgMUAwQA
LgNVAwQBLgOAAwQALgODAwQGLgPAAwQDLugIAwQEUPOAAwQAlX7CAwQAlX7HAwQA
lX7RMAwDBACVftMDBACVftQDBACVfuMDBACVfvEwDQYJKoZIhvcNAQELBQADggEB
ABlFTcShx/Qum3XjfbZJzTEXcb+5PMMlCMN2VSxXGoAjBmSPhZ8xrcv+iyVoLXUG
SGGV4pcsU/IaBhp4fPj4PaR0GEle9dbBemxr+GWFkE5vweXXbVa08cDUdH/WqENC
Wivf3JZQ+ujF/9wnz4KGHZnn1GiYAkwkZ5WOT6NgD6kyMqpTcW1MaW/DPq6ywktM
fCtrgg2VrsVBIIaIl4b5gyc6KusYjXC0Q0AE51HMJdwc4brLqOX8AVYi8b51rwTi
6Rflti/QjwIud1B8JxsvD2uz+sPXC+1O8AibgKoMBsixMk2ScCO6XR8tGo/32W+c
fWYcYi2BTWOqQruY5ylEqvw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:34:20 2024 by rpki-client on console-fra.rpki-client.org