Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TmUg3CR-fZEXyQIP528FHhHN3WE.roa
File: TmUg3CR-fZEXyQIP528FHhHN3WE.roa (raw, json)
Hash identifier: 52J/vDZxhlywhbUjO2nHrKbGpuJW5frNj8er1tfOveA=
Subject key identifier: 4E:65:20:DC:24:7E:7D:91:17:C9:02:0F:E7:6F:05:1E:11:CD:DD:61
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E413FD11C17404371EB1F5AD555987DCF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TmUg3CR-fZEXyQIP528FHhHN3WE.roa
Signing time: Fri 15 Mar 2024 08:34:45 +0000
ROA not before: Fri 15 Mar 2024 08:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.0.0/16 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.128.0/17 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.208.0/22 maxlen: 22
46.3.212.0/22 maxlen: 22
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:3f:d1:1c:17:40:43:71:eb:1f:5a:d5:55:98:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 15 08:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6520dc247e7d9117c9020fe76f051e11cddd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:16:cf:b3:7a:3c:e9:c7:94:d2:a5:f1:94:
66:fa:51:36:5a:d3:15:2b:11:28:9a:df:0f:45:0c:
d2:34:18:4f:92:89:58:4e:15:b9:c4:b9:31:dc:b5:
ba:14:b6:18:6e:b7:07:0d:a6:c2:5a:18:c3:37:9b:
bf:a8:a7:6f:54:1d:32:87:d5:6f:87:cf:71:92:e2:
00:93:15:bd:69:8e:1d:3e:c3:3f:52:78:c5:3d:e5:
36:b0:57:15:63:26:61:39:2c:6b:76:5f:f0:c7:04:
70:52:bb:4a:93:d2:69:49:ef:78:b0:ee:23:09:26:
49:a3:f1:38:0a:f4:aa:51:e8:b3:53:fe:4b:81:c6:
7d:f6:f3:a8:3a:f2:87:62:94:60:17:e0:6c:72:31:
10:f3:70:d8:c3:73:ae:48:cf:7d:f8:e3:d9:9c:89:
41:f8:bc:86:3a:56:ea:9e:1d:99:c3:48:bf:25:79:
34:67:04:4c:6f:ac:61:8d:27:04:9c:43:31:67:4a:
0c:ef:2b:17:32:47:31:38:ae:7f:33:90:96:5a:b5:
9f:ed:71:cf:1c:12:36:d2:21:d6:df:ba:93:af:6d:
6e:91:89:3d:be:42:21:36:ca:51:b2:40:88:0d:ec:
68:f4:8f:f6:b1:56:80:6f:e9:68:09:e6:02:aa:e0:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:20:DC:24:7E:7D:91:17:C9:02:0F:E7:6F:05:1E:11:CD:DD:61
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TmUg3CR-fZEXyQIP528FHhHN3WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:a5:a3:39:31:ad:7d:7f:d3:ba:81:97:fa:4b:e8:aa:59:7e:
0e:a5:cd:3e:b9:55:c6:e3:17:b1:3a:49:69:e3:43:7f:01:0d:
03:37:19:2e:77:37:63:79:d6:e1:5b:97:63:2f:94:73:4f:cc:
d9:ec:2e:b9:99:34:93:0f:70:70:b0:6f:ea:d6:d7:3f:06:2a:
53:12:1f:68:22:8b:a6:df:98:0f:a7:71:42:aa:5e:f4:a3:3b:
0b:96:ba:45:76:ce:7e:bb:bf:aa:0f:1f:73:76:22:3c:3d:bd:
a6:91:8d:0f:80:79:6f:e4:c7:3d:b9:0c:51:2a:e3:cc:f9:50:
44:05:12:4c:23:b3:a9:33:c6:86:8c:bf:b5:a8:f0:60:17:5c:
da:68:01:d0:f7:c9:81:47:7e:68:d1:b6:25:8c:22:12:02:1e:
2e:fb:83:a1:96:f7:3d:5e:08:b4:ba:96:78:40:cb:0c:6b:7a:
f4:a7:11:30:0c:d7:3b:1a:f0:32:93:00:16:58:1c:c6:29:99:
8d:0c:61:45:00:31:37:57:46:1c:97:ea:a5:ef:1a:64:f7:0d:
33:2e:cd:7b:85:17:2b:e5:70:0e:03:32:9d:95:69:04:16:5d:
2c:c8:9a:34:86:4d:e2:ef:1d:8b:d4:c8:95:8f:93:a0:90:51:
34:b6:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:44 2025 by rpki-client