Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/hltbCnwBkIcIoMyHAxIMm_k33ok.roa
File: hltbCnwBkIcIoMyHAxIMm_k33ok.roa (raw, json)
Hash identifier: NIRcUVkgopWRZLHD2CyHyNDaQlUA8O/WavyvtvfuFwc=
Subject key identifier: 86:5B:5B:0A:7C:01:90:87:08:A0:CC:87:03:12:0C:9B:F9:37:DE:89
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019460FDC5DD9CFBE519CCC92119C3DA3469
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/hltbCnwBkIcIoMyHAxIMm_k33ok.roa
Signing time: Mon 13 Jan 2025 18:47:11 +0000
ROA not before: Mon 13 Jan 2025 18:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.8.0/23 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.80.0/21 maxlen: 21
46.3.84.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.168.0/22 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:fd:c5:dd:9c:fb:e5:19:cc:c9:21:19:c3:da:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 13 18:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=865b5b0a7c01908708a0cc8703120c9bf937de89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:59:c8:b4:48:22:c5:df:f9:5b:7e:7e:10:
73:37:d0:9a:e7:0f:bb:7e:57:52:4e:33:a8:9e:2f:
04:03:f4:b3:55:b8:17:bb:09:1b:cb:c5:62:6c:20:
db:89:26:5e:07:87:e1:f5:28:ac:83:9e:ac:76:6f:
d2:2a:c5:db:9b:61:c4:f1:92:0b:35:2a:4b:79:d1:
5f:95:09:66:4f:d6:76:35:d1:2b:5e:e4:08:4d:03:
ae:d2:16:94:ab:a5:63:a8:07:a0:49:c3:3c:91:06:
56:ea:18:cc:89:8a:83:18:d9:89:4b:af:02:be:3d:
ff:f4:23:b8:30:8f:52:e7:0c:14:e0:8c:75:3c:ce:
c4:43:c8:34:75:93:32:fd:9b:2d:4f:c3:5a:a1:bd:
40:a3:00:26:3b:4f:03:2a:47:5f:36:43:40:a6:30:
75:81:8e:a8:b1:1b:f2:53:c1:f2:a6:29:78:62:c7:
71:9e:23:ed:56:aa:66:83:ff:40:77:34:cc:3e:4f:
d3:78:0c:3e:b3:c5:17:61:ea:08:c2:04:9c:3c:f5:
7d:e5:cf:76:1f:b0:5e:6d:a9:08:aa:bc:0d:d9:a5:
17:87:06:47:8c:62:c1:37:a9:d3:05:c0:0a:43:10:
dd:66:0f:c9:d9:1a:70:b1:f1:8d:4e:2f:5e:b2:94:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:5B:0A:7C:01:90:87:08:A0:CC:87:03:12:0C:9B:F9:37:DE:89
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/hltbCnwBkIcIoMyHAxIMm_k33ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/23
46.3.32.0/19
46.3.77.0/24
46.3.80.0/21
46.3.89.0-46.3.91.255
46.3.120.0-46.3.131.255
46.3.134.0/23
46.3.156.0/23
46.3.160.0-46.3.171.255
46.3.184.0/21
46.3.205.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.232.0.0/22
46.232.18.0/23
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
75:89:16:a6:61:b1:0a:11:9d:88:7b:98:b4:4c:50:36:e1:97:
cd:be:40:13:ad:96:fb:d1:66:3c:bc:7d:27:f9:2f:8d:18:fd:
8d:2d:82:09:7e:d3:4b:7b:6f:41:6d:f6:ee:a8:7e:93:e8:d2:
2c:21:4c:93:0d:04:70:87:72:9f:6f:f0:e4:35:e1:28:b4:3e:
b0:f3:ca:71:66:04:92:7f:79:5b:09:59:45:0b:d8:12:59:02:
5e:c9:e4:14:c0:8d:0a:6d:00:9d:92:57:3a:6a:ec:79:d0:8c:
2b:19:6e:1a:0d:b9:e6:21:d2:34:5b:aa:d2:fd:d6:4b:fd:98:
9e:07:2d:c7:37:63:e6:db:5b:c4:16:b3:e9:c6:4c:10:a8:cb:
79:3d:62:5b:45:42:ee:4e:7d:6f:59:28:d7:e0:33:30:40:eb:
01:7b:3c:34:ee:ad:eb:37:73:4f:bc:a8:1c:85:1b:29:38:2f:
6a:6e:d0:74:96:28:e4:d5:b1:72:66:20:ae:77:5c:90:ee:62:
e3:6f:96:24:a2:52:6a:8a:8e:66:58:dc:4f:e6:bf:3d:5b:cf:
2c:d5:7b:06:31:38:d6:b1:35:dc:73:a0:e7:94:53:d9:7a:d8:
73:90:9c:60:92:15:b1:4e:3c:10:6e:c8:08:17:b6:05:75:46:
5d:38:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:43 2025 by rpki-client