Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mzOsHfk-iN09oASc0zRz8A44fOg.roa
File: mzOsHfk-iN09oASc0zRz8A44fOg.roa (raw, json)
Hash identifier: MNSCCfGydfKtie4DuZuRzHDwHfKzfMUgXFw8DmgI5Nc=
Subject key identifier: 9B:33:AC:1D:F9:3E:88:DD:3D:A0:04:9C:D3:34:73:F0:0E:38:7C:E8
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0192D912225446AE1E2BBCCC5D2701E668EB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mzOsHfk-iN09oASc0zRz8A44fOg.roa
Signing time: Tue 29 Oct 2024 16:18:17 +0000
ROA not before: Tue 29 Oct 2024 16:18:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.128.0/17 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:12:22:54:46:ae:1e:2b:bc:cc:5d:27:01:e6:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Oct 29 16:18:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b33ac1df93e88dd3da0049cd33473f00e387ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:f9:5a:b2:6e:bc:ef:23:6e:20:11:31:85:
bc:be:bf:ce:85:72:92:8b:57:0d:62:ee:1a:c0:be:
98:11:2a:f0:30:f3:46:fb:8c:01:c1:0c:2d:8e:77:
ef:44:81:2b:a1:66:c9:39:3d:55:2d:d5:95:a8:59:
f2:c6:c0:ae:14:a4:09:77:7a:84:7d:4d:0e:1c:bb:
46:78:3a:49:92:03:e1:29:5f:21:c4:13:b3:e7:04:
c5:c7:07:80:39:50:06:71:d8:50:ad:a1:a1:06:16:
58:c5:88:94:6a:19:b9:33:ac:b8:f2:b8:ef:15:f0:
91:fa:1c:4e:41:9f:40:69:5b:ad:9f:fb:e6:54:b1:
e6:2a:b3:7f:88:10:ec:57:45:b9:a8:4d:21:b0:ed:
ec:00:e6:11:17:e3:48:f1:47:05:0c:7d:8b:9b:8a:
c2:f7:16:b0:97:c1:88:39:9b:01:79:7e:89:2e:2a:
ce:59:7b:3f:a3:8f:a6:58:af:02:b2:dd:bd:8b:56:
53:56:fe:90:99:46:0d:fc:4d:45:d0:35:12:78:3c:
7f:bb:05:a9:b9:3f:76:e6:7e:f2:b4:18:7d:5a:57:
fe:a7:32:33:07:3d:2f:16:63:b0:ca:78:b3:fa:9b:
81:9c:55:5d:d9:0c:65:b5:76:93:82:72:62:73:30:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:AC:1D:F9:3E:88:DD:3D:A0:04:9C:D3:34:73:F0:0E:38:7C:E8
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mzOsHfk-iN09oASc0zRz8A44fOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0-46.3.15.255
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.77.0-46.3.79.255
46.3.84.0-46.3.88.255
46.3.128.0/17
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:41:1a:7a:2d:12:e0:8d:ed:a1:c5:d2:8f:fb:86:ee:09:ff:
13:b7:48:7f:b7:9e:72:12:a7:26:2d:d7:b2:c2:74:a7:2a:a7:
4b:7a:62:c2:e5:6e:29:04:e2:47:53:33:60:0c:ea:77:91:21:
a1:e5:c1:38:0b:b0:10:b8:31:03:55:4c:d2:00:aa:c5:a2:d0:
8b:77:93:39:a5:c8:50:b2:4b:43:01:b6:8f:12:5b:a5:b1:4a:
e8:48:f6:a9:56:13:52:43:3e:e9:e8:f0:9a:0d:2e:dd:2a:31:
89:23:ee:0f:4d:23:15:11:91:66:92:4a:17:ea:39:3b:6f:bb:
f2:80:5b:ba:b6:ca:a5:9c:a5:d9:3f:1b:a4:5a:2d:08:c0:23:
6d:f3:57:78:44:6a:2c:57:06:f6:71:20:cd:e4:92:06:10:46:
d6:79:c9:54:2c:00:05:94:f9:17:4b:e2:2e:85:6a:8d:8d:e4:
67:1a:43:61:5f:0c:33:d4:92:b7:75:57:ce:01:0d:d7:1b:5a:
16:0e:2b:a3:68:a9:a1:e3:3a:34:eb:c0:64:82:a0:93:23:67:
3f:71:df:0b:da:32:ab:cf:89:3c:2f:47:4a:09:58:01:2f:6a:
99:8b:6a:46:be:70:c4:97:d2:2f:e0:1b:32:36:c0:4e:59:47:
9c:1b:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:36 2025 by rpki-client