Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/r3-nMgJldcgaSo--mLyxGOtmBg4.roa
File: r3-nMgJldcgaSo--mLyxGOtmBg4.roa (raw, json)
Hash identifier: j1qT5DKkewwaYNjLm/GBpoYgQgUurgzPc+2WInFL9eM=
Subject key identifier: AF:7F:A7:32:02:65:75:C8:1A:4A:8F:BE:98:BC:B1:18:EB:66:06:0E
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0192F6A8F78CDF048CDA073999EB4E190B23
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/r3-nMgJldcgaSo--mLyxGOtmBg4.roa
Signing time: Mon 04 Nov 2024 10:12:01 +0000
ROA not before: Mon 04 Nov 2024 10:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.150.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
141.8.200.0/22 maxlen: 22
141.8.204.0/22 maxlen: 22
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
2a03:8480::/33 maxlen: 33
2a03:8480:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:a8:f7:8c:df:04:8c:da:07:39:99:eb:4e:19:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Nov 4 10:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af7fa732026575c81a4a8fbe98bcb118eb66060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:cd:71:bf:31:d7:97:6d:12:9f:c4:fd:f9:48:
80:6d:be:70:4b:10:fc:24:4c:e4:1e:e9:c5:16:08:
40:64:dd:c5:71:4f:1b:1d:70:77:e7:54:43:06:57:
c3:8b:0c:45:06:8a:82:61:f9:10:29:1c:38:88:2f:
32:c9:f0:c3:2b:15:6c:ee:06:ff:57:3e:42:c7:fc:
5e:c1:28:6c:51:6c:28:83:36:b3:05:6d:53:e4:ba:
11:3e:8a:b9:cf:3f:25:c5:c2:d2:36:71:65:67:57:
57:b6:b9:7c:97:a5:03:e6:d6:4c:da:d9:16:37:cf:
dc:84:37:41:2c:b7:33:54:82:19:ff:f8:4c:e3:8c:
2b:8d:db:81:36:69:ca:dc:c7:c2:7d:7c:ea:4e:75:
a9:83:95:90:6c:2f:21:db:1c:17:d9:04:d6:fa:08:
2b:48:be:18:0d:84:69:d1:c4:16:c5:ea:b5:d2:dd:
0d:55:9e:57:59:42:8c:29:f2:ee:ef:6d:c8:46:4c:
d3:b1:6b:08:82:79:56:35:0f:a3:0e:e4:a8:2c:55:
b1:8f:71:58:5c:83:77:95:64:37:e2:d5:c1:87:e3:
7f:95:19:c9:98:61:1f:c3:13:66:e0:48:2d:ed:fc:
5c:1f:6b:67:46:5e:91:6e:e1:c7:5e:ee:9e:a9:99:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:A7:32:02:65:75:C8:1A:4A:8F:BE:98:BC:B1:18:EB:66:06:0E
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/r3-nMgJldcgaSo--mLyxGOtmBg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
36:ef:c0:f1:54:89:31:60:45:ff:33:d3:de:12:36:3c:14:da:
d3:af:da:39:c4:a3:1b:1a:17:e8:1e:26:3e:01:b9:b6:8d:dd:
38:2d:63:d6:df:62:cc:0e:89:55:05:ea:c9:c3:08:8e:51:64:
79:8d:ad:d4:17:ae:0f:db:f4:15:11:cf:56:d7:72:a2:58:a2:
2c:b1:4a:9d:a0:6a:ad:f6:0f:8e:6b:c3:b9:81:ab:ed:9d:44:
18:27:32:fe:e4:43:b0:83:69:c1:3b:d3:d7:00:be:f5:57:b1:
30:8a:04:05:23:89:76:3a:9d:0e:07:77:72:f9:1f:57:ae:3b:
f9:de:16:74:4f:88:c8:39:9b:53:4c:e9:d7:11:f6:d0:cf:77:
c8:bd:6f:c5:d2:0a:10:1a:23:bf:04:8f:98:5c:7c:84:3d:ee:
99:31:72:0f:7b:aa:aa:7c:6d:5f:6c:74:9f:86:40:d2:e0:b2:
79:be:ce:c1:94:aa:d5:a5:82:11:86:d7:9c:a9:37:74:c6:a1:
88:12:b1:23:44:73:a7:12:33:80:1e:21:cb:8a:0e:69:00:d2:
d8:b7:52:dc:1a:09:f5:36:63:d6:da:41:a2:b2:ad:90:62:44:
67:d9:fa:0d:b2:12:5e:f5:57:d2:4d:1f:21:90:57:f4:7c:03:
65:9f:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:50 2024 by rpki-client on console-fra.rpki-client.org