Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/06wewNtmZ5rmGss_3sAsAXJWOiw.roa
File: 06wewNtmZ5rmGss_3sAsAXJWOiw.roa (raw, json)
Hash identifier: TbL5rBVGXW6mpzS9vo7t1jXSsqbdbhAE3BMBP6/AznI=
Subject key identifier: D3:AC:1E:C0:DB:66:67:9A:E6:1A:CB:3F:DE:C0:2C:01:72:56:3A:2C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01909DE3DE8AA6ED5CD9C5FC19D297EBAE6B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/06wewNtmZ5rmGss_3sAsAXJWOiw.roa
Signing time: Wed 10 Jul 2024 18:24:34 +0000
ROA not before: Wed 10 Jul 2024 18:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.16.0/22 maxlen: 22
46.3.16.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.18.0/24 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.24.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.32.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.35.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.3.64.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.3.68.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.3.70.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.72.0/22 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.92.0/22 maxlen: 22
46.3.92.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.94.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.148.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.151.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.232.26.0/23 maxlen: 24
46.232.26.0/24 maxlen: 24
46.232.27.0/24 maxlen: 24
46.232.28.0/22 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.232.80.0/20 maxlen: 20
46.232.80.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.232.84.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.232.91.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.232.94.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:e3:de:8a:a6:ed:5c:d9:c5:fc:19:d2:97:eb:ae:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 10 18:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3ac1ec0db66679ae61acb3fdec02c0172563a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:76:13:d4:91:e7:b9:b3:ff:94:7d:32:49:
bc:e8:25:20:0b:ac:3b:c8:6f:69:97:5a:9e:56:c5:
3a:3b:46:dd:61:9a:32:8a:c8:28:74:b7:27:7b:17:
8e:15:68:f7:31:68:67:76:80:ab:27:c1:fd:b1:31:
8d:16:75:0e:8e:ea:e2:7f:7c:04:78:ec:02:17:05:
04:42:f9:af:f3:de:0c:0a:d7:9e:e8:b8:4d:3f:62:
6f:1c:8c:64:aa:93:01:07:f6:0e:54:b2:c7:eb:4a:
05:4f:2a:fb:5d:80:05:ee:94:9a:b6:25:c7:21:b5:
03:bf:6d:15:e5:b8:92:09:57:0a:15:39:64:86:4c:
d3:ad:05:17:77:49:7d:84:28:d8:b1:63:74:71:69:
a4:77:28:6c:98:fa:74:ce:e7:e0:0e:1a:2a:65:31:
81:12:be:e4:d6:d0:a3:b3:a8:02:27:bb:79:11:31:
6f:9e:9f:e7:15:12:84:34:da:7e:e1:e1:48:c8:f4:
ee:b4:5a:a9:74:f3:18:f8:68:33:fc:81:d4:81:7b:
44:bf:f5:45:d0:e9:cf:b1:72:95:64:97:58:65:04:
fb:25:e0:b9:3a:0d:a0:fd:40:a1:e8:43:a5:4a:0d:
fd:ee:1b:a4:43:0b:f8:12:86:d4:f5:dc:8c:63:7d:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AC:1E:C0:DB:66:67:9A:E6:1A:CB:3F:DE:C0:2C:01:72:56:3A:2C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/06wewNtmZ5rmGss_3sAsAXJWOiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0-46.3.76.255
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.26.0-46.232.47.255
46.232.80.0/20
149.126.192.0/24
149.126.197.0/24
149.126.200.0/24
149.126.206.0/24
149.126.215.0/24
149.126.224.0/24
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cd:cf:5f:37:77:be:d3:a2:85:ac:d5:f8:52:af:5a:2b:45:
1b:76:02:63:ab:1a:c6:41:bd:50:61:d7:4f:d0:f7:d6:24:0e:
dd:ee:fe:9f:13:68:6a:b1:54:1f:1f:70:04:d4:c6:2d:c9:fd:
29:e5:4c:2b:83:bc:9e:57:54:c4:2a:16:b5:51:b8:b8:39:b6:
3d:b7:12:f6:51:2e:73:39:c9:2f:40:32:c9:cd:82:50:ef:53:
4e:6e:27:4d:52:db:be:f4:4d:b4:46:87:1c:56:4c:b8:55:78:
06:4d:92:a3:cf:3f:4b:bd:90:9b:3f:9c:49:7e:94:14:5b:4e:
13:8f:c3:ce:30:89:dc:66:e6:33:27:b3:ec:4d:23:ef:be:0c:
ac:c2:9e:16:75:33:d5:e7:51:fb:c8:a5:37:91:04:f9:40:f6:
e4:3e:72:53:04:b7:df:67:10:0b:28:13:a0:89:55:0c:e0:d6:
3e:e7:3b:8f:f7:2c:ea:0d:af:b8:77:20:49:6b:36:09:a6:71:
ad:a4:c3:66:84:d5:bc:66:c0:f0:3e:06:2b:87:e9:f5:08:7b:
d7:04:41:6c:9b:06:81:77:db:ed:ff:e1:58:c6:43:12:a3:ea:
f1:1d:5a:6b:e9:83:22:01:56:99:11:cf:76:2a:40:57:82:34:
0c:4f:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:33:11 2024 by rpki-client on console-ams.rpki-client.org