Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5LnW6sHnYr8bM9HDaxCHN6I_UHI.roa
File: 5LnW6sHnYr8bM9HDaxCHN6I_UHI.roa (raw, json)
Hash identifier: f5Kr0kp4iVfBLUjQez6ujmB9x094Q/FEiZ2qoZduXNk=
Subject key identifier: E4:B9:D6:EA:C1:E7:62:BF:1B:33:D1:C3:6B:10:87:37:A2:3F:50:72
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01972C188A4DFB3A8B2CC740EEC061777BAB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5LnW6sHnYr8bM9HDaxCHN6I_UHI.roa
Signing time: Sun 01 Jun 2025 15:24:55 +0000
ROA not before: Sun 01 Jun 2025 15:24:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.8.0/23 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.80.0/21 maxlen: 21
46.3.84.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:18:8a:4d:fb:3a:8b:2c:c7:40:ee:c0:61:77:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 1 15:24:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4b9d6eac1e762bf1b33d1c36b108737a23f5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:47:a4:5e:0a:ea:83:33:12:30:74:0d:ab:
6c:cf:73:7e:31:c1:57:4a:16:8c:5c:d4:aa:52:a9:
16:b4:7d:09:05:bb:a4:ed:19:7a:aa:5b:40:22:41:
53:31:a1:70:cd:b0:06:43:01:48:6d:81:54:af:9d:
6c:a1:3a:ef:43:b2:43:71:7f:e0:a2:3d:e5:b4:bf:
0e:6d:11:6a:2c:dc:a3:6e:d4:0c:67:50:88:2a:d0:
41:0e:ea:87:48:2c:3a:9c:aa:ca:b9:73:8a:b4:b4:
c8:c1:64:1c:05:cd:8f:ea:ee:13:ac:7e:26:2f:d8:
81:50:46:be:a6:c0:6f:b3:24:8d:75:4a:fd:95:59:
3b:2b:b2:ec:5c:f3:45:96:0a:1b:37:e7:5e:f6:8f:
8c:e3:f0:7c:c3:f7:7d:e1:c2:fb:2c:cb:ba:99:94:
02:33:3e:86:71:dc:a8:6d:2d:5b:f5:5c:97:c2:43:
6e:83:9c:1a:27:6b:6e:19:65:dd:f5:33:99:a3:6e:
38:8e:1b:4e:37:77:4e:ce:ac:0e:76:2f:bb:67:28:
f4:c4:b4:c6:75:cc:25:9b:cc:da:21:55:a0:8a:a5:
ff:f3:ae:f1:f4:63:b5:a4:2c:14:5e:fc:f4:86:48:
c1:74:27:57:d4:23:47:56:c8:fa:40:6c:93:df:ff:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:D6:EA:C1:E7:62:BF:1B:33:D1:C3:6B:10:87:37:A2:3F:50:72
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5LnW6sHnYr8bM9HDaxCHN6I_UHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/23
46.3.48.0/20
46.3.77.0/24
46.3.80.0/21
46.3.89.0-46.3.91.255
46.3.120.0-46.3.131.255
46.3.134.0/23
46.3.156.0/23
46.3.160.0/21
46.3.184.0/21
46.3.205.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.232.0.0/22
46.232.18.0/23
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
44:89:a8:ee:73:38:ac:07:e5:ed:f6:8e:4c:b6:db:37:f8:5a:
7d:9f:cb:b9:19:2d:30:d8:78:16:4c:da:49:cf:cf:ed:11:6f:
dc:9b:e2:bf:f2:a4:72:08:7b:0e:16:2c:7b:26:b4:5f:9d:7a:
dd:37:d1:76:10:5b:39:08:a2:75:c0:e2:65:23:1b:0c:fc:28:
42:9b:00:1f:d9:1a:fd:a0:2f:3d:10:0e:2c:91:2e:45:fe:a5:
61:6d:37:8d:06:18:0d:21:56:c3:91:3a:36:55:94:d5:24:d4:
a1:ea:fb:f4:ac:2c:0f:43:53:27:34:26:46:6f:80:aa:3d:98:
f0:3b:6b:82:a6:97:7c:51:f8:e7:18:9f:0f:b9:dd:4e:b8:32:
e2:d8:eb:6d:1b:b9:66:b5:3d:72:39:0d:fa:3e:e1:12:a8:5a:
45:24:56:64:aa:44:b1:60:e2:04:ee:eb:7e:db:0c:ca:b6:ff:
d3:37:cf:fc:83:12:a8:91:f4:ea:dc:32:8e:67:51:59:f7:5b:
e8:ae:c8:df:4b:38:2f:25:78:19:28:74:1e:0e:44:03:8a:43:
16:ab:e6:4a:56:92:27:a8:d9:15:b6:c2:32:e6:45:03:6d:7d:
98:10:1a:5a:f6:ba:ff:1b:15:b7:be:20:3f:99:19:25:29:f6:
19:d1:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 09:30:42 2025 by rpki-client