Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8OJofvfg9qDeCaDbjSRccaAV_fI.roa
File: 8OJofvfg9qDeCaDbjSRccaAV_fI.roa (raw, json)
Hash identifier: QkZlS6KjDY05Hta9dSL3RnmvFwvIhN8QJhGoUDChMTU=
Subject key identifier: F0:E2:68:7E:F7:E0:F6:A0:DE:09:A0:DB:8D:24:5C:71:A0:15:FD:F2
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0195441949C5EEC041C15D41E02E97867A3C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8OJofvfg9qDeCaDbjSRccaAV_fI.roa
Signing time: Wed 26 Feb 2025 21:11:02 +0000
ROA not before: Wed 26 Feb 2025 21:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.8.0/22 maxlen: 22
46.3.28.0/23 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.168.0/22 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.220.0/23 maxlen: 24
46.3.223.0/24 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.230.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/22 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.236.0/22 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:19:49:c5:ee:c0:41:c1:5d:41:e0:2e:97:86:7a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 26 21:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e2687ef7e0f6a0de09a0db8d245c71a015fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:cd:3a:07:90:82:f7:3c:3b:4f:02:90:42:
bf:48:ad:17:90:76:a7:ee:85:63:c3:d5:12:69:19:
55:27:18:62:2c:14:8c:09:18:e9:06:4c:88:55:d7:
4e:f1:98:b3:b5:d9:cf:36:33:e5:e0:7b:39:19:5e:
f3:f5:77:59:99:10:5b:a2:33:0b:a3:2f:7c:b6:72:
85:d5:f7:26:71:36:13:f3:6b:86:b1:47:fd:44:b0:
ca:2c:27:86:80:5e:a6:8c:17:c1:aa:2d:de:61:ec:
61:0e:be:a5:97:69:a6:99:b2:78:db:e6:dd:54:61:
92:33:88:bc:04:f4:2e:80:44:ae:de:55:8c:20:ee:
2f:b4:89:72:ac:55:68:8e:0b:5b:3f:b9:98:30:61:
7e:99:eb:93:a2:d1:3c:b0:e9:73:37:76:61:19:20:
2c:63:27:e4:d7:7b:ec:95:c2:9e:55:b2:b2:6f:4e:
f1:f3:53:ba:ea:73:59:fb:6e:81:ef:46:c4:99:a1:
fa:0d:51:08:e2:b2:8e:5b:62:b1:ce:f5:4f:09:50:
33:3e:be:4f:f3:4a:51:56:26:16:ec:42:a2:92:58:
8b:7f:d0:c0:7d:b6:a9:de:c7:53:35:04:eb:08:93:
f3:94:12:c6:94:43:ab:a7:4e:3b:65:0d:bb:b1:5d:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:68:7E:F7:E0:F6:A0:DE:09:A0:DB:8D:24:5C:71:A0:15:FD:F2
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8OJofvfg9qDeCaDbjSRccaAV_fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/22
46.3.28.0/23
46.3.40.0-46.3.63.255
46.3.77.0/24
46.3.84.0/24
46.3.89.0-46.3.91.255
46.3.120.0-46.3.131.255
46.3.134.0/23
46.3.156.0/23
46.3.160.0-46.3.171.255
46.3.184.0-46.3.190.255
46.3.205.0-46.3.215.255
46.3.220.0/23
46.3.223.0/24
46.3.228.0/22
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.0.0/22
46.232.16.0/22
46.232.64.0-46.232.66.255
46.232.68.0/24
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.196.0/24
149.126.198.0/24
149.126.204.0/24
149.126.208.0/24
149.126.224.0-149.126.226.255
149.126.228.0/24
149.126.231.0/24
149.126.236.0/22
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
75:6a:2d:39:a4:f1:5e:29:68:20:5d:9a:16:27:1c:b9:a2:99:
28:70:b7:ee:fa:2c:9d:d4:10:45:71:8c:59:80:2c:43:34:cc:
20:f6:9f:aa:87:49:f9:24:cc:ff:bb:73:83:81:a9:f3:ff:98:
33:13:5a:9a:85:d2:75:f8:ae:b3:a3:d4:7d:a3:a4:d3:f4:f2:
63:93:dc:24:ea:f9:c3:3f:cc:b2:e4:4a:8e:94:3f:28:e8:91:
f4:61:e5:8d:92:ec:a8:2e:bf:4e:eb:26:fb:6c:d4:8f:2b:6b:
c1:18:a8:b2:ee:12:29:be:fc:bd:1d:49:74:3f:44:23:f2:a3:
1c:4e:1e:1e:98:1b:2b:c6:b6:c8:f5:0e:93:61:7a:fe:4c:48:
12:a0:48:b5:f2:e1:0b:1c:65:9a:41:45:03:ca:fd:76:2f:ac:
44:d7:e3:2d:5e:92:5e:2d:55:97:e4:07:33:4e:5a:9a:ff:c2:
af:72:64:ee:47:de:e1:25:e8:9e:9e:7e:2a:6d:73:3f:7a:c8:
d9:1f:5d:40:ba:24:2a:dc:be:41:45:5c:68:6b:5c:19:77:55:
56:6d:f7:be:9c:e8:76:24:fe:0f:9a:63:03:ea:21:ef:0f:c7:
cc:c2:0f:d4:96:49:d8:fe:ce:e7:40:89:dc:70:fc:0d:75:de:
81:39:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:59 2025 by rpki-client