Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Hs8iZ42cwGcflg9IvzYuT_wXjyQ.roa
File: Hs8iZ42cwGcflg9IvzYuT_wXjyQ.roa (raw, json)
Hash identifier: 29I1wfpuM3aja9Iz2zqTyOT2SWKjbxXt9R9K3NF0lH8=
Subject key identifier: 1E:CF:22:67:8D:9C:C0:67:1F:96:0F:48:BF:36:2E:4F:FC:17:8F:24
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E62D6740123663FDF2646BBA0E9A53AC9
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Hs8iZ42cwGcflg9IvzYuT_wXjyQ.roa
Signing time: Thu 21 Mar 2024 21:06:45 +0000
ROA not before: Thu 21 Mar 2024 21:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.16.0/22 maxlen: 22
46.3.16.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.18.0/24 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.24.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.32.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.35.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.3.64.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.3.68.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.3.70.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.72.0/22 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.92.0/22 maxlen: 22
46.3.92.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.94.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.148.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.151.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.232.26.0/23 maxlen: 24
46.232.26.0/24 maxlen: 24
46.232.27.0/24 maxlen: 24
46.232.28.0/22 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.232.80.0/20 maxlen: 20
46.232.80.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.232.84.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.232.91.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.232.94.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:d6:74:01:23:66:3f:df:26:46:bb:a0:e9:a5:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 21 21:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ecf22678d9cc0671f960f48bf362e4ffc178f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:f4:b1:43:e7:c8:d1:6a:93:e7:c2:9d:6b:
98:5b:ad:e1:dd:eb:dd:50:65:1d:ef:49:91:fd:90:
70:39:c0:c3:52:0a:a4:0a:e1:53:58:aa:33:b3:39:
b1:6f:4b:3a:a6:21:20:1f:1d:32:d6:96:6a:4f:e4:
47:f1:ec:b6:1a:6c:0c:84:00:b3:a5:13:8b:17:b8:
16:02:29:88:ae:8e:06:a4:59:dc:54:11:73:c9:28:
c4:2a:d2:f0:e2:0a:72:89:ef:2f:56:76:44:f1:b0:
c5:13:35:34:98:37:6f:45:2a:f0:c1:63:b7:5e:3d:
d6:ca:4b:82:ba:bf:5b:a5:38:75:83:9f:1e:47:60:
be:ad:cd:b2:42:2e:96:40:03:6e:f6:5f:15:88:1c:
86:c3:b1:69:2f:0e:21:a6:40:cf:0f:9b:c3:38:f6:
89:c1:0e:11:b0:5c:57:e5:32:94:70:20:0b:28:84:
f4:6a:93:29:ee:e0:0e:a6:69:6d:a7:1c:7c:1b:6f:
7f:99:d4:54:e1:09:57:ba:9a:e0:c6:46:0a:4d:b7:
66:16:4c:22:0a:70:b4:d5:b7:cf:8a:20:d1:39:a3:
65:79:c4:c1:1a:7c:77:e1:d6:aa:ec:9a:10:91:ba:
a8:73:76:76:c2:4e:fe:b3:ba:c3:45:00:1e:9d:44:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CF:22:67:8D:9C:C0:67:1F:96:0F:48:BF:36:2E:4F:FC:17:8F:24
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Hs8iZ42cwGcflg9IvzYuT_wXjyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0-46.3.76.255
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.26.0-46.232.47.255
46.232.80.0/20
149.126.192.0/24
149.126.195.0/24
149.126.197.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f8:c6:04:05:81:92:c3:c0:3c:bc:17:f6:aa:89:d0:9e:bd:
50:6c:0f:44:14:47:68:43:80:01:9b:97:16:c1:2f:e0:a3:90:
72:6b:fe:a6:f1:24:21:a9:e7:c7:d8:a7:29:be:d8:3e:52:ef:
9f:09:cb:2e:9c:be:a0:03:28:88:5a:df:e3:da:18:4a:d2:46:
f8:b6:96:9d:0f:58:98:d9:c6:74:b9:32:e4:1c:02:8d:7e:a2:
de:18:46:e0:57:e3:7e:a8:7c:be:33:5a:c3:3c:64:30:4d:5a:
1e:6e:d1:18:66:00:4b:89:d7:63:06:23:15:5b:7c:d8:6c:06:
81:07:70:17:41:b0:53:9b:b5:c8:fc:db:d7:c0:58:e2:6a:40:
a9:d4:7a:6f:3f:ca:bc:75:f3:69:28:ed:82:9e:23:ff:f1:61:
80:3a:91:bd:93:2e:4a:23:fc:e3:13:cf:13:4f:4b:71:81:c6:
fa:2b:67:c9:2b:ce:c4:a1:48:b0:2f:be:61:92:08:bb:5f:40:
51:3b:87:65:06:d6:ce:c5:a6:80:75:e6:f1:29:65:db:71:da:
2b:35:7d:ee:30:9f:c4:6d:d0:0a:62:1e:5c:bd:0a:68:71:63:
76:21:0a:e5:7a:b8:51:62:c7:54:48:d6:00:50:3f:24:b0:d8:
8f:ec:47:86
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAY5i1nQBI2Y/3yZGu6DppTrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMzIxMjEwNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWNmMjI2NzhkOWNjMDY3MWY5NjBmNDhiZjM2MmU0ZmZjMTc4ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqP0sUPnyNFqk+fCnWuYW63h3evd
UGUd70mR/ZBwOcDDUgqkCuFTWKozszmxb0s6piEgHx0y1pZqT+RH8ey2GmwMhACz
pROLF7gWAimIro4GpFncVBFzySjEKtLw4gpyie8vVnZE8bDFEzU0mDdvRSrwwWO3
Xj3WykuCur9bpTh1g58eR2C+rc2yQi6WQANu9l8ViByGw7FpLw4hpkDPD5vDOPaJ
wQ4RsFxX5TKUcCALKIT0apMp7uAOpmltpxx8G29/mdRU4QlXuprgxkYKTbdmFkwi
CnC01bfPiiDROaNlecTBGnx34daq7JoQkbqoc3Z2wk7+s7rDRQAenURWmQIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFB7PImeNnMBnH5YPSL82Lk/8F48kMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvSHM4aVo0MmN3R2NmbGc5SXZ6WXVUX3dYanlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHXBggrBgEFBQcBBwEB/wSBxzCBxDCBwQQCAAEwgboDBAIu
AwQDBAIuAxADBAIuAxgDBAAuAx4DBAMuAyAwDAMEBi4DQAMEAC4DTAMEAS4DVgME
Ai4DXAMEAi4DlDAMAwQALgPLAwQALgPMAwQCLgPgMAwDBAEu6BoDBAQu6CADBAQu
6FADBACVfsADBACVfsMwDAMEAJV+xQMEAJV+xjAMAwQDlX7IAwQAlX7KMAwDBAKV
fswDBACVfs4DBACVftADBACVftIDBAGVftYDBAGVfuADBACVfvYwDQYJKoZIhvcN
AQELBQADggEBAB34xgQFgZLDwDy8F/aqidCevVBsD0QUR2hDgAGblxbBL+CjkHJr
/qbxJCGp58fYpym+2D5S758Jyy6cvqADKIha3+PaGErSRvi2lp0PWJjZxnS5MuQc
Ao1+ot4YRuBX436ofL4zWsM8ZDBNWh5u0RhmAEuJ12MGIxVbfNhsBoEHcBdBsFOb
tcj829fAWOJqQKnUem8/yrx182ko7YKeI//xYYA6kb2TLkoj/OMTzxNPS3GBxvor
Z8krzsShSLAvvmGSCLtfQFE7h2UG1s7FpoB15vEpZdtx2is1fe4wn8Rt0ApiHly9
CmhxY3YhCuV6uFFix1RI1gBQPySw2I/sR4Y=
-----END CERTIFICATE-----
Generated at Mon May 6 02:26:28 2024 by rpki-client on console-fra.rpki-client.org