Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LGcTnGsqoqpgRHaHEQEkcanOvrM.roa
File: LGcTnGsqoqpgRHaHEQEkcanOvrM.roa (raw, json)
Hash identifier: HwIfCw7kSyEMWIvozXW8fb6aLnP7X4AYCKnlQWHOECg=
Subject key identifier: 2C:67:13:9C:6B:2A:A2:AA:60:44:76:87:11:01:24:71:A9:CE:BE:B3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019302D6A3D1681E5B1C397F05FCDB8833E3
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LGcTnGsqoqpgRHaHEQEkcanOvrM.roa
Signing time: Wed 06 Nov 2024 18:57:21 +0000
ROA not before: Wed 06 Nov 2024 18:57:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.8.0/23 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.80.0/21 maxlen: 21
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:d6:a3:d1:68:1e:5b:1c:39:7f:05:fc:db:88:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 6 18:57:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c67139c6b2aa2aa6044768711012471a9cebeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:dc:4c:ed:66:41:5a:d8:47:f7:47:15:c1:
16:a0:1d:54:4c:81:33:0f:46:1f:a5:9e:ec:c4:58:
ac:73:ae:92:8f:5d:89:b2:b4:1f:fb:db:ee:ef:f1:
d2:0c:71:b5:d3:d5:c3:88:ef:36:8f:a7:b1:5f:af:
56:dd:cd:01:f1:f7:47:4d:b5:f7:af:8c:d1:0a:67:
b3:02:2e:53:a3:fb:7d:b0:40:8c:b1:14:1a:cc:ca:
1f:4c:d2:82:01:73:91:32:79:a2:84:1f:53:ec:22:
8e:55:97:24:27:8c:74:42:15:38:0f:05:3c:b6:59:
d4:47:0b:0a:02:15:92:3b:0f:d3:31:6b:60:06:3f:
98:6d:0f:7c:f5:33:1c:8b:1e:ad:1f:1d:31:7e:86:
51:e8:e6:83:bd:7c:9f:da:b7:2a:72:df:90:64:10:
46:65:f6:f8:7c:1d:2f:86:25:20:34:19:a6:36:ec:
c1:30:c6:3b:81:1c:63:e1:48:25:1d:4e:95:16:3a:
44:3a:2e:b4:7e:2c:cc:2a:99:b7:e4:a1:19:d1:fb:
d1:dc:7b:39:0e:24:5c:72:bb:85:9c:e0:c0:9c:42:
0b:a7:cf:28:c4:fd:3b:05:eb:1c:58:3a:d0:89:c1:
d4:6c:95:ed:aa:b8:a8:24:9a:51:20:5d:83:08:fd:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:13:9C:6B:2A:A2:AA:60:44:76:87:11:01:24:71:A9:CE:BE:B3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LGcTnGsqoqpgRHaHEQEkcanOvrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/23
46.3.32.0/20
46.3.80.0/21
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/23
46.3.156.0/23
46.3.160.0/22
46.3.184.0/21
46.3.206.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.232.0.0/22
46.232.18.0/23
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
02:41:02:7a:7b:b7:17:d2:54:43:b7:f3:bf:ac:ff:eb:c1:9a:
65:96:ba:cf:57:74:ec:d7:f3:af:43:4d:f8:6f:35:59:af:7e:
a0:15:4a:bd:28:db:49:bd:b7:a6:f3:b1:66:10:57:19:ad:44:
5c:64:91:4a:fc:51:d3:8e:4b:9e:f3:61:3d:cf:3b:72:20:f3:
2e:a3:5d:b2:71:9b:1c:4c:76:e7:4d:b5:60:0d:31:d7:a1:01:
c5:0c:c9:02:aa:fe:b0:62:c7:f3:80:d0:c3:b6:93:f7:b9:36:
36:78:63:2e:e5:94:13:52:55:26:90:73:97:38:7f:e9:34:3e:
f0:0c:ae:2d:f3:4c:63:e2:d9:a2:02:9b:3a:8f:aa:36:09:1d:
32:31:a2:59:82:65:47:8e:00:61:57:07:b7:9e:45:be:c0:5d:
2e:b6:34:ca:74:23:fa:e5:8d:3f:aa:2e:80:82:4b:83:68:fc:
27:f3:cf:80:0e:30:4f:0e:d7:8e:74:c7:35:af:76:cf:01:e4:
8a:a3:75:d8:d5:92:53:6e:e3:c0:96:a8:ce:ee:2d:ea:9e:b9:
6b:f5:a9:41:52:95:44:33:f7:26:c6:49:98:d9:6d:e2:01:8b:
96:60:fc:43:df:a6:ec:d5:2e:28:08:6f:92:43:51:89:68:14:
6b:f5:8b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:07 2024 by rpki-client on console-ams.rpki-client.org