Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WL_rjlLzMuNG_78EFqiKic-gSm8.roa
File: WL_rjlLzMuNG_78EFqiKic-gSm8.roa (raw, json)
Hash identifier: uDkNpmrA22S8gXCC4BBS4xsn++b5s8VSp3iEpCUcT28=
Subject key identifier: 58:BF:EB:8E:52:F3:32:E3:46:FF:BF:04:16:A8:8A:89:CF:A0:4A:6F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E62CC60B272D127535EE3BFA3395BD0F6
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WL_rjlLzMuNG_78EFqiKic-gSm8.roa
Signing time: Thu 21 Mar 2024 20:55:45 +0000
ROA not before: Thu 21 Mar 2024 20:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 46.3.160.0/22 maxlen: 22
46.3.201.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.216.0/22 maxlen: 22
46.3.222.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.229.0/24 maxlen: 24
149.126.230.0/24 maxlen: 24
149.126.243.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:cc:60:b2:72:d1:27:53:5e:e3:bf:a3:39:5b:d0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 21 20:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58bfeb8e52f332e346ffbf0416a88a89cfa04a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:27:e0:60:9b:89:34:bc:9f:a9:15:88:20:
76:43:dc:b9:77:b7:c9:42:a9:c8:eb:27:e2:e9:f4:
9d:b6:25:e1:12:90:96:c5:64:33:a9:c7:96:af:cc:
f2:29:25:a2:6a:87:ef:88:1d:34:0f:ed:3c:29:26:
7b:23:f9:ae:ae:23:40:07:8a:45:b6:f3:d1:2c:98:
2b:62:6e:86:52:03:f6:e6:95:58:30:fd:bf:2d:ce:
fc:75:43:91:1a:76:86:83:ca:13:70:c5:f8:33:8d:
f2:3c:e8:f2:34:2d:b0:72:82:9b:f1:9c:7b:35:5b:
10:94:26:ce:00:7c:f6:fb:d6:a6:81:fa:43:42:94:
6d:d3:d7:b3:68:f1:0d:e5:08:53:36:a2:9c:33:36:
80:8b:55:d4:64:dd:5f:15:85:dc:ef:a9:c9:57:7e:
34:8c:54:50:1d:c8:41:de:1d:d0:81:f7:45:44:dd:
93:1f:79:81:e8:c4:f6:7a:81:cd:ab:af:a8:d1:b2:
1f:3d:d8:94:bd:3b:f6:b4:24:9b:53:fb:94:cb:31:
b5:91:a2:20:99:85:48:a0:fd:a9:fa:f2:88:e3:25:
a5:51:1e:31:fb:e5:fd:ff:ae:63:ca:12:92:ff:49:
6f:eb:64:ad:fc:83:7d:63:1c:ee:96:c3:96:4f:43:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:EB:8E:52:F3:32:E3:46:FF:BF:04:16:A8:8A:89:CF:A0:4A:6F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WL_rjlLzMuNG_78EFqiKic-gSm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.160.0/22
46.3.201.0/24
46.3.205.0/24
46.3.216.0/22
46.3.222.0/24
46.3.248.0/24
46.3.251.0/24
46.3.253.0-46.3.255.255
149.126.226.0/24
149.126.229.0-149.126.230.255
149.126.243.0-149.126.245.255
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dc:0c:f1:c0:0e:a1:a1:89:6d:7b:1c:22:eb:4c:52:5f:27:
32:a3:3e:15:d3:cd:03:47:2c:38:53:b9:bb:b4:bd:00:3c:2b:
5e:a2:0a:3e:8a:35:7d:a5:14:7e:6e:7d:5a:61:20:3c:48:9e:
77:cb:0f:5b:5e:73:a7:3e:93:a7:dc:1a:fc:43:0c:92:85:62:
73:3a:95:71:98:38:01:33:2b:8c:c7:c3:26:9f:77:02:9e:f7:
ae:4d:d8:7e:ed:bb:e8:0f:c8:5d:4e:3e:c7:d1:a5:53:25:c6:
02:26:87:1f:8c:26:14:84:67:c3:7e:42:9a:c2:a7:de:71:b9:
7b:81:88:e3:16:ec:f6:7d:1d:92:11:97:9b:b4:c0:0a:d7:80:
da:2b:2e:5c:f7:65:05:88:28:88:7d:ba:c4:84:00:7a:bf:44:
74:b8:da:13:d3:83:34:87:d4:38:5e:9a:5c:f3:cb:cd:41:d0:
a7:1e:03:e4:24:25:16:d7:15:12:c5:58:f0:2f:a2:71:da:0f:
1c:3d:16:77:3a:db:56:ac:a8:86:2b:48:63:43:ff:de:7e:ec:
c2:4b:d7:d6:56:c0:96:9c:34:e7:c0:7f:4e:02:40:35:69:1e:
dc:ac:8f:64:27:77:31:62:6d:d7:8e:86:28:a8:22:6d:fc:4f:
27:b3:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:50:57 2024 by rpki-client on console-ams.rpki-client.org