Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mVeTvPVLg4tbylUmH262tdp6VfE.roa
File: mVeTvPVLg4tbylUmH262tdp6VfE.roa (raw, json)
Hash identifier: 8BIkQY+3ebYYm+8sNzl5duXRT7T+PPsdI1OCiglJIoc=
Subject key identifier: 99:57:93:BC:F5:4B:83:8B:5B:CA:55:26:1F:6E:B6:B5:DA:7A:55:F1
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018ED1E592C224CF94571A9545AA5D8B73BC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mVeTvPVLg4tbylUmH262tdp6VfE.roa
Signing time: Fri 12 Apr 2024 10:41:07 +0000
ROA not before: Fri 12 Apr 2024 10:41:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.8.0/23 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.80.0/21 maxlen: 21
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.64.0/21 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:e5:92:c2:24:cf:94:57:1a:95:45:aa:5d:8b:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 12 10:41:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995793bcf54b838b5bca55261f6eb6b5da7a55f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:11:28:3f:41:19:1e:81:5e:23:64:70:df:
14:c1:0f:b2:c2:f2:9f:66:aa:ba:71:c3:fa:42:5b:
2d:84:52:47:a0:73:eb:91:9d:49:18:37:4a:17:4d:
1f:7f:9f:c7:6a:ef:bf:17:75:44:c0:d5:02:92:ac:
11:93:ad:e6:4a:65:fe:10:c5:87:90:93:83:2f:96:
79:cf:1b:ca:18:cd:b5:1c:3e:6f:67:24:f6:62:c8:
11:0f:8f:f9:1c:68:b6:3a:89:38:2d:4c:cc:bb:16:
b2:bb:14:76:5f:df:94:c7:2b:4d:87:ea:9c:3b:05:
15:54:56:b5:8e:90:c9:35:2b:6a:c2:3f:90:eb:b6:
d9:ae:fa:8b:7b:a7:55:a2:c6:e2:a5:2e:17:f5:46:
68:57:aa:56:14:f3:0e:b3:62:48:29:86:2e:ba:54:
3a:d6:1a:3d:1f:d2:bf:74:37:07:bf:fd:64:05:08:
74:45:c2:95:23:25:c0:47:c9:9c:4e:17:28:3e:0e:
2a:1c:aa:86:ea:32:4e:5a:b1:e8:68:a8:df:58:86:
53:a7:f8:00:9a:08:9c:ae:b4:2f:74:84:d0:3b:35:
1f:f7:d1:36:a2:57:af:dd:03:89:cf:b8:87:b3:27:
e0:aa:c5:82:f0:54:b1:a1:fc:10:43:b8:7b:9b:92:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:93:BC:F5:4B:83:8B:5B:CA:55:26:1F:6E:B6:B5:DA:7A:55:F1
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mVeTvPVLg4tbylUmH262tdp6VfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/23
46.3.32.0/20
46.3.80.0/21
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/23
46.3.156.0/23
46.3.160.0/22
46.3.184.0/21
46.3.206.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.232.0.0/22
46.232.18.0/23
46.232.64.0/21
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
8d:8b:77:5a:76:bd:78:2f:89:3c:98:68:ad:05:0b:30:5b:51:
20:7a:90:e2:f0:5f:72:1e:ee:6a:d6:06:5a:5c:e4:06:89:5c:
fb:d9:2c:37:b3:2e:0e:d5:a5:dc:30:ea:92:5b:64:8f:81:98:
6b:b7:b4:a2:c9:4b:22:5d:4e:9d:e0:fc:fa:9c:9a:48:28:f3:
12:3b:44:83:96:32:d9:5c:e7:d5:89:9d:38:19:91:10:69:7c:
76:94:eb:0c:43:89:d9:54:5c:73:b8:e2:b8:da:e0:08:c8:b4:
d1:ba:ca:1f:3d:28:a1:d9:c9:27:da:45:48:51:a8:79:35:54:
d4:76:a0:23:7c:02:b4:42:83:1d:06:47:79:cb:9d:f5:4b:41:
27:b4:d4:cb:f8:6e:51:8e:f4:b8:e3:60:b3:0b:dd:69:5d:a6:
bd:5c:ba:7f:6c:84:c4:66:25:ea:be:05:54:3f:20:8f:57:91:
7b:be:22:c5:3a:d5:84:3f:2e:97:4b:c4:89:2e:98:04:07:10:
57:9a:57:19:21:4e:6d:f0:51:5b:be:4f:73:75:8d:2e:23:ba:
94:ad:db:de:32:f9:40:d3:a0:fd:91:1b:2a:cc:e6:7d:ec:de:
fb:c1:d6:23:04:2a:7f:10:7c:ea:25:79:d7:57:8e:fe:4d:4b:
5c:c0:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:45:35 2024 by rpki-client on console-fra.rpki-client.org