Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/sxBy-BeWt75olOKSFVSnN7Sq14w.roa
File: sxBy-BeWt75olOKSFVSnN7Sq14w.roa (raw, json)
Hash identifier: QO+xIvW+hzjbYJZiLEcEiO2Z0P1VvzOH6Gpyd0Gh6S4=
Subject key identifier: B3:10:72:F8:17:96:B7:BE:68:94:E2:92:15:54:A7:37:B4:AA:D7:8C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01963B3684DD232C1C213D91CC7E5B0A67A2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/sxBy-BeWt75olOKSFVSnN7Sq14w.roa
Signing time: Tue 15 Apr 2025 20:49:10 +0000
ROA not before: Tue 15 Apr 2025 20:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 46.3.190.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:36:84:dd:23:2c:1c:21:3d:91:cc:7e:5b:0a:67:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 15 20:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b31072f81796b7be6894e2921554a737b4aad78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:72:3a:19:f7:9e:d2:74:ff:34:19:ad:f1:
6f:e9:e2:1c:dc:ee:84:56:88:f5:2f:89:ec:34:b6:
b7:ca:55:19:71:0d:f9:21:e2:27:38:c0:de:65:d2:
f1:63:06:e6:69:b3:5a:2b:6e:98:7d:5f:cf:ae:3d:
7b:0b:de:47:31:9b:ca:c4:fb:9e:f3:1e:c5:d1:03:
8a:15:0a:1a:70:63:e7:fc:83:72:04:78:d4:b2:c0:
c5:4d:b6:71:72:d3:39:a8:0f:e5:25:08:78:c1:82:
c1:7a:d1:00:ed:52:99:ff:16:e8:7e:36:af:ef:56:
1b:35:5a:54:35:0c:14:24:82:df:ee:1e:3b:22:6f:
06:7f:fd:f9:3b:ea:ea:2b:99:6c:ab:6b:e6:9a:eb:
2e:fc:ef:63:2c:cb:85:ae:6f:1d:4b:96:0d:33:b3:
c6:a9:2a:74:90:a9:1b:ea:77:74:90:0f:3a:16:81:
42:a9:54:88:b5:74:07:f9:e4:77:21:c6:4a:99:70:
b4:80:8c:42:9f:11:ab:b2:26:6c:9d:87:18:c9:63:
da:23:ab:63:db:bf:4c:ab:cc:14:c8:3a:c7:0a:bc:
1c:5d:df:51:95:67:8d:02:2f:7e:e4:45:54:ea:1c:
72:45:b9:16:0d:b4:a5:b6:b4:b5:a8:5c:15:20:d5:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:10:72:F8:17:96:B7:BE:68:94:E2:92:15:54:A7:37:B4:AA:D7:8C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/sxBy-BeWt75olOKSFVSnN7Sq14w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.190.0/24
46.3.201.0/24
46.3.220.0/23
46.3.230.0/23
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.69.0/24
46.232.71.0/24
149.126.226.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a8:3f:79:0b:60:6f:c5:20:93:66:32:3e:e4:92:9a:86:c9:
17:cf:b7:1d:aa:e7:e7:87:13:90:13:7e:e1:d3:de:e6:14:2e:
24:b6:c2:fb:87:d3:c0:f2:fd:70:8b:7f:e3:95:c0:bc:be:2e:
02:7f:1f:a3:f3:da:97:ad:86:10:cb:40:16:75:ee:8a:b5:eb:
75:b5:71:a3:34:37:33:fa:eb:9b:73:d5:66:d3:b1:7e:c4:74:
01:a6:fe:00:20:08:4f:51:6d:00:d7:91:1a:98:ea:0a:24:2d:
72:79:4e:19:46:8b:af:8a:16:a0:a9:4a:99:b6:50:5c:79:62:
10:42:e1:fb:9c:eb:a1:61:07:a2:1b:40:8b:0f:78:eb:1a:00:
4e:c2:27:63:c2:72:3e:6c:81:11:05:22:c8:ed:dd:51:ce:02:
a4:f1:83:a4:58:1b:3c:3b:53:b8:57:04:77:cb:84:5f:65:d7:
1b:f6:5a:88:39:51:f4:fd:b1:b7:e4:3b:ce:94:c0:64:67:f9:
8d:bf:1c:91:29:b9:09:00:97:1f:a2:42:e2:a8:9e:59:3a:1e:
17:c9:cc:d5:23:13:18:00:d4:9d:75:83:5c:e0:f3:a1:5c:68:
f1:1a:0a:08:a4:04:db:35:7b:9a:26:cf:cc:31:23:ad:85:bc:
06:b1:af:05
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZY7NoTdIywcIT2RzH5bCmeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNDE1MjA0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzEwNzJmODE3OTZiN2JlNjg5NGUyOTIxNTU0YTczN2I0YWFkNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw99yOhn3ntJ0/zQZrfFv6eIc3O6E
Voj1L4nsNLa3ylUZcQ35IeInOMDeZdLxYwbmabNaK26YfV/Prj17C95HMZvKxPue
8x7F0QOKFQoacGPn/INyBHjUssDFTbZxctM5qA/lJQh4wYLBetEA7VKZ/xbofjav
71YbNVpUNQwUJILf7h47Im8Gf/35O+rqK5lsq2vmmusu/O9jLMuFrm8dS5YNM7PG
qSp0kKkb6nd0kA86FoFCqVSItXQH+eR3IcZKmXC0gIxCnxGrsiZsnYcYyWPaI6tj
279Mq8wUyDrHCrwcXd9RlWeNAi9+5EVU6hxyRbkWDbSltrS1qFwVINXHNwIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFLMQcvgXlre+aJTikhVUpze0qteMMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvc3hCeS1CZVd0NzVvbE9LU0ZWU25ON1NxMTR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBdBAIAATBXAwQALgO+AwQA
LgPJAwQBLgPcAwQBLgPmAwQALgP4MAsDBAAuA/sDAwIuAAMEAC7oRQMEAC7oRwME
AJV+4gMEAZV+9DAMAwQAlX73AwQAlX76AwQAlX78MA0GCSqGSIb3DQEBCwUAA4IB
AQCGqD95C2BvxSCTZjI+5JKahskXz7cdqufnhxOQE37h097mFC4ktsL7h9PA8v1w
i3/jlcC8vi4Cfx+j89qXrYYQy0AWde6Ktet1tXGjNDcz+uubc9Vm07F+xHQBpv4A
IAhPUW0A15EamOoKJC1yeU4ZRouvihagqUqZtlBceWIQQuH7nOuhYQeiG0CLD3jr
GgBOwidjwnI+bIERBSLI7d1RzgKk8YOkWBs8O1O4VwR3y4RfZdcb9lqIOVH0/bG3
5DvOlMBkZ/mNvxyRKbkJAJcfokLiqJ5ZOh4XyczVIxMYANSddYNc4POhXGjxGgoI
pATbNXuaJs/MMSOthbwGsa8F
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:32 2025 by rpki-client