Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Xm93Xt9s6GgQrhdt1oGX9a_c02g.roa
File: Xm93Xt9s6GgQrhdt1oGX9a_c02g.roa (raw, json)
Hash identifier: AenD1w5Z+AoXE1w2dSCeeMMayVZMt96KDGojZtVqzg0=
Subject key identifier: 5E:6F:77:5E:DF:6C:E8:68:10:AE:17:6D:D6:81:97:F5:AF:DC:D3:68
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01965BE3B091E02066513FF40C05A023E1BA
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Xm93Xt9s6GgQrhdt1oGX9a_c02g.roa
Signing time: Tue 22 Apr 2025 05:06:10 +0000
ROA not before: Tue 22 Apr 2025 05:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.0.0/22 maxlen: 24
46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.176.0/21 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:e3:b0:91:e0:20:66:51:3f:f4:0c:05:a0:23:e1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 22 05:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e6f775edf6ce86810ae176dd68197f5afdcd368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:f2:67:f4:55:3a:b7:1b:8c:0e:66:04:a1:
e0:6c:12:c2:c4:9b:01:7b:cc:dd:39:e4:53:27:f3:
a1:0b:99:38:3f:25:8d:27:2c:00:e7:1a:42:82:7e:
cf:bf:9d:c8:02:a6:be:a4:ed:1e:cc:0e:63:34:78:
05:ef:cd:d0:70:17:53:8d:28:59:cb:3c:f4:2b:ca:
23:2f:d2:4d:15:47:2b:f5:51:6e:1e:38:21:32:71:
58:c4:9c:fa:82:61:bc:84:9a:27:4c:96:38:1a:cd:
3d:bc:db:cc:49:b9:db:de:a6:38:d8:dd:4f:c7:92:
83:9e:17:59:a6:11:f1:40:c0:7e:25:32:ad:b4:52:
46:53:77:aa:f9:c0:f2:0a:79:c9:c8:5d:f2:21:e8:
02:e4:c2:c0:9c:e9:da:78:e3:2b:14:da:02:c6:d1:
c6:d4:02:d4:93:d5:48:be:26:20:b4:d9:e1:07:6f:
24:40:84:88:d0:82:8e:88:28:6c:ef:38:13:ad:a0:
77:f4:7b:a3:d8:bf:1d:db:cd:07:8c:5d:cd:72:de:
61:be:2b:b8:33:15:a8:33:e6:61:80:d7:57:db:21:
2e:b6:a2:87:0f:84:e9:30:b8:27:21:26:18:fa:ad:
d0:15:47:a8:9e:7a:5a:c8:73:4d:b2:82:3c:ee:55:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6F:77:5E:DF:6C:E8:68:10:AE:17:6D:D6:81:97:F5:AF:DC:D3:68
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Xm93Xt9s6GgQrhdt1oGX9a_c02g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.10.0/23
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.116.0/24
46.3.135.0-46.3.139.255
46.3.144.0/20
46.3.164.0/22
46.3.176.0/21
46.3.205.0/24
46.3.232.0/22
46.3.238.0/23
46.3.245.0/24
46.3.247.0/24
46.3.249.0/24
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
37:0b:22:88:e6:61:d4:ee:a6:6d:89:20:f6:5e:30:42:bb:3d:
4e:8f:09:1c:4c:5c:b3:40:ca:f1:2d:4c:ff:2a:53:40:a6:6f:
59:d4:9a:6d:3f:03:16:52:55:4e:11:60:43:96:c8:14:95:99:
49:9e:85:a0:72:54:ec:2c:39:93:93:15:96:7b:3f:59:01:8b:
67:8c:d2:fe:bb:cb:aa:4c:b0:bf:ac:ed:71:35:14:94:09:b1:
23:55:cb:7a:b6:dc:02:e2:a5:62:97:39:d6:60:6f:72:c1:59:
25:09:74:b2:fb:4f:1f:5e:90:1a:bf:da:66:09:e8:27:99:5d:
46:ef:f2:57:62:db:a4:ed:cc:03:6c:42:fa:77:79:28:73:7e:
7f:be:3e:5e:00:2c:93:f6:2a:8a:15:dd:a2:cb:c0:5a:e1:f6:
43:5d:05:b3:a9:e5:1f:9b:a5:fe:3f:eb:b0:f1:bc:d7:88:f0:
bc:9c:24:d9:36:fe:db:ba:f3:27:3b:9f:ae:0f:c7:72:55:34:
40:ff:62:94:d1:90:dc:c0:8a:1d:09:38:27:a7:9e:f0:d3:b4:
6c:19:c5:eb:64:31:38:6c:68:4c:e2:73:ea:d5:7d:b6:03:fe:
88:5d:c0:66:66:41:0f:ff:9f:49:a3:43:d5:e5:66:de:bf:64:
c4:85:fc:de
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZZb47CR4CBmUT/0DAWgI+G6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNDIyMDUwNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTZmNzc1ZWRmNmNlODY4MTBhZTE3NmRkNjgxOTdmNWFmZGNkMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5jyZ/RVOrcbjA5mBKHgbBLCxJsB
e8zdOeRTJ/OhC5k4PyWNJywA5xpCgn7Pv53IAqa+pO0ezA5jNHgF783QcBdTjShZ
yzz0K8ojL9JNFUcr9VFuHjghMnFYxJz6gmG8hJonTJY4Gs09vNvMSbnb3qY42N1P
x5KDnhdZphHxQMB+JTKttFJGU3eq+cDyCnnJyF3yIegC5MLAnOnaeOMrFNoCxtHG
1ALUk9VIviYgtNnhB28kQISI0IKOiChs7zgTraB39Huj2L8d280HjF3Nct5hviu4
MxWoM+ZhgNdX2yEutqKHD4TpMLgnISYY+q3QFUeonnpayHNNsoI87lXdOwIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFF5vd17fbOhoEK4XbdaBl/Wv3NNoMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvWG05M1h0OXM2R2dRcmhkdDFvR1g5YV9jMDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAIu
AwADBAEuAwoDBAIuAxQDBAAuAx8DBAQuAzADBAIuA0wwDAMEAi4DVAMEAC4DWAME
AC4DdDAMAwQALgOHAwQCLgOIAwQELgOQAwQCLgOkAwQDLgOwAwQALgPNAwQCLgPo
AwQBLgPuAwQALgP1AwQALgP3AwQALgP5AwQHLugAAwQEUPOAAwQGlX7AMA0GCSqG
SIb3DQEBCwUAA4IBAQA3CyKI5mHU7qZtiSD2XjBCuz1OjwkcTFyzQMrxLUz/KlNA
pm9Z1JptPwMWUlVOEWBDlsgUlZlJnoWgclTsLDmTkxWWez9ZAYtnjNL+u8uqTLC/
rO1xNRSUCbEjVct6ttwC4qVilznWYG9ywVklCXSy+08fXpAav9pmCegnmV1G7/JX
Ytuk7cwDbEL6d3koc35/vj5eACyT9iqKFd2iy8Ba4fZDXQWzqeUfm6X+P+uw8bzX
iPC8nCTZNv7buvMnO5+uD8dyVTRA/2KU0ZDcwIodCTgnp57w07RsGcXrZDE4bGhM
4nPq1X22A/6IXcBmZkEP/59Jo0PV5Wbev2TEhfze
-----END CERTIFICATE-----
Generated at Wed May 14 18:32:55 2025 by rpki-client