Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gBFELNv85k7lCKM0DZjTk9cxg_Y.roa
File: gBFELNv85k7lCKM0DZjTk9cxg_Y.roa (raw, json)
Hash identifier: 2V0wZuS8GbxDun9hGQhkbPkTKSWqGF1rymcxG91j3fs=
Subject key identifier: 80:11:44:2C:DB:FC:E6:4E:E5:08:A3:34:0D:98:D3:93:D7:31:83:F6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01932FD68DDC7B636C2969AB26CC4EEF2BA5
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gBFELNv85k7lCKM0DZjTk9cxg_Y.roa
Signing time: Fri 15 Nov 2024 12:40:10 +0000
ROA not before: Fri 15 Nov 2024 12:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210906
IP address blocks: 85.254.2.0/24 maxlen: 24
85.254.4.0/24 maxlen: 24
85.254.7.0/24 maxlen: 24
85.254.30.0/24 maxlen: 24
85.254.40.0/24 maxlen: 24
85.254.42.0/23 maxlen: 23
85.254.51.0/24 maxlen: 24
85.254.59.0/24 maxlen: 24
85.254.64.0/23 maxlen: 23
85.254.76.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.103.0/24 maxlen: 24
85.254.112.0/22 maxlen: 22
85.254.123.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.126.0/24 maxlen: 24
85.254.128.0/22 maxlen: 22
85.254.134.0/24 maxlen: 24
85.254.137.0/24 maxlen: 24
85.254.138.0/23 maxlen: 23
85.254.140.0/24 maxlen: 24
85.254.174.0/23 maxlen: 23
85.254.180.0/23 maxlen: 23
159.148.26.0/24 maxlen: 24
159.148.54.0/24 maxlen: 24
159.148.62.0/24 maxlen: 24
159.148.66.0/24 maxlen: 24
159.148.126.0/24 maxlen: 24
159.148.128.0/24 maxlen: 24
159.148.130.0/24 maxlen: 24
159.148.158.0/24 maxlen: 24
159.148.163.0/24 maxlen: 24
159.148.166.0/23 maxlen: 23
159.148.179.0/24 maxlen: 24
159.148.180.0/24 maxlen: 24
159.148.204.0/24 maxlen: 24
159.148.216.0/24 maxlen: 24
159.148.218.0/24 maxlen: 24
159.148.234.0/24 maxlen: 24
159.148.241.0/24 maxlen: 24
159.148.246.0/23 maxlen: 23
159.148.248.0/24 maxlen: 24
185.7.236.0/24 maxlen: 24
185.27.94.0/24 maxlen: 24
185.47.92.0/22 maxlen: 22
185.211.96.0/22 maxlen: 22
217.69.121.0/24 maxlen: 24
217.69.125.0/24 maxlen: 24
217.69.126.0/24 maxlen: 24
217.69.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:d6:8d:dc:7b:63:6c:29:69:ab:26:cc:4e:ef:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Nov 15 12:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8011442cdbfce64ee508a3340d98d393d73183f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:56:64:13:05:c1:fd:16:f0:7f:89:27:9a:
50:e8:05:98:9d:a7:aa:10:3b:1b:73:eb:94:a6:4a:
6f:68:88:8c:6b:a1:ae:fe:05:c1:55:9c:66:71:ac:
91:a1:b9:52:7e:de:59:0c:17:88:28:d1:85:aa:0c:
6e:5d:04:4e:2a:3e:86:3e:46:bd:0f:70:70:a7:8e:
b8:50:be:69:46:0f:0a:a4:fd:d1:41:47:b3:d6:d8:
60:a3:bb:cd:fa:61:f4:bb:1f:da:ee:db:78:c7:93:
2a:4d:1f:06:5c:cb:c7:c3:63:d8:c7:5c:b8:d4:a3:
7b:66:5d:46:60:7b:c2:7f:55:75:f3:c6:83:26:33:
ef:c7:a1:69:19:1b:a5:74:2a:e2:7c:1d:3a:42:1b:
1c:33:cd:08:6d:5d:5b:7d:d3:91:f4:5c:d4:d7:94:
32:27:ac:f7:6d:3a:94:ac:4f:be:16:ac:a8:16:77:
c2:d7:dc:40:92:83:33:dc:7a:49:05:7a:23:d5:2d:
f8:39:aa:d6:28:37:aa:13:89:07:a0:cd:8e:83:21:
20:2d:95:c9:8e:bc:ca:a2:84:35:6e:53:1d:e4:85:
54:be:1a:a3:c5:25:ef:f8:c7:12:40:df:bb:21:8c:
e2:d8:48:cb:f3:b5:d6:16:d7:0d:86:a5:9f:e4:ce:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:44:2C:DB:FC:E6:4E:E5:08:A3:34:0D:98:D3:93:D7:31:83:F6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gBFELNv85k7lCKM0DZjTk9cxg_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.2.0/24
85.254.4.0/24
85.254.7.0/24
85.254.30.0/24
85.254.40.0/24
85.254.42.0/23
85.254.51.0/24
85.254.59.0/24
85.254.64.0/23
85.254.76.0/22
85.254.84.0/23
85.254.103.0/24
85.254.112.0/22
85.254.123.0-85.254.126.255
85.254.128.0/22
85.254.134.0/24
85.254.137.0-85.254.140.255
85.254.174.0/23
85.254.180.0/23
159.148.26.0/24
159.148.54.0/24
159.148.62.0/24
159.148.66.0/24
159.148.126.0/24
159.148.128.0/24
159.148.130.0/24
159.148.158.0/24
159.148.163.0/24
159.148.166.0/23
159.148.179.0-159.148.180.255
159.148.204.0/24
159.148.216.0/24
159.148.218.0/24
159.148.234.0/24
159.148.241.0/24
159.148.246.0-159.148.248.255
185.7.236.0/24
185.27.94.0/24
185.47.92.0/22
185.211.96.0/22
217.69.121.0/24
217.69.125.0-217.69.127.255
Signature Algorithm: sha256WithRSAEncryption
6f:9f:35:3e:8e:a2:34:62:7d:5e:f4:31:cb:1d:e3:6c:49:08:
cc:0a:65:2a:e1:74:5e:95:4c:f2:8e:34:6e:53:0a:6d:da:79:
81:95:a5:e6:7d:4b:3e:b1:0d:32:11:2d:44:92:0e:02:f3:d9:
ea:3f:0b:98:54:fe:40:b4:28:49:b9:03:18:a0:44:07:2c:64:
d4:08:f6:43:35:cb:07:0a:c9:6a:e6:e3:b4:2e:80:62:c7:61:
50:dc:62:46:f7:5a:9d:71:3c:3e:b8:e4:82:1b:b7:95:67:be:
c4:64:46:2c:88:c1:42:9e:19:9c:95:e2:34:71:75:f3:57:73:
ce:b5:e6:b4:0a:ef:22:e2:7e:fb:a7:c3:5a:82:0d:d7:37:58:
5f:ba:e1:62:af:0a:12:de:59:3c:d3:79:fb:57:68:4b:aa:e5:
d1:1c:4b:4c:57:ff:de:1e:e4:3c:99:3a:d1:28:57:b3:da:e3:
40:b3:28:21:5d:87:b8:56:5e:12:eb:22:11:7e:79:c3:e6:57:
b0:12:ae:c6:33:1f:a9:cc:75:26:45:8c:12:17:39:0f:50:e7:
87:bd:75:c5:5e:15:9d:17:f8:49:98:e4:f2:07:4d:87:b7:96:
52:10:d9:0c:5a:4e:14:5a:ee:53:db:c7:2e:f1:d9:d4:f8:7b:
32:22:14:a7
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgISAZMv1o3ce2NsKWmrJsxO7yulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQxMTE1MTI0MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDExNDQyY2RiZmNlNjRlZTUwOGEzMzQwZDk4ZDM5M2Q3MzE4M2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMBWZBMFwf0W8H+JJ5pQ6AWYnaeq
EDsbc+uUpkpvaIiMa6Gu/gXBVZxmcayRoblSft5ZDBeIKNGFqgxuXQROKj6GPka9
D3Bwp464UL5pRg8KpP3RQUez1thgo7vN+mH0ux/a7tt4x5MqTR8GXMvHw2PYx1y4
1KN7Zl1GYHvCf1V188aDJjPvx6FpGRuldCrifB06QhscM80IbV1bfdOR9FzU15Qy
J6z3bTqUrE++FqyoFnfC19xAkoMz3HpJBXoj1S34OarWKDeqE4kHoM2OgyEgLZXJ
jrzKooQ1blMd5IVUvhqjxSXv+McSQN+7IYzi2EjL87XWFtcNhqWf5M6inwIDAQAB
o4IDMTCCAy0wHQYDVR0OBBYEFIARRCzb/OZO5QijNA2Y05PXMYP2MB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvZ0JGRUxOdjg1azdsQ0tNMERaalRrOWN4Z19ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRQYIKwYBBQUHAQcBAf8EggE0MIIBMDCCASwEAgABMIIB
JAMEAFX+AgMEAFX+BAMEAFX+BwMEAFX+HgMEAFX+KAMEAVX+KgMEAFX+MwMEAFX+
OwMEAVX+QAMEAlX+TAMEAVX+VAMEAFX+ZwMEAlX+cDAMAwQAVf57AwQAVf5+AwQC
Vf6AAwQAVf6GMAwDBABV/okDBABV/owDBAFV/q4DBAFV/rQDBACflBoDBACflDYD
BACflD4DBACflEIDBACflH4DBACflIADBACflIIDBACflJ4DBACflKMDBAGflKYw
DAMEAJ+UswMEAJ+UtAMEAJ+UzAMEAJ+U2AMEAJ+U2gMEAJ+U6gMEAJ+U8TAMAwQB
n5T2AwQAn5T4AwQAuQfsAwQAuRteAwQCuS9cAwQCudNgAwQA2UV5MAwDBADZRX0D
BAfZRQAwDQYJKoZIhvcNAQELBQADggEBAG+fNT6OojRifV70Mcsd42xJCMwKZSrh
dF6VTPKONG5TCm3aeYGVpeZ9Sz6xDTIRLUSSDgLz2eo/C5hU/kC0KEm5AxigRAcs
ZNQI9kM1ywcKyWrm47QugGLHYVDcYkb3Wp1xPD645IIbt5VnvsRkRiyIwUKeGZyV
4jRxdfNXc8615rQK7yLifvunw1qCDdc3WF+64WKvChLeWTzTeftXaEuq5dEcS0xX
/94e5DyZOtEoV7Pa40CzKCFdh7hWXhLrIhF+ecPmV7ASrsYzH6nMdSZFjBIXOQ9Q
54e9dcVeFZ0X+EmY5PIHTYe3llIQ2QxaThRa7lPbxy7x2dT4ezIiFKc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:17:01 2024 by rpki-client on console-ams.rpki-client.org