Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/y8ASUlfySQbzW-ArhBJ7E4RtbEo.roa
File: y8ASUlfySQbzW-ArhBJ7E4RtbEo.roa (raw, json)
Hash identifier: x/3qO1AtETIyL7YQe2bZwhZfY98WhQfEKv9lfvfpkPQ=
Subject key identifier: CB:C0:12:52:57:F2:49:06:F3:5B:E0:2B:84:12:7B:13:84:6D:6C:4A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019440AAA6295AB2058926ABA81333F6829B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/y8ASUlfySQbzW-ArhBJ7E4RtbEo.roa
Signing time: Tue 07 Jan 2025 12:08:32 +0000
ROA not before: Tue 07 Jan 2025 12:08:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2588
IP address blocks: 46.19.200.0/21 maxlen: 21
80.81.32.0/19 maxlen: 24
80.81.35.0/24 maxlen: 24
83.223.128.0/19 maxlen: 19
83.223.145.0/24 maxlen: 24
83.223.155.0/24 maxlen: 24
85.254.0.0/17 maxlen: 17
85.254.49.0/24 maxlen: 24
85.254.50.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.128.0/18 maxlen: 18
91.190.32.0/19 maxlen: 24
91.190.36.0/24 maxlen: 24
91.190.52.0/24 maxlen: 24
91.190.56.0/23 maxlen: 24
91.190.60.0/24 maxlen: 24
94.101.224.0/20 maxlen: 20
109.205.120.0/21 maxlen: 21
109.205.127.0/24 maxlen: 24
159.148.0.0/16 maxlen: 16
159.148.0.0/24 maxlen: 24
159.148.1.0/24 maxlen: 24
159.148.2.0/24 maxlen: 24
159.148.3.0/24 maxlen: 24
159.148.4.0/24 maxlen: 24
159.148.5.0/24 maxlen: 24
159.148.6.0/24 maxlen: 24
159.148.7.0/24 maxlen: 24
159.148.8.0/24 maxlen: 24
159.148.9.0/24 maxlen: 24
159.148.10.0/24 maxlen: 24
159.148.11.0/24 maxlen: 24
159.148.12.0/24 maxlen: 24
159.148.13.0/24 maxlen: 24
159.148.14.0/24 maxlen: 24
159.148.15.0/24 maxlen: 24
159.148.16.0/24 maxlen: 24
159.148.17.0/24 maxlen: 24
159.148.18.0/24 maxlen: 24
159.148.19.0/24 maxlen: 24
159.148.20.0/24 maxlen: 24
159.148.21.0/24 maxlen: 24
159.148.22.0/24 maxlen: 24
159.148.24.0/24 maxlen: 24
159.148.25.0/24 maxlen: 24
159.148.28.0/24 maxlen: 24
159.148.29.0/24 maxlen: 24
159.148.31.0/24 maxlen: 24
159.148.32.0/24 maxlen: 24
159.148.33.0/24 maxlen: 24
159.148.34.0/24 maxlen: 24
159.148.35.0/24 maxlen: 24
159.148.36.0/24 maxlen: 24
159.148.37.0/24 maxlen: 24
159.148.39.0/24 maxlen: 24
159.148.40.0/24 maxlen: 24
159.148.41.0/24 maxlen: 24
159.148.42.0/24 maxlen: 24
159.148.43.0/24 maxlen: 24
159.148.45.0/24 maxlen: 24
159.148.46.0/24 maxlen: 24
159.148.47.0/24 maxlen: 24
159.148.48.0/24 maxlen: 24
159.148.49.0/24 maxlen: 24
159.148.50.0/24 maxlen: 24
159.148.51.0/24 maxlen: 24
159.148.52.0/24 maxlen: 24
159.148.53.0/24 maxlen: 24
159.148.55.0/24 maxlen: 24
159.148.56.0/24 maxlen: 24
159.148.57.0/24 maxlen: 24
159.148.59.0/24 maxlen: 24
159.148.60.0/24 maxlen: 24
159.148.61.0/24 maxlen: 24
159.148.63.0/24 maxlen: 24
159.148.64.0/24 maxlen: 24
159.148.65.0/24 maxlen: 24
159.148.67.0/24 maxlen: 24
159.148.68.0/24 maxlen: 24
159.148.69.0/24 maxlen: 24
159.148.70.0/24 maxlen: 24
159.148.71.0/24 maxlen: 24
159.148.72.0/24 maxlen: 24
159.148.75.0/24 maxlen: 24
159.148.76.0/24 maxlen: 24
159.148.78.0/24 maxlen: 24
159.148.79.0/24 maxlen: 24
159.148.80.0/24 maxlen: 24
159.148.81.0/24 maxlen: 24
159.148.82.0/24 maxlen: 24
159.148.83.0/24 maxlen: 24
159.148.84.0/24 maxlen: 24
159.148.85.0/24 maxlen: 24
159.148.86.0/24 maxlen: 24
159.148.87.0/24 maxlen: 24
159.148.91.0/24 maxlen: 24
159.148.92.0/24 maxlen: 24
159.148.93.0/24 maxlen: 24
159.148.94.0/24 maxlen: 24
159.148.95.0/24 maxlen: 24
159.148.96.0/24 maxlen: 24
159.148.97.0/24 maxlen: 24
159.148.100.0/24 maxlen: 24
159.148.101.0/24 maxlen: 24
159.148.106.0/24 maxlen: 24
159.148.107.0/24 maxlen: 24
159.148.108.0/24 maxlen: 24
159.148.110.0/24 maxlen: 24
159.148.111.0/24 maxlen: 24
159.148.112.0/24 maxlen: 24
159.148.113.0/24 maxlen: 24
159.148.115.0/24 maxlen: 24
159.148.116.0/24 maxlen: 24
159.148.117.0/24 maxlen: 24
159.148.118.0/24 maxlen: 24
159.148.120.0/24 maxlen: 24
159.148.121.0/24 maxlen: 24
159.148.122.0/24 maxlen: 24
159.148.123.0/24 maxlen: 24
159.148.127.0/24 maxlen: 24
159.148.129.0/24 maxlen: 24
159.148.132.0/24 maxlen: 24
159.148.133.0/24 maxlen: 24
159.148.135.0/24 maxlen: 24
159.148.139.0/24 maxlen: 24
159.148.145.0/24 maxlen: 24
159.148.146.0/24 maxlen: 24
159.148.151.0/24 maxlen: 24
159.148.152.0/24 maxlen: 24
159.148.153.0/24 maxlen: 24
159.148.154.0/24 maxlen: 24
159.148.155.0/24 maxlen: 24
159.148.156.0/24 maxlen: 24
159.148.159.0/24 maxlen: 24
159.148.161.0/24 maxlen: 24
159.148.162.0/24 maxlen: 24
159.148.164.0/24 maxlen: 24
159.148.168.0/24 maxlen: 24
159.148.170.0/24 maxlen: 24
159.148.175.0/24 maxlen: 24
159.148.178.0/24 maxlen: 24
159.148.185.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
159.148.187.0/24 maxlen: 24
159.148.188.0/24 maxlen: 24
159.148.189.0/24 maxlen: 24
159.148.192.0/24 maxlen: 24
159.148.193.0/24 maxlen: 24
159.148.194.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.196.0/24 maxlen: 24
159.148.201.0/24 maxlen: 24
159.148.202.0/24 maxlen: 24
159.148.205.0/24 maxlen: 24
159.148.206.0/24 maxlen: 24
159.148.207.0/24 maxlen: 24
159.148.209.0/24 maxlen: 24
159.148.210.0/24 maxlen: 24
159.148.211.0/24 maxlen: 24
159.148.212.0/24 maxlen: 24
159.148.213.0/24 maxlen: 24
159.148.214.0/24 maxlen: 24
159.148.215.0/24 maxlen: 24
159.148.217.0/24 maxlen: 24
159.148.219.0/24 maxlen: 24
159.148.221.0/24 maxlen: 24
159.148.223.0/24 maxlen: 24
159.148.227.0/24 maxlen: 24
159.148.228.0/24 maxlen: 24
159.148.229.0/24 maxlen: 24
159.148.230.0/24 maxlen: 24
159.148.232.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
159.148.235.0/24 maxlen: 24
159.148.237.0/24 maxlen: 24
159.148.238.0/24 maxlen: 24
159.148.250.0/24 maxlen: 24
159.148.251.0/24 maxlen: 24
159.148.252.0/24 maxlen: 24
159.148.252.2/32 maxlen: 32
159.148.254.0/24 maxlen: 24
185.27.92.0/22 maxlen: 22
217.69.112.0/20 maxlen: 20
217.69.113.0/24 maxlen: 24
2a02:610::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:aa:a6:29:5a:b2:05:89:26:ab:a8:13:33:f6:82:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 7 12:08:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbc0125257f24906f35be02b84127b13846d6c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:ec:58:39:7c:ec:d0:93:8a:f5:9e:e9:5d:
24:6a:93:74:26:bb:f5:84:16:be:e2:53:79:77:7c:
2d:f9:d0:da:70:2d:83:1d:66:27:9a:d7:11:8b:f9:
9a:0d:77:6d:12:c8:ad:a5:72:c7:bd:3d:b0:0f:af:
0d:f8:fc:61:9b:4a:d0:a8:99:82:5e:8e:85:25:97:
1f:c2:ad:95:3a:7b:72:b2:60:52:06:4f:8c:85:d9:
bf:d8:44:0c:31:ce:9c:c8:89:11:ad:a7:f2:e5:f8:
76:21:93:61:7f:bd:46:73:87:38:5d:8d:d3:8b:76:
da:53:f6:02:45:04:f9:bb:f9:63:b6:e0:d2:72:c0:
d8:31:f1:3a:ae:cf:23:96:e8:6c:d3:e8:a5:a7:1f:
14:4c:6e:57:94:63:cb:a7:ea:2e:1a:5b:24:5e:b6:
c9:0d:9d:ff:98:cc:da:83:a6:6e:47:af:9a:86:0c:
b7:3a:29:24:4a:2b:1c:f1:0b:b6:f0:c0:90:c7:07:
c3:d0:1e:04:ed:67:8a:02:65:f1:63:bd:fa:d3:e6:
27:d2:f4:8a:23:45:c8:07:e3:13:5c:7b:13:f3:2a:
d6:58:2a:92:a4:80:93:8f:c5:5a:a7:ac:06:1b:e1:
ea:f1:d1:cf:9b:14:1e:bd:c8:31:e5:e1:99:c6:85:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C0:12:52:57:F2:49:06:F3:5B:E0:2B:84:12:7B:13:84:6D:6C:4A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/y8ASUlfySQbzW-ArhBJ7E4RtbEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/21
80.81.32.0/19
83.223.128.0/19
85.254.0.0-85.254.191.255
91.190.32.0/19
94.101.224.0/20
109.205.120.0/21
159.148.0.0/16
185.27.92.0/22
217.69.112.0/20
IPv6:
2a02:610::/32
Signature Algorithm: sha256WithRSAEncryption
69:df:a7:60:49:0d:1e:27:1a:da:21:0b:ef:ba:0c:39:54:e2:
c2:74:e9:d1:31:f8:4d:ba:3c:2b:2c:ce:33:30:06:07:a9:b9:
e1:f9:53:3a:33:1a:de:e9:86:29:e8:13:e2:c9:54:9b:4e:ae:
c5:89:5b:7d:4e:80:9b:df:eb:be:cc:4c:71:1c:66:12:50:96:
ef:2d:5f:40:0b:57:6e:09:46:d4:5a:5b:62:42:ff:8b:8f:1a:
9a:b2:4e:e1:b8:53:04:9f:bd:81:14:3f:d5:43:0e:57:96:8a:
a7:20:76:5a:aa:36:99:1c:1e:91:af:3e:36:8d:aa:2c:48:29:
21:a1:03:64:a9:40:95:a3:0c:68:68:52:9e:b2:79:3c:f3:cf:
d3:fd:d2:6e:e9:44:f8:4a:7d:ff:11:43:21:78:0f:10:2c:bf:
75:bd:07:36:91:cf:19:f2:dc:c3:4a:aa:b1:69:f3:c5:1e:88:
f7:ab:54:ab:f7:3c:67:7e:39:0f:96:fb:db:27:ad:c8:1d:78:
e7:03:73:5b:5d:ff:f1:ba:55:f2:90:d4:15:32:29:c2:96:c5:
83:f1:ce:78:54:19:73:09:e5:96:0b:ec:c8:3a:58:9f:d5:dd:
5a:e7:fe:a2:d4:9f:77:62:87:e9:7b:c3:b3:79:de:74:28:80:
10:67:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:59 2025 by rpki-client