Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/1-5TM_PyTj4QjsBGIuWzsbScrvQk.roa
File: 1-5TM_PyTj4QjsBGIuWzsbScrvQk.roa (raw, json)
Hash identifier: DHo+iuqT2nv5UK21a0ttpld+HKKuhOThskT+rCu9hmQ=
Subject key identifier: FB:94:CC:FC:FC:93:8F:84:23:B0:11:88:B9:6C:EC:6D:27:2B:BD:09
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 0192386E0A80F9799B95BC4BAFB4302F17CA
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/1-5TM_PyTj4QjsBGIuWzsbScrvQk.roa
Signing time: Sat 28 Sep 2024 11:39:48 +0000
ROA not before: Sat 28 Sep 2024 11:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
89.110.88.0/24 maxlen: 24
89.110.89.0/24 maxlen: 24
89.110.90.0/24 maxlen: 24
89.110.91.0/24 maxlen: 24
89.110.92.0/24 maxlen: 24
89.110.93.0/24 maxlen: 24
89.110.94.0/24 maxlen: 24
89.110.95.0/24 maxlen: 24
89.110.96.0/24 maxlen: 24
89.110.97.0/24 maxlen: 24
89.110.98.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:6e:0a:80:f9:79:9b:95:bc:4b:af:b4:30:2f:17:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Sep 28 11:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb94ccfcfc938f8423b01188b96cec6d272bbd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:d6:13:7c:ce:db:09:0e:7e:81:50:0c:71:
27:cc:87:f4:48:a7:a8:33:0c:7b:ba:4d:76:95:8f:
cc:3a:76:9f:43:3f:07:df:f3:05:9d:3d:5f:70:78:
a8:ce:7e:02:72:ff:fd:0c:0c:68:a2:5e:7b:67:d4:
74:cb:6f:bc:f9:f0:9d:df:f3:5d:b0:7a:7a:e4:e4:
89:31:7a:eb:dc:62:30:70:e6:98:3b:95:63:cc:db:
84:6e:7b:53:97:47:97:7a:82:51:d5:68:a1:e4:19:
19:70:da:14:ff:c5:4c:e5:f6:54:5d:fb:64:8c:de:
4e:ee:b0:68:4c:cd:ec:14:5b:05:21:0d:a1:c3:bf:
df:86:51:bf:47:d3:2f:9f:cc:79:e8:f0:49:6c:7d:
f5:0b:70:0c:16:f6:9a:f4:33:87:4d:a2:bc:84:f8:
f8:1f:eb:72:60:55:4e:98:f8:37:50:0d:b3:8e:fc:
be:ae:3b:f6:43:88:62:53:0a:03:1a:25:6f:f1:4b:
08:91:e0:05:65:a4:84:49:b8:6e:80:c9:7e:76:0a:
76:19:61:fd:9c:d0:f4:f3:41:ed:da:8f:b1:8d:b5:
17:02:2b:ed:cc:d8:a6:61:e6:83:08:27:9d:bf:87:
b8:4a:a7:c7:1f:76:84:33:98:b5:88:33:76:13:ed:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:94:CC:FC:FC:93:8F:84:23:B0:11:88:B9:6C:EC:6D:27:2B:BD:09
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/1-5TM_PyTj4QjsBGIuWzsbScrvQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.218.60.0/22
89.110.88.0-89.110.98.255
91.142.72.0/22
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.89.255
178.20.40.0/21
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:79:d0:fc:0b:ca:59:6e:0c:74:03:57:b0:88:10:cb:cf:fa:
2d:9c:d8:ec:56:5f:63:13:ac:75:dd:eb:67:fe:c4:bb:87:a3:
64:53:82:51:73:94:dd:ee:d8:97:9e:7c:24:36:d0:c3:4b:d3:
6f:62:e8:4b:ee:17:43:eb:53:84:78:06:b4:a4:08:ab:73:8a:
88:0e:6b:cd:12:c6:3b:95:84:0f:d7:a2:1a:2e:c5:8c:15:d2:
05:17:c0:85:ee:83:db:09:93:53:47:39:20:14:4a:14:96:29:
e8:28:eb:c6:87:57:aa:14:ff:c4:50:11:bb:9a:ed:eb:35:c3:
5d:f6:f7:35:52:99:52:d7:18:f1:5c:9d:41:b7:22:4a:cd:22:
52:da:30:ec:84:36:cd:4c:99:3c:14:ff:ad:d4:b6:e4:06:1a:
84:c0:ca:84:99:fa:96:68:03:24:64:a5:97:fd:50:06:f7:4a:
4a:fa:91:11:c8:af:62:8a:4c:f0:3f:e8:b7:3d:66:be:25:30:
89:0a:d0:db:1e:b9:7e:21:12:5b:6c:88:7d:10:fe:be:b6:ef:
10:4a:35:18:06:94:88:65:27:13:fb:42:cf:36:78:af:a8:88:
29:18:45:25:60:7a:c1:bf:8b:66:33:40:59:dd:a1:f0:0d:9c:
b9:70:dc:d6
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAZI4bgqA+XmblbxLr7QwLxfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjQwOTI4MTEzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjk0Y2NmY2ZjOTM4Zjg0MjNiMDExODhiOTZjZWM2ZDI3MmJiZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrzWE3zO2wkOfoFQDHEnzIf0SKeo
Mwx7uk12lY/MOnafQz8H3/MFnT1fcHiozn4Ccv/9DAxool57Z9R0y2+8+fCd3/Nd
sHp65OSJMXrr3GIwcOaYO5VjzNuEbntTl0eXeoJR1Wih5BkZcNoU/8VM5fZUXftk
jN5O7rBoTM3sFFsFIQ2hw7/fhlG/R9Mvn8x56PBJbH31C3AMFvaa9DOHTaK8hPj4
H+tyYFVOmPg3UA2zjvy+rjv2Q4hiUwoDGiVv8UsIkeAFZaSESbhugMl+dgp2GWH9
nND080Ht2o+xjbUXAivtzNimYeaDCCedv4e4SqfHH3aEM5i1iDN2E+2/pQIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFPuUzPz8k4+EI7ARiLls7G0nK70JMB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvMS01VE1fUHlUajRRanNCR0l1V3pzYlNjcnZRay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2EvYzdiOWRjLTdhYzYtNGFjYS1hNDNiLTNjYmFkNWI5MDRi
NS8xL1ZRTWxIYmFXa3pZcWtuNHJFd1JubEZ4VThQdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB0wYIKwYBBQUHAQcBAf8EgcMwgcAwgb0EAgABMIG2AwQD
PnFwAwQAVDYsAwQAVDYvAwQCVcZsAwQCWNo8MAwDBANZblgDBABZbmIDBAJbjkgD
BAJdt1wwDAMEAF5nUwMEAV5nXDAMAwQAX44hAwQAX44iMAwDBABfji0DBARfjiAw
DAMEAm2sVAMEAW2sWAMEA7IUKAMEArnRHAMEArnnmAMEAMGyqgMEAcMCQgMEAcMC
RjAMAwQAwwJJAwQAwwJMMAwDBAHDAk4DBAHDAlADBAHDAlQwDQYJKoZIhvcNAQEL
BQADggEBACp50PwLylluDHQDV7CIEMvP+i2c2OxWX2MTrHXd62f+xLuHo2RTglFz
lN3u2JeefCQ20MNL029i6EvuF0PrU4R4BrSkCKtziogOa80SxjuVhA/XohouxYwV
0gUXwIXug9sJk1NHOSAUShSWKego68aHV6oU/8RQEbua7es1w1329zVSmVLXGPFc
nUG3IkrNIlLaMOyENs1MmTwU/63UtuQGGoTAyoSZ+pZoAyRkpZf9UAb3Skr6kRHI
r2KKTPA/6Lc9Zr4lMIkK0NseuX4hEltsiH0Q/r627xBKNRgGlIhlJxP7Qs82eK+o
iCkYRSVgesG/i2YzQFndofANnLlw3NY=
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:00:03 2024 by rpki-client on console-fra.rpki-client.org