Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/wuEgu8e7lp7HSvYh6zhXw82kv4s.roa
File: wuEgu8e7lp7HSvYh6zhXw82kv4s.roa (raw, json)
Hash identifier: LNCgxlGxJxXZ/vLiHXBBwE33eyXnT7NiHjJsX5HTEao=
Subject key identifier: C2:E1:20:BB:C7:BB:96:9E:C7:4A:F6:21:EB:38:57:C3:CD:A4:BF:8B
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019216ED61EEE261844E07D09D78AB1005DD
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/wuEgu8e7lp7HSvYh6zhXw82kv4s.roa
Signing time: Sat 21 Sep 2024 23:31:48 +0000
ROA not before: Sat 21 Sep 2024 23:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216071
IP address blocks: 5.35.32.0/24 maxlen: 24
5.35.33.0/24 maxlen: 24
5.35.34.0/24 maxlen: 24
5.35.36.0/24 maxlen: 24
5.35.37.0/24 maxlen: 24
5.35.38.0/24 maxlen: 24
5.35.39.0/24 maxlen: 24
5.35.44.0/24 maxlen: 24
5.35.45.0/24 maxlen: 24
5.35.46.0/24 maxlen: 24
5.35.47.0/24 maxlen: 24
5.35.68.0/24 maxlen: 24
5.35.69.0/24 maxlen: 24
5.35.70.0/24 maxlen: 24
5.35.71.0/24 maxlen: 24
46.149.72.0/24 maxlen: 24
46.149.73.0/24 maxlen: 24
46.149.74.0/24 maxlen: 24
46.149.75.0/24 maxlen: 24
46.149.76.0/24 maxlen: 24
46.149.77.0/24 maxlen: 24
46.149.78.0/24 maxlen: 24
46.149.79.0/24 maxlen: 24
46.151.24.0/24 maxlen: 24
46.151.25.0/24 maxlen: 24
46.151.26.0/24 maxlen: 24
46.151.27.0/24 maxlen: 24
46.151.28.0/24 maxlen: 24
46.151.29.0/24 maxlen: 24
46.151.30.0/24 maxlen: 24
46.151.31.0/24 maxlen: 24
62.84.96.0/24 maxlen: 24
62.84.97.0/24 maxlen: 24
62.84.98.0/24 maxlen: 24
62.84.99.0/24 maxlen: 24
62.84.100.0/24 maxlen: 24
62.84.101.0/24 maxlen: 24
62.84.102.0/24 maxlen: 24
62.84.103.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.137.0/24 maxlen: 24
77.105.138.0/24 maxlen: 24
77.105.139.0/24 maxlen: 24
77.105.140.0/24 maxlen: 24
77.105.141.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.246.96.0/24 maxlen: 24
77.246.97.0/24 maxlen: 24
77.246.98.0/24 maxlen: 24
77.246.99.0/24 maxlen: 24
77.246.100.0/24 maxlen: 24
77.246.101.0/24 maxlen: 24
77.246.102.0/24 maxlen: 24
77.246.103.0/24 maxlen: 24
77.246.104.0/24 maxlen: 24
77.246.105.0/24 maxlen: 24
77.246.106.0/24 maxlen: 24
77.246.107.0/24 maxlen: 24
77.246.108.0/24 maxlen: 24
77.246.109.0/24 maxlen: 24
77.246.110.0/24 maxlen: 24
77.246.111.0/24 maxlen: 24
88.210.3.0/24 maxlen: 24
88.210.6.0/24 maxlen: 24
88.210.9.0/24 maxlen: 24
88.210.10.0/24 maxlen: 24
88.210.11.0/24 maxlen: 24
88.210.12.0/24 maxlen: 24
88.210.13.0/24 maxlen: 24
88.210.14.0/24 maxlen: 24
89.110.64.0/24 maxlen: 24
89.110.65.0/24 maxlen: 24
89.110.66.0/24 maxlen: 24
89.110.67.0/24 maxlen: 24
89.110.68.0/24 maxlen: 24
89.110.69.0/24 maxlen: 24
89.110.70.0/24 maxlen: 24
89.110.71.0/24 maxlen: 24
89.110.72.0/24 maxlen: 24
89.110.73.0/24 maxlen: 24
89.110.74.0/24 maxlen: 24
89.110.75.0/24 maxlen: 24
89.110.76.0/24 maxlen: 24
89.110.77.0/24 maxlen: 24
89.110.78.0/24 maxlen: 24
89.110.79.0/24 maxlen: 24
89.110.80.0/24 maxlen: 24
89.110.81.0/24 maxlen: 24
89.110.82.0/24 maxlen: 24
89.110.83.0/24 maxlen: 24
89.110.84.0/24 maxlen: 24
89.110.85.0/24 maxlen: 24
89.110.86.0/24 maxlen: 24
89.110.87.0/24 maxlen: 24
89.110.100.0/24 maxlen: 24
89.110.101.0/24 maxlen: 24
89.110.102.0/24 maxlen: 24
89.110.103.0/24 maxlen: 24
89.110.104.0/24 maxlen: 24
89.110.105.0/24 maxlen: 24
89.110.106.0/24 maxlen: 24
89.110.107.0/24 maxlen: 24
89.110.108.0/24 maxlen: 24
89.110.109.0/24 maxlen: 24
89.110.110.0/24 maxlen: 24
89.110.111.0/24 maxlen: 24
89.110.112.0/24 maxlen: 24
89.110.113.0/24 maxlen: 24
89.110.114.0/24 maxlen: 24
89.110.115.0/24 maxlen: 24
89.110.116.0/24 maxlen: 24
89.110.117.0/24 maxlen: 24
89.110.118.0/24 maxlen: 24
89.110.119.0/24 maxlen: 24
89.110.120.0/24 maxlen: 24
89.110.121.0/24 maxlen: 24
89.110.122.0/24 maxlen: 24
89.110.123.0/24 maxlen: 24
89.110.124.0/24 maxlen: 24
89.110.125.0/24 maxlen: 24
89.110.126.0/24 maxlen: 24
89.110.127.0/24 maxlen: 24
91.201.112.0/24 maxlen: 24
91.201.113.0/24 maxlen: 24
91.201.114.0/24 maxlen: 24
91.201.115.0/24 maxlen: 24
93.183.88.0/24 maxlen: 24
93.183.89.0/24 maxlen: 24
93.183.90.0/24 maxlen: 24
93.183.91.0/24 maxlen: 24
109.107.164.0/24 maxlen: 24
109.107.165.0/24 maxlen: 24
109.107.166.0/24 maxlen: 24
109.107.167.0/24 maxlen: 24
109.107.172.0/24 maxlen: 24
109.107.173.0/24 maxlen: 24
109.107.174.0/24 maxlen: 24
109.107.175.0/24 maxlen: 24
109.107.176.0/24 maxlen: 24
109.107.177.0/24 maxlen: 24
109.107.178.0/24 maxlen: 24
109.107.179.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
178.130.40.0/24 maxlen: 24
178.130.41.0/24 maxlen: 24
178.130.42.0/24 maxlen: 24
178.130.43.0/24 maxlen: 24
193.33.194.0/24 maxlen: 24
193.33.195.0/24 maxlen: 24
194.60.132.0/24 maxlen: 24
194.60.133.0/24 maxlen: 24
194.60.134.0/24 maxlen: 24
194.60.135.0/24 maxlen: 24
194.246.81.0/24 maxlen: 24
194.246.82.0/24 maxlen: 24
194.246.83.0/24 maxlen: 24
212.111.80.0/24 maxlen: 24
212.111.81.0/24 maxlen: 24
212.111.82.0/24 maxlen: 24
212.111.88.0/24 maxlen: 24
212.111.89.0/24 maxlen: 24
212.118.36.0/24 maxlen: 24
212.118.37.0/24 maxlen: 24
212.118.38.0/24 maxlen: 24
212.118.39.0/24 maxlen: 24
212.118.40.0/24 maxlen: 24
212.118.41.0/24 maxlen: 24
212.118.42.0/24 maxlen: 24
212.118.43.0/24 maxlen: 24
212.118.52.0/24 maxlen: 24
212.118.53.0/24 maxlen: 24
212.118.54.0/24 maxlen: 24
212.118.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:16:ed:61:ee:e2:61:84:4e:07:d0:9d:78:ab:10:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Sep 21 23:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2e120bbc7bb969ec74af621eb3857c3cda4bf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:e9:dc:48:29:ed:24:9c:d5:4b:e4:a4:68:
12:a7:0e:ec:47:22:4a:ce:1b:ab:17:91:11:2e:2f:
04:8d:f0:69:84:a1:f7:ea:8b:d1:4d:4a:c7:63:5c:
df:d3:f1:90:20:b2:7b:85:ec:a4:dc:66:67:d1:07:
41:f5:1f:72:c4:ca:dd:47:90:89:dd:c4:55:b6:2d:
51:d5:27:2c:1c:0f:bb:60:49:25:c6:70:ba:8a:36:
46:f5:83:cd:6c:af:de:35:fb:43:26:45:72:08:77:
20:4c:4a:33:92:bb:88:05:cc:f6:d1:02:9a:b0:94:
11:6b:9c:24:b9:15:c9:a2:b6:51:08:4e:65:15:b8:
64:9b:51:36:4d:e1:0c:97:cb:6c:37:bf:ab:e7:4c:
07:23:42:dd:ae:6d:d0:62:b4:ef:e8:10:5f:ad:24:
2e:7a:b8:09:a4:14:b8:8f:d6:98:b4:06:2a:32:2f:
82:00:40:a6:8e:8c:c9:f0:4f:79:8e:d6:35:d7:87:
bd:83:0e:cb:a9:21:50:14:a2:1f:8c:29:d5:ba:49:
4e:4e:66:90:fe:a5:96:ea:9c:26:d0:82:d2:22:9f:
74:43:ca:21:72:d6:39:28:ce:98:bf:54:aa:48:0b:
c0:b5:aa:4b:96:da:f5:8b:a0:46:f3:d2:69:07:73:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:20:BB:C7:BB:96:9E:C7:4A:F6:21:EB:38:57:C3:CD:A4:BF:8B
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/wuEgu8e7lp7HSvYh6zhXw82kv4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.32.0-5.35.34.255
5.35.36.0/22
5.35.44.0/22
5.35.68.0/22
46.149.72.0/21
46.151.24.0/21
62.84.96.0/21
77.105.136.0/21
77.246.96.0/20
88.210.3.0/24
88.210.6.0/24
88.210.9.0-88.210.14.255
89.110.64.0-89.110.87.255
89.110.100.0-89.110.127.255
91.201.112.0/22
93.183.88.0/22
109.107.164.0/22
109.107.172.0-109.107.179.255
109.107.184.0/22
178.130.40.0/22
193.33.194.0/23
194.60.132.0/22
194.246.81.0-194.246.83.255
212.111.80.0-212.111.82.255
212.111.88.0/23
212.118.36.0-212.118.43.255
212.118.52.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:b1:8d:5a:26:93:08:dd:77:f0:0b:b0:eb:15:f4:79:fb:ed:
a8:6a:49:93:fd:5e:37:f2:16:c0:b3:c9:99:00:e5:3d:8b:6e:
52:27:a1:cf:78:d9:91:ad:43:ca:ee:61:a5:b5:c4:29:54:3d:
e2:74:36:79:4f:27:d1:9e:1d:58:82:31:42:3c:b3:84:67:50:
d0:5b:58:a9:6e:fb:40:8b:8b:c2:dd:8c:07:13:97:02:4e:77:
f3:cf:a3:dd:92:07:34:a4:98:da:6d:37:0d:ea:4c:b6:9b:e0:
b3:e4:34:98:ae:c2:b3:32:80:73:e8:bf:dc:af:6f:fc:02:9d:
58:08:c7:85:c4:84:4e:5b:f7:88:de:a6:4b:c6:2d:63:9c:7f:
cf:ad:4b:ac:ad:79:ec:da:3f:76:9d:5c:14:b1:2d:02:9f:d5:
ae:cd:07:ce:5f:85:f4:c9:82:70:1d:5f:4a:01:e5:d3:3a:e6:
5f:ae:e7:61:a0:73:57:89:e7:7e:21:c7:f9:c3:81:eb:1a:73:
06:7f:88:74:22:ba:c3:7d:d3:e6:c7:fe:9c:db:54:8a:e1:f5:
26:6e:b4:96:f7:4e:df:fa:61:6e:e2:38:be:c3:61:fb:15:16:
7a:19:07:00:31:92:11:e9:66:03:9a:fe:8b:c9:88:2c:0c:23:
45:17:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:00:03 2024 by rpki-client on console-fra.rpki-client.org