Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/WqxeZYWfVPEypcYxfG63BkqZXp4.roa
File: WqxeZYWfVPEypcYxfG63BkqZXp4.roa (raw, json)
Hash identifier: P+UWJPmC7UifrA1SdjU5VU0FrudHLMU2KtQPL+PvvQ0=
Subject key identifier: 5A:AC:5E:65:85:9F:54:F1:32:A5:C6:31:7C:6E:B7:06:4A:99:5E:9E
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 018FCEFBECB3D5530E40F51C01F1A48E36D2
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/WqxeZYWfVPEypcYxfG63BkqZXp4.roa
Signing time: Fri 31 May 2024 14:09:27 +0000
ROA not before: Fri 31 May 2024 14:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44444
IP address blocks: 85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.38.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.48.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.55.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.57.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
86.111.223.0/24 maxlen: 24
157.167.4.0/24 maxlen: 24
157.167.5.0/24 maxlen: 24
157.167.6.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.130.0/24 maxlen: 24
157.167.131.0/24 maxlen: 24
157.167.132.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.158.0/24 maxlen: 24
157.167.159.0/24 maxlen: 24
157.167.160.0/24 maxlen: 24
157.167.161.0/24 maxlen: 24
157.167.162.0/24 maxlen: 24
157.167.163.0/24 maxlen: 24
157.167.192.0/24 maxlen: 24
157.167.200.0/24 maxlen: 24
185.4.96.0/24 maxlen: 24
185.4.97.0/24 maxlen: 24
185.4.98.0/24 maxlen: 24
185.4.99.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:fb:ec:b3:d5:53:0e:40:f5:1c:01:f1:a4:8e:36:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: May 31 14:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aac5e65859f54f132a5c6317c6eb7064a995e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:ef:3e:f2:92:ee:3b:83:5e:35:c5:61:d8:
07:00:71:4c:bd:f9:85:3e:7e:f3:52:f6:b4:54:03:
c5:59:5f:51:76:0e:d3:a0:3c:5e:fe:ba:8f:4a:8c:
8e:4c:8f:33:a6:d0:f1:fc:8f:08:16:96:c9:ea:58:
4e:57:b1:ca:85:d0:a6:8b:d6:5d:a8:f6:fb:11:e7:
26:e6:e1:33:bb:91:9b:2b:12:35:4b:4f:32:3c:96:
a5:0e:a4:1f:2d:59:23:8a:d0:18:92:a5:a3:55:86:
9b:59:85:2a:5a:ef:d4:ef:de:88:31:28:02:09:cb:
ee:b1:4d:51:62:35:46:78:f7:66:12:ac:21:53:8c:
f7:24:f6:29:b6:ab:29:3f:25:83:69:05:25:d7:76:
a9:70:1e:cf:af:1d:eb:02:68:66:37:cc:9d:0f:bf:
77:d8:b4:f0:af:cc:35:22:81:b1:dc:e6:01:c3:87:
8f:ad:13:fa:8d:74:5c:3a:99:c1:a0:c4:ac:c5:8a:
13:18:52:a6:80:43:f9:99:43:52:c7:e7:7c:4d:78:
31:99:ca:94:ef:55:c5:5c:6c:19:8d:9e:b1:86:42:
ec:83:34:c8:6d:6e:f7:c5:89:bc:21:f4:79:5d:4f:
78:bd:0f:33:45:b3:f7:19:5c:11:79:0f:1b:bf:b3:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:5E:65:85:9F:54:F1:32:A5:C6:31:7C:6E:B7:06:4A:99:5E:9E
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/WqxeZYWfVPEypcYxfG63BkqZXp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0/19
86.111.222.0/23
157.167.4.0-157.167.6.255
157.167.10.0-157.167.128.255
157.167.130.0-157.167.132.255
157.167.157.0-157.167.163.255
157.167.192.0/24
157.167.200.0/24
185.4.96.0/22
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
6b:2e:05:8e:fa:50:c6:dc:42:1f:df:93:10:b6:08:6e:89:29:
d6:96:4f:24:cb:ac:de:63:17:8c:2b:74:4b:f1:9d:d6:cf:30:
d3:9f:5c:18:3b:12:93:ba:56:2c:b5:5b:9d:af:05:56:8d:26:
3a:8f:1c:8a:1a:ca:13:31:de:f3:f2:82:1a:ad:f5:a5:7b:69:
58:56:e9:ba:56:2b:77:67:ab:13:d0:39:5d:99:da:29:95:90:
33:1c:a7:94:11:d6:5b:c9:8b:70:fc:9a:5d:d7:08:b6:6d:bc:
25:c5:e8:7a:00:0d:6e:07:6a:04:11:30:44:f6:3b:b8:91:36:
2e:34:bb:5a:0a:22:c1:3c:1c:7d:c6:82:78:d9:5c:95:b2:8f:
ba:fc:4c:52:fa:9b:6b:b8:85:03:eb:40:99:01:78:b4:fe:5b:
ab:8d:e7:c1:f8:ec:c3:23:4b:d3:5a:98:5e:58:6e:70:14:e2:
37:39:c5:a5:dc:02:e8:7d:36:58:6e:ab:5c:46:00:28:40:2d:
f3:bf:7e:f7:0d:73:1e:5a:e2:20:d8:95:1c:bb:b8:af:7b:e9:
cc:63:1e:b1:5b:7a:49:84:fc:9f:f2:f1:b8:22:8d:24:c9:67:
99:17:1a:a6:29:3c:4c:94:48:19:b2:0a:2b:08:1e:dd:5e:a0:
1d:16:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:59:15 2024 by rpki-client on console-fra.rpki-client.org