Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/VuxsPuHqELXN7rYQyrQl5rgwbGU.roa
File: VuxsPuHqELXN7rYQyrQl5rgwbGU.roa (raw, json)
Hash identifier: lTTtJ4aYTG4OkgmqS/tg5o3bTqxRYiR7e9BboObghHE=
Subject key identifier: 56:EC:6C:3E:E1:EA:10:B5:CD:EE:B6:10:CA:B4:25:E6:B8:30:6C:65
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018CC7946A6DA7E4C3E17B048E5E1EE1EB6B
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/VuxsPuHqELXN7rYQyrQl5rgwbGU.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.100.58.0/24 maxlen: 24
168.199.200.0/24 maxlen: 24
168.199.201.0/24 maxlen: 24
168.199.202.0/24 maxlen: 24
168.199.203.0/24 maxlen: 24
168.199.240.0/24 maxlen: 24
168.199.242.0/24 maxlen: 24
168.199.241.0/24 maxlen: 24
168.199.243.0/24 maxlen: 24
168.199.244.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
168.199.246.0/24 maxlen: 24
168.199.248.0/24 maxlen: 24
168.199.247.0/24 maxlen: 24
168.199.249.0/24 maxlen: 24
168.199.250.0/24 maxlen: 24
168.199.251.0/24 maxlen: 24
168.199.252.0/24 maxlen: 24
168.199.253.0/24 maxlen: 24
168.199.146.0/24 maxlen: 24
168.199.147.0/24 maxlen: 24
168.199.148.0/24 maxlen: 24
168.199.149.0/24 maxlen: 24
168.199.150.0/24 maxlen: 24
168.199.151.0/24 maxlen: 24
168.199.152.0/24 maxlen: 24
168.199.153.0/24 maxlen: 24
168.199.154.0/24 maxlen: 24
168.199.155.0/24 maxlen: 24
168.199.156.0/24 maxlen: 24
168.199.157.0/24 maxlen: 24
168.199.158.0/24 maxlen: 24
168.199.159.0/24 maxlen: 24
168.199.164.0/24 maxlen: 24
168.199.165.0/24 maxlen: 24
168.199.166.0/24 maxlen: 24
168.199.167.0/24 maxlen: 24
168.199.168.0/24 maxlen: 24
168.199.169.0/24 maxlen: 24
168.199.170.0/24 maxlen: 24
168.199.171.0/24 maxlen: 24
168.199.172.0/24 maxlen: 24
168.199.173.0/24 maxlen: 24
168.199.174.0/24 maxlen: 24
168.199.175.0/24 maxlen: 24
168.199.176.0/24 maxlen: 24
168.199.177.0/24 maxlen: 24
168.199.178.0/24 maxlen: 24
168.199.179.0/24 maxlen: 24
168.199.180.0/24 maxlen: 24
168.199.181.0/24 maxlen: 24
168.199.182.0/24 maxlen: 24
168.199.183.0/24 maxlen: 24
168.199.184.0/24 maxlen: 24
168.199.185.0/24 maxlen: 24
168.199.186.0/24 maxlen: 24
168.199.187.0/24 maxlen: 24
168.199.188.0/24 maxlen: 24
168.199.189.0/24 maxlen: 24
168.199.190.0/24 maxlen: 24
168.199.191.0/24 maxlen: 24
168.199.196.0/24 maxlen: 24
168.199.197.0/24 maxlen: 24
168.199.198.0/24 maxlen: 24
168.199.199.0/24 maxlen: 24
168.199.254.0/24 maxlen: 24
168.199.255.0/24 maxlen: 24
168.199.132.0/24 maxlen: 24
168.199.133.0/24 maxlen: 24
168.199.134.0/24 maxlen: 24
168.199.135.0/24 maxlen: 24
168.199.136.0/24 maxlen: 24
168.199.137.0/24 maxlen: 24
168.199.138.0/24 maxlen: 24
168.199.139.0/24 maxlen: 24
168.199.140.0/24 maxlen: 24
168.199.141.0/24 maxlen: 24
168.199.142.0/24 maxlen: 24
168.199.143.0/24 maxlen: 24
168.199.144.0/24 maxlen: 24
168.199.145.0/24 maxlen: 24
92.50.14.0/24 maxlen: 24
92.50.15.0/24 maxlen: 24
92.50.17.0/24 maxlen: 24
92.50.16.0/24 maxlen: 24
92.50.20.0/24 maxlen: 24
92.50.18.0/24 maxlen: 24
92.50.19.0/24 maxlen: 24
92.50.21.0/24 maxlen: 24
92.50.22.0/24 maxlen: 24
92.50.23.0/24 maxlen: 24
92.50.24.0/24 maxlen: 24
92.50.25.0/24 maxlen: 24
92.50.26.0/24 maxlen: 24
92.50.27.0/24 maxlen: 24
92.50.28.0/24 maxlen: 24
92.50.29.0/24 maxlen: 24
92.50.30.0/24 maxlen: 24
92.50.31.0/24 maxlen: 24
92.50.32.0/24 maxlen: 24
92.50.33.0/24 maxlen: 24
92.50.34.0/24 maxlen: 24
92.50.35.0/24 maxlen: 24
92.50.36.0/24 maxlen: 24
92.50.37.0/24 maxlen: 24
92.50.38.0/24 maxlen: 24
92.50.39.0/24 maxlen: 24
92.50.40.0/24 maxlen: 24
92.50.41.0/24 maxlen: 24
92.50.42.0/24 maxlen: 24
92.50.43.0/24 maxlen: 24
92.50.44.0/24 maxlen: 24
92.50.48.0/24 maxlen: 24
92.50.49.0/24 maxlen: 24
92.50.50.0/24 maxlen: 24
92.50.51.0/24 maxlen: 24
92.50.45.0/24 maxlen: 24
92.50.46.0/24 maxlen: 24
92.50.47.0/24 maxlen: 24
92.50.52.0/24 maxlen: 24
92.50.53.0/24 maxlen: 24
92.50.54.0/24 maxlen: 24
92.50.55.0/24 maxlen: 24
92.50.56.0/24 maxlen: 24
92.50.57.0/24 maxlen: 24
92.50.58.0/24 maxlen: 24
92.50.59.0/24 maxlen: 24
92.50.60.0/24 maxlen: 24
92.50.61.0/24 maxlen: 24
92.50.62.0/24 maxlen: 24
92.50.63.0/24 maxlen: 24
192.95.80.0/24 maxlen: 24
192.95.81.0/24 maxlen: 24
192.95.82.0/24 maxlen: 24
192.95.83.0/24 maxlen: 24
192.95.84.0/24 maxlen: 24
192.95.85.0/24 maxlen: 24
192.95.86.0/24 maxlen: 24
192.95.87.0/24 maxlen: 24
192.95.88.0/24 maxlen: 24
192.95.89.0/24 maxlen: 24
192.95.90.0/24 maxlen: 24
192.95.91.0/24 maxlen: 24
2001:678:8b4::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6a:6d:a7:e4:c3:e1:7b:04:8e:5e:1e:e1:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56ec6c3ee1ea10b5cdeeb610cab425e6b8306c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:73:2f:23:29:6a:11:bb:14:0c:4e:07:25:
92:3f:02:39:80:67:f9:ac:3a:3b:18:cb:6a:23:88:
24:fb:94:d3:15:06:3f:ab:bb:e7:15:9c:1e:88:03:
51:8d:c5:17:3f:a4:50:da:a1:e4:75:b3:d7:f6:5e:
5f:9f:6f:43:6b:11:53:f6:cd:96:c7:2f:d6:45:33:
83:59:cb:6c:29:68:d9:0b:a6:e5:25:93:cf:4e:91:
35:be:3e:6a:92:f2:9c:c6:34:45:67:a3:fc:2d:a8:
46:77:10:eb:a0:b6:d4:62:16:bf:ed:11:a7:8e:8a:
fe:f5:74:56:3d:7a:e5:76:01:6e:c7:61:29:9c:6e:
ce:c5:db:9d:f6:45:bd:b4:ba:c8:00:c3:20:24:79:
c3:96:df:4a:91:d8:bb:e3:92:05:69:4b:76:dd:27:
d4:91:e4:9d:6e:6d:fc:8a:11:09:a7:d0:99:78:87:
6d:56:34:3d:ff:61:8b:b5:a6:e8:f7:bd:0a:25:7c:
0f:a0:6c:5f:9d:41:b5:74:3c:5d:f9:5f:70:b5:c3:
d7:6d:c8:29:49:32:89:53:11:59:a8:c3:ee:53:ab:
5d:e2:24:f1:01:39:88:ea:3f:75:a5:38:c8:cb:ac:
8b:4a:1e:c8:f1:9d:73:c8:19:4b:70:4b:3f:cc:8e:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:6C:3E:E1:EA:10:B5:CD:EE:B6:10:CA:B4:25:E6:B8:30:6C:65
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/VuxsPuHqELXN7rYQyrQl5rgwbGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.14.0-92.50.63.255
168.199.132.0-168.199.159.255
168.199.164.0-168.199.191.255
168.199.196.0-168.199.203.255
168.199.240.0/20
185.100.58.0/24
192.95.80.0-192.95.91.255
IPv6:
2001:678:8b4::/48
Signature Algorithm: sha256WithRSAEncryption
3f:68:cd:e0:c1:44:d8:84:94:ea:7e:3c:bc:e8:87:4a:a6:9b:
3d:14:a1:c4:47:cb:45:9f:c2:f4:bc:44:0d:34:a2:8a:1b:60:
6b:7c:d1:67:ea:ea:83:c3:64:c8:d3:58:3c:9f:6c:f8:ed:7c:
0a:5a:2b:a2:98:3f:29:48:fd:a1:a6:77:7d:66:90:42:cd:41:
5f:cf:d3:a5:f0:0b:54:cd:10:d6:0f:2e:0b:7a:ea:da:65:93:
04:4f:ee:b5:85:43:15:68:f0:18:e2:e3:4a:91:f1:f7:be:bd:
04:56:16:8a:83:fc:67:af:8b:eb:24:8a:d0:9b:aa:c5:bc:d8:
64:69:c1:38:9d:bc:15:1f:05:ed:ab:e2:ff:b3:c4:2f:d0:23:
3a:26:34:cf:72:9d:64:c1:e1:b2:81:c6:dd:3d:cd:d2:db:ac:
b3:ad:93:30:3c:a5:c5:dc:63:65:82:6c:02:1b:c7:4e:57:d6:
b7:6a:f0:e3:2d:24:ff:0c:86:a7:c6:f3:0a:13:d3:27:11:13:
be:1f:62:c2:14:8e:4b:6c:6e:6c:1a:ca:fa:87:54:99:b6:de:
7a:53:5f:b5:3b:15:be:9a:8b:82:39:76:b7:1e:84:a0:6a:52:
e7:e9:0f:e1:3a:82:9b:7f:e3:0e:10:6f:e4:93:4b:72:6d:d8:
b6:df:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:02:53 2024 by rpki-client on console-ams.rpki-client.org