Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/VdL0fq7oXK6jrcdncNlJgB_xM0w.roa
File: VdL0fq7oXK6jrcdncNlJgB_xM0w.roa (raw, json)
Hash identifier: 0BZCnJWILBwoKHTIlar9NzggLgTl9A28yHVWsH0KifI=
Subject key identifier: 55:D2:F4:7E:AE:E8:5C:AE:A3:AD:C7:67:70:D9:49:80:1F:F1:33:4C
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 018F5317598B39C9C1594B6B248C9693E925
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/VdL0fq7oXK6jrcdncNlJgB_xM0w.roa
Signing time: Tue 07 May 2024 12:46:29 +0000
ROA not before: Tue 07 May 2024 12:46:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 5.35.96.0/23 maxlen: 23
5.35.98.0/23 maxlen: 23
31.135.8.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.11.0/24 maxlen: 24
31.135.12.0/23 maxlen: 23
31.135.14.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
62.181.44.0/24 maxlen: 24
62.181.53.0/24 maxlen: 24
62.181.54.0/23 maxlen: 23
78.24.216.0/21 maxlen: 21
79.143.72.0/23 maxlen: 23
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
83.136.235.0/24 maxlen: 24
86.110.194.0/24 maxlen: 24
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
86.110.215.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
89.169.28.0/23 maxlen: 23
89.169.30.0/23 maxlen: 23
91.107.120.0/21 maxlen: 21
91.228.224.0/23 maxlen: 23
92.63.192.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
109.172.4.0/23 maxlen: 23
109.172.6.0/23 maxlen: 23
109.172.108.0/22 maxlen: 22
109.172.112.0/23 maxlen: 23
109.172.114.0/23 maxlen: 23
149.154.64.0/23 maxlen: 23
149.154.66.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
176.123.168.0/23 maxlen: 23
176.123.170.0/23 maxlen: 23
176.123.172.0/23 maxlen: 23
176.123.174.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
188.120.240.0/21 maxlen: 21
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
188.120.249.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.252.0/24 maxlen: 24
188.120.253.0/24 maxlen: 24
188.120.254.0/23 maxlen: 23
212.57.115.0/24 maxlen: 24
212.57.116.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
212.57.122.0/24 maxlen: 24
212.57.124.0/23 maxlen: 23
212.57.126.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
2a01:230::/48 maxlen: 48
2a01:230:1::/48 maxlen: 48
2a01:230:2::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:17:59:8b:39:c9:c1:59:4b:6b:24:8c:96:93:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: May 7 12:46:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55d2f47eaee85caea3adc76770d949801ff1334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:01:31:31:15:f3:8f:b8:89:b0:99:5e:44:
33:fe:43:9b:49:91:6c:7e:bf:fb:00:17:b9:6d:ea:
73:2f:2f:a9:4f:1d:90:20:5d:51:e9:c3:67:84:15:
d6:e4:da:7b:f7:56:ab:f8:3d:64:d5:e4:a3:49:6f:
c4:40:bf:f6:f9:43:74:4f:c7:a7:a7:f8:3e:ca:9a:
46:5b:a6:f9:2c:b4:41:f1:11:89:d0:fd:ac:91:5e:
dc:c6:de:86:db:26:3e:80:24:5e:65:64:95:a4:a3:
1d:cc:0f:31:63:f4:f8:3a:ae:1d:d2:d4:c0:c0:a1:
81:c1:37:47:12:68:44:d9:93:e2:40:19:14:66:e7:
18:20:01:6b:32:cd:7a:73:5d:a5:41:48:97:63:2a:
eb:28:e2:c0:c6:63:e4:07:27:50:a1:19:aa:0f:60:
cf:55:f9:e9:5c:61:12:6f:e4:0d:63:6d:0f:50:ce:
d1:c2:45:8d:e7:5d:e1:9a:96:25:1f:46:84:99:e2:
7a:88:29:c4:b1:dc:cd:ff:c4:33:5c:06:fc:08:a1:
96:6d:56:6e:35:fe:38:1c:12:6c:13:05:20:6b:2b:
29:b6:09:e1:1b:0f:46:a0:1d:1a:9f:9b:75:c0:e7:
35:68:f4:01:bc:e9:01:9d:44:6f:c4:e4:dc:12:21:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D2:F4:7E:AE:E8:5C:AE:A3:AD:C7:67:70:D9:49:80:1F:F1:33:4C
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/VdL0fq7oXK6jrcdncNlJgB_xM0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.96.0/22
31.135.8.0/21
37.230.112.0/21
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
89.169.28.0/22
91.107.120.0/21
91.228.224.0/23
92.63.192.0/22
94.250.248.0/21
109.172.4.0/22
109.172.108.0-109.172.115.255
149.154.64.0/21
176.123.168.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0/19
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230::-2a01:230:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:80:2d:ae:ef:bc:7c:14:67:76:cb:e6:6b:9c:d8:19:94:65:
25:c0:3f:9d:d8:b3:ff:6c:63:7f:a8:ff:f0:88:4d:73:b2:a9:
cd:30:1d:94:37:49:cd:2f:89:13:e7:f8:fa:f7:92:63:f1:95:
70:65:3c:0b:8b:bc:37:64:c5:4b:5d:27:7a:34:a7:90:ad:96:
40:ba:25:2d:2d:93:92:7c:61:99:75:fe:34:d5:e3:3f:62:58:
4b:ec:38:ac:3c:b9:bb:3c:97:0a:bf:0d:b7:9c:70:70:33:5d:
64:19:be:62:af:a3:e4:03:0c:a1:84:5a:13:e4:4d:a5:08:2a:
86:a6:16:d5:9f:2e:4b:ec:dd:ae:6c:6a:f9:94:1a:38:f6:68:
0e:ad:cc:ca:1b:b9:15:a6:40:a3:c6:76:43:59:ad:55:e0:68:
c2:67:f5:dc:c5:78:61:e5:a4:6b:d1:a7:cc:a8:56:2e:84:a2:
77:04:12:37:3d:8f:87:2d:3c:80:c5:0c:54:07:3c:35:d3:9e:
23:41:d0:a5:ed:f0:e8:36:0b:52:b6:2a:f9:64:79:d5:81:20:
fa:d8:f5:27:fe:bf:0a:a2:ca:d9:0c:40:3a:60:fe:c0:04:a7:
6d:05:9c:95:7c:5f:4e:fb:d7:0b:59:6f:d0:a8:6f:6e:ff:e4:
ce:47:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:00:49 2024 by rpki-client on console-fra.rpki-client.org