Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/UZqLeeGHS-zt7lhWwmRO8iEEARE.roa
File: UZqLeeGHS-zt7lhWwmRO8iEEARE.roa (raw, json)
Hash identifier: mmrh89bQIDnGTeKpf9yb7WCdP5z8w94WjfD017y+ip4=
Subject key identifier: 51:9A:8B:79:E1:87:4B:EC:ED:EE:58:56:C2:64:4E:F2:21:04:01:11
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 018CC6B7A62A27B332A6AC751AD91644736E
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/UZqLeeGHS-zt7lhWwmRO8iEEARE.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202196
IP address blocks: 37.10.27.0/24 maxlen: 24
37.10.28.0/24 maxlen: 24
37.10.29.0/24 maxlen: 24
37.10.30.0/24 maxlen: 24
37.10.31.0/24 maxlen: 24
37.10.25.0/24 maxlen: 24
37.10.26.0/24 maxlen: 24
37.10.30.0/23 maxlen: 23
37.10.41.0/24 maxlen: 24
37.10.42.0/24 maxlen: 24
37.10.43.0/24 maxlen: 24
37.10.44.0/24 maxlen: 24
37.10.40.0/24 maxlen: 24
37.10.45.0/24 maxlen: 24
37.10.46.0/24 maxlen: 24
5.57.20.0/24 maxlen: 24
5.57.21.0/24 maxlen: 24
5.57.20.0/23 maxlen: 23
37.10.1.0/24 maxlen: 24
37.10.24.0/24 maxlen: 24
37.10.24.0/23 maxlen: 23
91.195.236.0/24 maxlen: 24
2a01:5043:2007::/48 maxlen: 48
2a01:5043:7::/48 maxlen: 48
2a01:5041:4007::/48 maxlen: 48
2a01:5041:2007::/48 maxlen: 48
2a01:5041:7::/48 maxlen: 48
2a01:5041:4::/48 maxlen: 48
2a01:5041:2004::/48 maxlen: 48
2a01:5041:6004::/48 maxlen: 48
2a01:5041:4eff::/48 maxlen: 48
2a01:5041:2eff::/48 maxlen: 48
2a01:5041:eff::/48 maxlen: 48
2a01:5041:2010::/48 maxlen: 48
2a01:5042:eff::/48 maxlen: 48
2a01:5042:2eff::/48 maxlen: 48
2a01:5041:200f::/48 maxlen: 48
2a01:5041:f::/48 maxlen: 48
2a01:5041:ea20::/48 maxlen: 48
2a01:5041:200c::/48 maxlen: 48
2a01:5041:ea09::/48 maxlen: 48
2a01:5042:2001::/48 maxlen: 48
2a01:5042:1::/48 maxlen: 48
2a01:5041:ea15::/48 maxlen: 48
2a01:5041:2001::/48 maxlen: 48
2a01:5041:1::/48 maxlen: 48
2a01:5043:2eff::/48 maxlen: 48
2a01:5043:eff::/48 maxlen: 48
2a01:5041:4efe::/48 maxlen: 48
2a01:5041:2efe::/48 maxlen: 48
2a01:5041:efe::/48 maxlen: 48
2a01:5042:2007::/48 maxlen: 48
2a01:5042:7::/48 maxlen: 48
2a01:5043:2efd::/48 maxlen: 48
2a01:5043:efd::/48 maxlen: 48
2a01:5041:5000::/48 maxlen: 48
2a01:5041:1000::/48 maxlen: 48
2a01:5041:2000::/48 maxlen: 48
2a01:5041:6000::/48 maxlen: 48
2a01:5041::/48 maxlen: 48
2a01:5041:4000::/48 maxlen: 48
2a01:5041:3000::/48 maxlen: 48
2a01:5043:e::/48 maxlen: 48
2a01:5042:2003::/48 maxlen: 48
2a01:5042:3::/48 maxlen: 48
2a01:5041:4efd::/48 maxlen: 48
2a01:5041:2efd::/48 maxlen: 48
2a01:5041:efd::/48 maxlen: 48
2a01:5041:e::/48 maxlen: 48
2a01:5041:600e::/48 maxlen: 48
2a01:5041:500e::/48 maxlen: 48
2a01:5041:400e::/48 maxlen: 48
2a01:5041:200e::/48 maxlen: 48
2a01:5043::/48 maxlen: 48
2a01:5043:2000::/48 maxlen: 48
2a01:5041:6::/48 maxlen: 48
2a01:5041:2006::/48 maxlen: 48
2a01:5041:6006::/48 maxlen: 48
2a01:5041:3::/48 maxlen: 48
2a01:5041:5003::/48 maxlen: 48
2a01:5041:4003::/48 maxlen: 48
2a01:5041:3003::/48 maxlen: 48
2a01:5041:2003::/48 maxlen: 48
2a01:5041:6003::/48 maxlen: 48
2a01:5041:1003::/48 maxlen: 48
2a01:5041:ea14::/48 maxlen: 48
2a01:5041:3014::/48 maxlen: 48
2a01:5041:1014::/48 maxlen: 48
2a01:5043:b::/48 maxlen: 48
2a01:5041::/32 maxlen: 48
2a01:5041:ea16::/48 maxlen: 48
2a01:5041:2::/48 maxlen: 48
2a01:5042:b::/48 maxlen: 48
2a01:5042:200b::/48 maxlen: 48
2a01:5041:b::/48 maxlen: 48
2a01:5041:400b::/48 maxlen: 48
2a01:5041:200b::/48 maxlen: 48
2a01:5043:2003::/48 maxlen: 48
2a01:5043:3::/48 maxlen: 48
2a01:5041:2008::/48 maxlen: 48
2a01:5041:6008::/48 maxlen: 48
2a01:5041:8::/48 maxlen: 48
2a01:5042:e::/48 maxlen: 48
2a01:5042:200e::/48 maxlen: 48
2a01:5042:2efd::/48 maxlen: 48
2a01:5042:efd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a6:2a:27:b3:32:a6:ac:75:1a:d9:16:44:73:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=519a8b79e1874becedee5856c2644ef221040111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:94:58:cf:63:13:99:54:18:2a:13:78:42:08:
b6:ce:a5:ae:01:95:f4:45:59:b8:87:90:e9:75:55:
98:a5:e3:b6:e6:79:c4:b4:c3:b7:e3:86:a7:74:bd:
8b:2a:fd:79:53:94:8e:36:e3:5c:0b:4b:c5:85:8c:
13:7e:7a:68:83:d6:75:4c:ad:c4:26:53:bd:3c:91:
66:7f:3e:53:12:75:a2:a2:7f:b5:b0:81:7d:22:0d:
a3:be:8f:91:3b:06:e3:7a:a1:3e:05:27:b7:dd:3a:
61:29:ca:25:ee:89:1c:de:2c:47:0e:65:1d:60:f7:
60:e1:a5:1e:ec:bc:71:0c:f9:96:8f:c9:dc:34:aa:
d8:a7:d4:18:ef:fc:77:56:2c:20:26:8f:b9:28:84:
4e:e0:1a:2d:21:cc:98:3e:ee:62:2f:88:c0:76:6f:
9e:87:5d:38:7c:27:45:cd:23:c0:46:25:b6:d2:d6:
b9:fd:c2:fa:92:c4:c3:9c:00:ef:65:7a:99:84:0c:
04:d6:f5:88:8c:59:07:cf:bc:35:15:5a:83:b3:8c:
35:e3:2b:87:8e:91:23:f7:a3:05:fb:e7:a1:d3:bc:
68:13:b4:c0:cd:f6:04:fc:5d:78:5b:dc:46:82:24:
9c:93:58:39:65:ab:de:5f:da:cb:60:e4:c9:b8:4e:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9A:8B:79:E1:87:4B:EC:ED:EE:58:56:C2:64:4E:F2:21:04:01:11
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/UZqLeeGHS-zt7lhWwmRO8iEEARE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.20.0/23
37.10.1.0/24
37.10.24.0/21
37.10.40.0-37.10.46.255
91.195.236.0/24
IPv6:
2a01:5041::/32
2a01:5042:1::/48
2a01:5042:3::/48
2a01:5042:7::/48
2a01:5042:b::/48
2a01:5042:e::/48
2a01:5042:efd::/48
2a01:5042:eff::/48
2a01:5042:2001::/48
2a01:5042:2003::/48
2a01:5042:2007::/48
2a01:5042:200b::/48
2a01:5042:200e::/48
2a01:5042:2efd::/48
2a01:5042:2eff::/48
2a01:5043::/48
2a01:5043:3::/48
2a01:5043:7::/48
2a01:5043:b::/48
2a01:5043:e::/48
2a01:5043:efd::/48
2a01:5043:eff::/48
2a01:5043:2000::/48
2a01:5043:2003::/48
2a01:5043:2007::/48
2a01:5043:2efd::/48
2a01:5043:2eff::/48
Signature Algorithm: sha256WithRSAEncryption
97:cf:5c:36:21:2b:d2:03:0c:53:a7:ca:50:be:c5:80:1c:48:
e7:58:62:f5:96:07:40:c9:42:08:ba:af:0e:69:3f:66:a0:9c:
a0:40:5d:4b:fa:37:98:11:16:1b:f4:79:b0:05:ee:89:f5:8f:
e0:6f:93:b9:a5:67:9a:26:dc:04:d1:b7:7b:a1:62:55:8c:27:
1d:6f:1a:4b:a7:e5:bb:89:64:29:15:3d:b3:11:e3:a9:81:90:
59:f8:db:34:57:0d:8e:2f:c8:6f:ac:29:94:dc:7c:5b:0a:75:
c3:29:8d:aa:d5:c7:dd:3d:d9:bb:a4:11:4c:ce:02:2d:51:8d:
38:80:eb:f7:ab:b0:a4:e3:b1:98:70:0a:7a:f6:51:0e:9d:7d:
df:72:3a:00:0f:e5:54:98:b2:a3:7d:f7:7a:a8:26:b3:d4:f7:
a2:47:cd:7c:90:3b:64:da:d0:ae:0f:43:3e:86:92:e8:01:31:
7e:56:1f:cd:6c:70:df:55:db:64:a8:e7:4b:25:64:f6:35:aa:
ea:19:ee:b7:e0:9c:76:f9:f8:b1:f1:f8:0d:02:65:49:6d:c2:
19:3d:23:23:f2:b6:48:08:ab:30:11:32:91:82:f5:3d:69:02:
58:f6:2d:cd:81:3f:76:44:57:fa:7d:76:51:29:71:3a:e3:bb:
51:3b:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:10:47 2024 by rpki-client on console-ams.rpki-client.org