Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/si1yhExQ_0nYACPoO2FmQ9ybWeo.roa
File: si1yhExQ_0nYACPoO2FmQ9ybWeo.roa (raw, json)
Hash identifier: 9LG/J61+GAJRp+fNz2NgfeylxTsuTUMLn/dXb0PPJuc=
Subject key identifier: B2:2D:72:84:4C:50:FF:49:D8:00:23:E8:3B:61:66:43:DC:9B:59:EA
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0190077F3091FD1217BF9B8337AA736E4C3C
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/si1yhExQ_0nYACPoO2FmQ9ybWeo.roa
Signing time: Tue 11 Jun 2024 13:31:34 +0000
ROA not before: Tue 11 Jun 2024 13:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45012
IP address blocks: 5.44.100.0/23 maxlen: 24
5.44.102.0/23 maxlen: 24
5.44.104.0/22 maxlen: 24
5.44.108.0/22 maxlen: 24
31.47.240.0/20 maxlen: 24
37.218.248.0/22 maxlen: 22
37.218.252.0/24 maxlen: 24
37.218.254.0/24 maxlen: 24
37.228.152.0/21 maxlen: 24
46.243.88.0/21 maxlen: 24
77.75.248.0/21 maxlen: 24
81.88.16.0/24 maxlen: 24
81.88.28.0/22 maxlen: 24
81.88.32.0/20 maxlen: 24
85.158.176.0/21 maxlen: 24
89.22.100.0/22 maxlen: 24
89.22.106.0/24 maxlen: 24
89.22.108.0/24 maxlen: 24
89.22.110.0/23 maxlen: 24
89.22.112.0/22 maxlen: 24
89.22.116.0/22 maxlen: 24
89.22.122.0/23 maxlen: 24
89.22.124.0/22 maxlen: 24
91.151.16.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
91.203.212.0/22 maxlen: 24
91.220.49.0/24 maxlen: 24
93.90.178.0/24 maxlen: 24
93.90.180.0/23 maxlen: 24
109.237.128.0/20 maxlen: 24
128.127.65.0/24 maxlen: 24
128.127.66.0/24 maxlen: 24
178.20.96.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
178.250.170.0/24 maxlen: 24
178.250.174.0/24 maxlen: 24
185.3.232.0/22 maxlen: 24
185.39.220.0/22 maxlen: 24
185.61.40.0/22 maxlen: 24
185.80.92.0/22 maxlen: 24
185.137.168.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
188.64.46.0/23 maxlen: 24
192.162.87.0/24 maxlen: 24
193.22.255.0/24 maxlen: 24
194.145.226.0/24 maxlen: 24
195.5.120.0/23 maxlen: 24
195.82.152.0/23 maxlen: 24
2a00:fa40:2000::/36 maxlen: 64
2a00:fa40:3000::/36 maxlen: 36
2a00:fa40:4000::/36 maxlen: 36
2a01:64c0::/32 maxlen: 32
2a02:2b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:7f:30:91:fd:12:17:bf:9b:83:37:aa:73:6e:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jun 11 13:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b22d72844c50ff49d80023e83b616643dc9b59ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:ac:dc:e2:e5:8c:ca:c3:98:3e:fd:2d:67:
6c:55:dd:64:3a:9b:17:06:bc:5b:1e:eb:71:57:cd:
66:71:94:23:3a:a7:81:21:a1:9d:c8:d5:0b:67:5b:
d2:ca:97:a3:88:85:99:e3:3d:ca:17:a3:f5:16:1e:
5a:d9:6c:72:47:33:7b:e3:86:29:53:25:d7:3d:49:
2d:5b:18:1c:88:7a:5f:6f:34:ea:72:4e:90:6d:f2:
cc:78:8b:1f:ad:cc:ac:23:3d:9b:0f:8f:ee:f8:49:
91:02:99:f0:f6:2a:f1:73:6f:2b:74:b0:e6:ba:48:
68:8c:5a:b2:1a:67:c6:f2:16:4d:56:8f:22:66:f5:
e3:b1:18:16:0a:58:43:0f:03:73:f9:05:8b:50:9f:
ac:99:35:0f:3f:6b:9d:b1:8e:64:1b:40:00:c2:44:
9a:83:49:50:cc:d8:43:46:19:a4:00:4e:31:f0:af:
18:89:ee:9c:4d:b9:d8:33:f9:d3:b3:b7:ab:cb:c1:
53:93:6b:9f:b8:4d:f0:93:24:45:8c:09:92:ab:d6:
c6:f8:df:16:f1:46:1a:9e:6e:39:96:8e:cc:00:10:
9f:3c:bd:23:67:34:05:e3:2f:cd:2a:dd:22:a3:3f:
40:44:16:e4:d6:36:f5:2d:a0:e9:0a:65:cf:e1:c9:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:72:84:4C:50:FF:49:D8:00:23:E8:3B:61:66:43:DC:9B:59:EA
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/si1yhExQ_0nYACPoO2FmQ9ybWeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.100.0-5.44.111.255
31.47.240.0/20
37.218.248.0-37.218.252.255
37.218.254.0/24
37.228.152.0/21
46.243.88.0/21
77.75.248.0/21
81.88.16.0/24
81.88.28.0-81.88.47.255
85.158.176.0/21
89.22.100.0/22
89.22.106.0/24
89.22.108.0/24
89.22.110.0-89.22.119.255
89.22.122.0-89.22.127.255
91.151.16.0/21
91.203.108.0/22
91.203.212.0/22
91.220.49.0/24
93.90.178.0/24
93.90.180.0/23
109.237.128.0/20
128.127.65.0-128.127.66.255
178.20.96.0/21
178.250.8.0/21
178.250.170.0/24
178.250.174.0/24
185.3.232.0/22
185.39.220.0/22
185.61.40.0/22
185.80.92.0/22
185.137.168.0/22
185.207.228.0/22
188.64.46.0/23
192.162.87.0/24
193.22.255.0/24
194.145.226.0/24
195.5.120.0/23
195.82.152.0/23
IPv6:
2a00:fa40:2000::-2a00:fa40:4fff:ffff:ffff:ffff:ffff:ffff
2a01:64c0::/32
2a02:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
3a:e8:87:d2:9e:1d:b8:48:ec:9a:3e:56:e5:7d:1e:34:22:19:
9b:cb:d1:58:a2:67:20:e0:6d:9a:c9:e5:cd:77:20:f5:b6:94:
b5:3c:76:ed:27:2d:bd:b9:37:70:8d:03:0d:07:5c:91:48:32:
b2:eb:b9:6d:f3:62:56:0c:df:e3:08:b4:3e:26:fd:6b:c3:9f:
21:76:a5:b8:19:70:9b:2f:9e:be:19:9a:1a:bc:51:26:29:f2:
e8:9e:cc:3e:37:f8:64:6a:0d:9e:0c:19:cf:08:b5:76:91:ae:
dd:3a:b5:91:58:93:0c:07:74:02:52:1e:44:81:37:28:ed:d1:
60:dd:95:71:1e:ba:af:f8:da:16:5d:71:45:63:09:d3:b8:72:
d1:99:cc:88:26:ca:17:16:59:07:9f:37:3d:77:cd:90:38:13:
85:ab:9b:ba:c2:97:5f:a2:14:b1:e0:a0:23:de:62:67:8a:8f:
4c:bb:41:c7:8f:39:ff:0b:46:fb:d7:da:42:67:2e:60:47:70:
4a:45:e2:a6:89:fe:b0:5a:eb:88:12:f8:15:d3:bc:b2:76:db:
4e:f3:5d:42:3d:6a:b9:64:13:e0:08:d6:3a:96:5b:88:4a:8c:
87:92:fd:09:e5:1d:4b:94:29:87:a2:24:f3:a2:39:54:2e:0b:
2c:20:b8:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgISAZAHfzCR/RIXv5uDN6pzbkw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1
ZmIwMmYwHhcNMjQwNjExMTMzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjJkNzI4NDRjNTBmZjQ5ZDgwMDIzZTgzYjYxNjY0M2RjOWI1OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvras3OLljMrDmD79LWdsVd1kOpsX
BrxbHutxV81mcZQjOqeBIaGdyNULZ1vSypejiIWZ4z3KF6P1Fh5a2WxyRzN744Yp
UyXXPUktWxgciHpfbzTqck6QbfLMeIsfrcysIz2bD4/u+EmRApnw9irxc28rdLDm
ukhojFqyGmfG8hZNVo8iZvXjsRgWClhDDwNz+QWLUJ+smTUPP2udsY5kG0AAwkSa
g0lQzNhDRhmkAE4x8K8Yie6cTbnYM/nTs7ery8FTk2ufuE3wkyRFjAmSq9bG+N8W
8UYanm45lo7MABCfPL0jZzQF4y/NKt0ioz9ARBbk1jb1LaDpCmXP4clx0QIDAQAB
o4IDTzCCA0swHQYDVR0OBBYEFLItcoRMUP9J2AAj6DthZkPcm1nqMB8GA1UdIwQY
MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt
NzQxYzFkOGRlYTJiLzEvc2kxeWhFeFFfMG5ZQUNQb08yRm1ROXliV2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi
LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYwYIKwYBBQUHAQcBAf8EggFSMIIBTjCCASIEAgABMIIB
GjAMAwQCBSxkAwQEBSxgAwQEHy/wMAwDBAMl2vgDBAAl2vwDBAAl2v4DBAMl5JgD
BAMu81gDBANNS/gDBABRWBAwDAMEAlFYHAMEBFFYIAMEA1WesAMEAlkWZAMEAFkW
agMEAFkWbDAMAwQBWRZuAwQDWRZwMAwDBAFZFnoDBAdZFgADBANblxADBAJby2wD
BAJby9QDBABb3DEDBABdWrIDBAFdWrQDBARt7YAwDAMEAIB/QQMEAIB/QgMEA7IU
YAMEA7L6CAMEALL6qgMEALL6rgMEArkD6AMEArkn3AMEArk9KAMEArlQXAMEArmJ
qAMEArnP5AMEAbxALgMEAMCiVwMEAMEW/wMEAMKR4gMEAcMFeAMEAcNSmDAmBAIA
AjAgMBADBgUqAPpAIAMGBCoA+kBAAwUAKgFkwAMFACoCK4AwDQYJKoZIhvcNAQEL
BQADggEBADroh9KeHbhI7Jo+VuV9HjQiGZvL0ViiZyDgbZrJ5c13IPW2lLU8du0n
Lb25N3CNAw0HXJFIMrLruW3zYlYM3+MItD4m/WvDnyF2pbgZcJsvnr4Zmhq8USYp
8uiezD43+GRqDZ4MGc8ItXaRrt06tZFYkwwHdAJSHkSBNyjt0WDdlXEeuq/42hZd
cUVjCdO4ctGZzIgmyhcWWQefNz13zZA4E4Wrm7rCl1+iFLHgoCPeYmeKj0y7QceP
Of8LRvvX2kJnLmBHcEpF4qaJ/rBa64gS+BXTvLJ2207zXUI9arlkE+AI1jqWW4hK
jIeS/QnlHUuUKYeiJPOiOVQuCywguEc=
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:18:44 2024 by rpki-client on console-fra.rpki-client.org