Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/r0I06l1xvTJoOCVD2mUVhM9RAmA.roa
File: r0I06l1xvTJoOCVD2mUVhM9RAmA.roa (raw, json)
Hash identifier: 7qWwgMYu91KFamGO489crb8mmz98g3gS8jhw+/hvbOM=
Subject key identifier: AF:42:34:EA:5D:71:BD:32:68:38:25:43:DA:65:15:84:CF:51:02:60
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018F2986FB06BE9E891BB6082068E11215BA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/r0I06l1xvTJoOCVD2mUVhM9RAmA.roa
Signing time: Mon 29 Apr 2024 11:04:23 +0000
ROA not before: Mon 29 Apr 2024 11:04:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/23 maxlen: 24
45.143.55.0/24 maxlen: 24
45.145.44.0/23 maxlen: 24
45.145.47.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/22 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/23 maxlen: 24
89.39.164.0/23 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/22 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.184.134.0/24 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.205.190.0/23 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/23 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:86:fb:06:be:9e:89:1b:b6:08:20:68:e1:12:15:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 29 11:04:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af4234ea5d71bd3268382543da651584cf510260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:43:6b:e0:02:b3:2b:de:c5:10:c7:38:44:
06:40:22:75:6b:ec:a7:59:4a:74:b2:6a:1a:8b:b4:
e4:b9:51:60:fc:59:a6:83:bc:62:25:bc:60:9e:67:
5c:02:e3:fd:d9:18:fb:74:39:5c:0b:87:4f:41:b3:
9e:be:94:1e:0d:38:b2:37:d3:68:0a:00:fe:6b:c2:
15:f5:c7:cc:b5:92:4e:0d:e2:b2:38:88:34:f6:0c:
71:fb:d5:02:89:de:2b:28:03:ca:92:e2:85:f8:7b:
48:71:38:96:ca:b8:a6:7b:53:5b:32:d5:f5:0c:33:
c9:1f:35:f7:aa:b6:62:05:f5:25:40:22:3e:f1:e0:
6a:7f:b0:f3:29:99:ba:da:7a:1d:49:d3:3b:b1:4b:
1b:42:4c:43:99:bb:ef:4b:51:43:51:77:08:48:c3:
10:8e:45:c6:79:34:ba:e4:bd:b6:59:85:fd:ee:1e:
b6:a6:bf:29:91:cf:da:b6:82:6f:4e:1a:52:d4:14:
e1:6f:f3:fc:5d:7e:df:bb:00:6d:db:1c:28:57:6c:
2b:fd:3c:ab:2b:b8:10:69:eb:49:0c:58:60:38:c2:
16:4e:94:5d:5d:c6:6f:35:b9:dc:f9:24:35:52:24:
26:ec:8d:02:c9:51:ac:0e:4d:27:fe:e0:24:f7:42:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:34:EA:5D:71:BD:32:68:38:25:43:DA:65:15:84:CF:51:02:60
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/r0I06l1xvTJoOCVD2mUVhM9RAmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.149.0-45.91.150.255
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/23
45.143.55.0/24
45.145.44.0/23
45.145.47.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/22
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/22
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0-185.184.134.255
185.192.18.0/23
185.205.188.0/24
185.205.190.0/23
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0-188.240.74.255
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
0c:1e:85:83:66:ef:0a:30:d4:86:10:0e:1f:ca:e1:1f:f1:1e:
ae:ea:1b:1c:73:d7:d3:05:4c:92:e5:08:5f:e4:d1:5e:bb:b6:
71:cd:4c:36:2a:67:09:95:2c:50:bd:73:05:21:92:11:a7:7b:
cc:6a:87:cb:cd:80:9c:40:19:6e:22:3e:5e:60:1c:44:3c:7f:
95:a3:a7:ff:de:a9:0a:37:43:2d:11:2f:eb:ad:ae:a9:b9:f8:
aa:06:52:59:a3:63:54:48:1e:c2:c4:14:31:6c:9b:51:cc:2f:
d0:3b:0f:90:c1:64:7c:73:4b:07:99:43:70:91:50:0f:74:09:
e2:8d:33:b3:c5:1a:93:34:7f:b5:4c:8e:98:f7:ae:fb:6f:84:
e2:19:cd:f4:24:b3:14:75:a4:ae:15:10:6d:4e:0a:69:8b:b9:
e7:dc:5e:7d:d6:a7:34:eb:a0:0b:e6:58:6c:cc:31:6f:6b:6a:
5f:4f:47:c3:52:55:02:e8:35:9e:17:52:12:73:71:79:c5:58:
90:35:99:77:2b:fe:99:f4:36:15:26:91:e3:6d:18:11:55:b6:
3d:ef:13:1a:4f:9d:66:d7:56:80:e4:d7:0d:44:90:4b:0b:f2:
29:1d:3f:3c:3f:96:b7:8c:8b:c6:e7:31:e7:c5:98:5f:c7:bf:
2d:30:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 08:48:10 2024 by rpki-client on console-ams.rpki-client.org