Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/NSMoGrb8UjkxT3iNIp7-GNFYzMI.roa
File: NSMoGrb8UjkxT3iNIp7-GNFYzMI.roa (raw, json)
Hash identifier: GxjG20ftfbn5mmY2cWQO9hCEaGZvOYda17BHIMG6X2w=
Subject key identifier: 35:23:28:1A:B6:FC:52:39:31:4F:78:8D:22:9E:FE:18:D1:58:CC:C2
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 018E57AA582956B2CD9EB44DD99D23566CF2
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/NSMoGrb8UjkxT3iNIp7-GNFYzMI.roa
Signing time: Tue 19 Mar 2024 17:02:45 +0000
ROA not before: Tue 19 Mar 2024 17:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34177
IP address blocks: 5.133.68.0/22 maxlen: 22
62.193.32.0/19 maxlen: 19
62.244.84.0/22 maxlen: 22
62.244.86.0/23 maxlen: 23
62.244.88.0/23 maxlen: 23
62.244.89.0/24 maxlen: 24
62.244.96.0/22 maxlen: 22
62.244.112.0/22 maxlen: 22
62.244.117.0/24 maxlen: 24
62.244.119.0/24 maxlen: 24
78.31.40.0/21 maxlen: 21
78.109.240.0/20 maxlen: 20
80.245.16.0/20 maxlen: 20
82.210.0.0/19 maxlen: 19
82.210.32.0/19 maxlen: 19
83.118.192.0/19 maxlen: 19
83.142.144.0/21 maxlen: 21
91.90.96.0/21 maxlen: 21
94.228.176.0/20 maxlen: 20
95.141.96.0/20 maxlen: 20
159.180.224.0/19 maxlen: 19
176.57.32.0/21 maxlen: 21
178.16.160.0/20 maxlen: 20
185.4.44.0/22 maxlen: 22
185.5.108.0/22 maxlen: 22
185.18.208.0/22 maxlen: 22
185.19.48.0/22 maxlen: 22
185.41.4.0/22 maxlen: 22
185.81.52.0/22 maxlen: 22
185.132.116.0/22 maxlen: 22
185.156.80.0/22 maxlen: 22
185.163.28.0/22 maxlen: 22
185.171.156.0/22 maxlen: 22
185.180.244.0/22 maxlen: 22
185.191.92.0/22 maxlen: 22
185.211.24.0/22 maxlen: 22
185.213.160.0/22 maxlen: 22
185.218.248.0/22 maxlen: 22
185.249.28.0/22 maxlen: 22
194.213.124.0/23 maxlen: 23
195.15.128.0/18 maxlen: 18
195.49.132.0/22 maxlen: 22
195.200.160.0/19 maxlen: 19
212.106.96.0/19 maxlen: 19
2001:ab8::/29 maxlen: 32
2a01:4e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:57:aa:58:29:56:b2:cd:9e:b4:4d:d9:9d:23:56:6c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Mar 19 17:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3523281ab6fc5239314f788d229efe18d158ccc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:74:75:3d:91:d4:e5:77:89:01:3c:97:2b:
77:51:c0:46:da:bc:60:b0:fe:2d:46:36:31:94:36:
2f:aa:8e:04:6d:77:a3:4a:c2:10:d8:44:f6:71:16:
ee:30:d7:ad:f2:d2:a0:7e:6a:20:7a:73:6b:10:cb:
83:ed:3f:34:93:c6:fc:d0:c0:88:42:9c:42:40:f3:
22:ca:5b:e4:96:b1:6b:1d:46:86:a1:96:4b:77:fc:
1e:8f:ed:c8:2f:ef:8d:38:87:0a:c9:f2:9d:99:27:
26:c4:47:5d:23:c8:40:e1:31:36:2d:18:b5:7d:47:
e1:a1:de:1b:df:74:97:53:92:fb:89:ba:38:bb:e9:
42:76:dc:bc:43:b9:df:5d:bd:cb:93:40:ce:cb:e7:
05:8c:20:3b:f3:7e:a5:50:27:f5:71:5d:6b:ec:53:
53:1f:82:d3:0c:a9:4b:0f:af:57:c4:e7:07:ec:49:
19:91:1e:4f:cd:97:5d:57:06:31:6e:e2:ef:04:36:
b2:24:d9:9a:1f:e7:84:ec:ca:9a:e8:e7:48:d2:e0:
86:1d:a7:dd:bf:54:b8:d9:94:1f:de:19:c4:42:b1:
7d:93:de:09:18:4a:91:50:71:34:a1:55:7c:60:1c:
39:6b:12:4a:28:34:a2:59:e8:0b:88:6b:16:6f:46:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:28:1A:B6:FC:52:39:31:4F:78:8D:22:9E:FE:18:D1:58:CC:C2
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/NSMoGrb8UjkxT3iNIp7-GNFYzMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.68.0/22
62.193.32.0/19
62.244.84.0-62.244.89.255
62.244.96.0/22
62.244.112.0/22
62.244.117.0/24
62.244.119.0/24
78.31.40.0/21
78.109.240.0/20
80.245.16.0/20
82.210.0.0/18
83.118.192.0/19
83.142.144.0/21
91.90.96.0/21
94.228.176.0/20
95.141.96.0/20
159.180.224.0/19
176.57.32.0/21
178.16.160.0/20
185.4.44.0/22
185.5.108.0/22
185.18.208.0/22
185.19.48.0/22
185.41.4.0/22
185.81.52.0/22
185.132.116.0/22
185.156.80.0/22
185.163.28.0/22
185.171.156.0/22
185.180.244.0/22
185.191.92.0/22
185.211.24.0/22
185.213.160.0/22
185.218.248.0/22
185.249.28.0/22
194.213.124.0/23
195.15.128.0/18
195.49.132.0/22
195.200.160.0/19
212.106.96.0/19
IPv6:
2001:ab8::/29
2a01:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
8e:9c:5c:5d:49:87:70:8f:cf:00:53:84:13:dc:02:95:a9:16:
a5:14:92:59:6c:46:f8:32:0c:6b:ff:b0:e4:ad:62:9f:6b:65:
60:29:90:b7:70:06:f1:a0:83:a9:e7:8b:38:dd:f0:e1:66:ba:
53:2b:31:1d:42:1e:13:7d:d6:19:dd:d4:73:fc:61:5d:e6:e8:
1c:f0:b6:2b:15:33:bb:e7:dd:74:fa:00:e1:22:93:12:a7:6e:
fd:2c:00:3c:3b:08:f9:3f:32:0f:b1:ba:0c:13:62:e9:af:07:
8e:e1:a1:c8:e3:d8:39:9d:7b:32:53:63:ea:80:21:e2:83:20:
f9:4b:6a:a1:84:48:5c:68:81:a4:c9:72:34:fa:83:91:41:39:
10:3d:8b:ba:74:37:04:70:fe:2a:e9:49:6b:91:59:53:bf:eb:
b5:ba:3d:c9:9b:b1:e0:ad:b9:b8:c1:b7:94:19:62:a9:cb:41:
bb:9a:10:3f:69:ca:14:6c:a3:a9:3f:c9:b8:e1:64:f9:82:c2:
35:7f:26:36:60:ce:67:03:d6:c4:58:bf:6c:74:12:be:fd:ba:
dd:ca:7d:67:94:db:7a:76:c5:d9:c7:c3:80:d1:99:c3:44:03:
2e:ed:55:41:71:4f:66:b7:e1:72:64:aa:4b:18:ca:4b:a8:6e:
5b:16:07:da
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgISAY5XqlgpVrLNnrRN2Z0jVmzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx
MjdiOGMwHhcNMjQwMzE5MTcwMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTIzMjgxYWI2ZmM1MjM5MzE0Zjc4OGQyMjllZmUxOGQxNThjY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEd0dT2R1OV3iQE8lyt3UcBG2rxg
sP4tRjYxlDYvqo4EbXejSsIQ2ET2cRbuMNet8tKgfmogenNrEMuD7T80k8b80MCI
QpxCQPMiylvklrFrHUaGoZZLd/wej+3IL++NOIcKyfKdmScmxEddI8hA4TE2LRi1
fUfhod4b33SXU5L7ibo4u+lCdty8Q7nfXb3Lk0DOy+cFjCA7836lUCf1cV1r7FNT
H4LTDKlLD69XxOcH7EkZkR5PzZddVwYxbuLvBDayJNmaH+eE7Mqa6OdI0uCGHafd
v1S42ZQf3hnEQrF9k94JGEqRUHE0oVV8YBw5axJKKDSiWegLiGsWb0Z3gQIDAQAB
o4IDGTCCAxUwHQYDVR0OBBYEFDUjKBq2/FI5MU94jSKe/hjRWMzCMB8GA1UdIwQY
MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt
MzZlOWE3OWJkOTUwLzEvTlNNb0dyYjhVamt4VDNpTklwNy1HTkZZek1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw
LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCB/wQCAAEwgfgD
BAIFhUQDBAU+wSAwDAMEAj70VAMEAT70WAMEAj70YAMEAj70cAMEAD70dQMEAD70
dwMEA04fKAMEBE5t8AMEBFD1EAMEBlLSAAMEBVN2wAMEA1OOkAMEA1taYAMEBF7k
sAMEBF+NYAMEBZ+04AMEA7A5IAMEBLIQoAMEArkELAMEArkFbAMEArkS0AMEArkT
MAMEArkpBAMEArlRNAMEArmEdAMEArmcUAMEArmjHAMEArmrnAMEArm09AMEArm/
XAMEArnTGAMEArnVoAMEArna+AMEArn5HAMEAcLVfAMEBsMPgAMEAsMxhAMEBcPI
oAMEBdRqYDAUBAIAAjAOAwUDIAEKuAMFACoBTgAwDQYJKoZIhvcNAQELBQADggEB
AI6cXF1Jh3CPzwBThBPcApWpFqUUkllsRvgyDGv/sOStYp9rZWApkLdwBvGgg6nn
izjd8OFmulMrMR1CHhN91hnd1HP8YV3m6BzwtisVM7vn3XT6AOEikxKnbv0sADw7
CPk/Mg+xugwTYumvB47hocjj2DmdezJTY+qAIeKDIPlLaqGESFxogaTJcjT6g5FB
ORA9i7p0NwRw/irpSWuRWVO/67W6PcmbseCtubjBt5QZYqnLQbuaED9pyhRso6k/
ybjhZPmCwjV/JjZgzmcD1sRYv2x0Er79ut3KfWeU23p2xdnHw4DRmcNEAy7tVUFx
T2a34XJkqksYykuoblsWB9o=
-----END CERTIFICATE-----
Generated at Sun Jun 16 10:57:55 2024 by rpki-client on console-fra.rpki-client.org