Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/aT5Kg_GQK58MoIyuL9Lkh8w3Zag.roa
File: aT5Kg_GQK58MoIyuL9Lkh8w3Zag.roa (raw, json)
Hash identifier: C4FB00BPWt8fs3dzWpHvQfJT12H4QxpYW28nhbnSvxw=
Subject key identifier: 69:3E:4A:83:F1:90:2B:9F:0C:A0:8C:AE:2F:D2:E4:87:CC:37:65:A8
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 0192E757C3380C37DA3A3EC0751223F121A8
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/aT5Kg_GQK58MoIyuL9Lkh8w3Zag.roa
Signing time: Fri 01 Nov 2024 10:49:01 +0000
ROA not before: Fri 01 Nov 2024 10:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34762
IP address blocks: 5.134.0.0/21 maxlen: 24
31.14.50.0/23 maxlen: 24
31.193.176.0/21 maxlen: 24
37.72.160.0/21 maxlen: 24
37.148.176.0/21 maxlen: 24
46.21.224.0/20 maxlen: 24
62.182.56.0/21 maxlen: 21
77.73.96.0/21 maxlen: 24
77.241.80.0/20 maxlen: 24
77.241.83.0/24 maxlen: 24
77.241.87.0/24 maxlen: 24
77.241.93.0/24 maxlen: 24
77.241.95.0/24 maxlen: 24
79.174.128.0/21 maxlen: 24
83.217.64.0/19 maxlen: 24
83.217.64.0/20 maxlen: 20
83.217.80.0/20 maxlen: 24
87.238.160.0/21 maxlen: 24
88.151.240.0/21 maxlen: 24
89.36.74.0/23 maxlen: 24
89.42.54.0/23 maxlen: 24
89.44.166.0/23 maxlen: 24
93.115.168.0/23 maxlen: 23
94.176.98.0/23 maxlen: 24
176.62.160.0/20 maxlen: 24
178.208.32.0/19 maxlen: 24
185.2.52.0/22 maxlen: 24
185.18.8.0/22 maxlen: 24
185.76.236.0/22 maxlen: 24
185.86.16.0/22 maxlen: 24
185.111.196.0/22 maxlen: 24
185.162.28.0/22 maxlen: 24
185.175.196.0/22 maxlen: 24
185.190.84.0/22 maxlen: 24
188.93.96.0/21 maxlen: 24
188.93.152.0/21 maxlen: 24
188.208.36.0/23 maxlen: 24
188.211.170.0/23 maxlen: 24
193.111.95.0/24 maxlen: 24
193.239.210.0/23 maxlen: 24
194.26.24.0/24 maxlen: 24
194.150.224.0/23 maxlen: 23
194.150.224.0/24 maxlen: 24
194.150.225.0/24 maxlen: 24
194.165.51.0/24 maxlen: 24
195.13.56.0/23 maxlen: 24
195.13.56.0/24 maxlen: 24
195.47.215.0/24 maxlen: 24
195.234.184.0/24 maxlen: 24
217.19.224.0/20 maxlen: 24
217.19.228.0/22 maxlen: 24
217.19.232.0/23 maxlen: 24
217.19.234.0/23 maxlen: 24
217.21.176.0/20 maxlen: 24
217.21.176.0/21 maxlen: 24
217.21.179.0/24 maxlen: 24
217.21.184.0/22 maxlen: 24
217.21.188.0/22 maxlen: 24
2a00:1c98::/32 maxlen: 64
2a00:1c98:fff0::/44 maxlen: 64
2a00:7000::/32 maxlen: 64
2a02:d08::/32 maxlen: 64
2a03:a800::/32 maxlen: 32
2a07:ca80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:57:c3:38:0c:37:da:3a:3e:c0:75:12:23:f1:21:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Nov 1 10:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=693e4a83f1902b9f0ca08cae2fd2e487cc3765a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:e4:f1:61:77:45:a1:cb:62:f3:e9:e4:3a:
2c:7b:f7:ed:3f:c7:d0:43:c9:f3:18:c3:25:cb:72:
1c:82:09:d9:cb:12:cf:e2:51:86:b0:15:15:c1:59:
de:0f:42:e8:33:75:15:0e:1f:7a:aa:a8:df:ff:ba:
68:b2:68:00:ad:55:65:8b:ee:46:a7:13:d2:70:4f:
f1:f2:77:9f:55:e4:4b:05:74:19:b1:0b:4f:d2:77:
22:2c:50:d2:67:8f:8d:e4:fc:ef:77:ba:47:34:cc:
cf:41:4c:1e:cc:2a:65:c9:74:83:65:db:b5:ad:c8:
5f:3d:41:4b:bb:a0:4d:c4:0c:6e:04:02:f5:51:9d:
2d:d8:4e:17:f0:fb:34:2c:57:f5:3e:72:db:1d:ef:
5c:d8:1c:02:c5:f6:d9:6d:7a:ec:c5:9b:cf:89:19:
c6:25:d8:43:88:a7:48:d3:5e:a4:1c:de:c2:fa:58:
2f:52:7c:01:82:e4:a5:18:4b:51:56:a2:f3:a7:9c:
e5:28:89:37:64:ed:09:c1:4e:e3:c4:3c:11:74:35:
de:24:c3:ac:85:39:d6:40:62:9b:4c:31:cf:2c:5c:
fb:4b:a4:04:4c:b4:91:1c:d0:14:5e:8f:b2:38:92:
8a:2f:b8:22:fa:01:d1:73:c4:b9:e1:a1:ea:c4:60:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3E:4A:83:F1:90:2B:9F:0C:A0:8C:AE:2F:D2:E4:87:CC:37:65:A8
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/aT5Kg_GQK58MoIyuL9Lkh8w3Zag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.0.0/21
31.14.50.0/23
31.193.176.0/21
37.72.160.0/21
37.148.176.0/21
46.21.224.0/20
62.182.56.0/21
77.73.96.0/21
77.241.80.0/20
79.174.128.0/21
83.217.64.0/19
87.238.160.0/21
88.151.240.0/21
89.36.74.0/23
89.42.54.0/23
89.44.166.0/23
93.115.168.0/23
94.176.98.0/23
176.62.160.0/20
178.208.32.0/19
185.2.52.0/22
185.18.8.0/22
185.76.236.0/22
185.86.16.0/22
185.111.196.0/22
185.162.28.0/22
185.175.196.0/22
185.190.84.0/22
188.93.96.0/21
188.93.152.0/21
188.208.36.0/23
188.211.170.0/23
193.111.95.0/24
193.239.210.0/23
194.26.24.0/24
194.150.224.0/23
194.165.51.0/24
195.13.56.0/23
195.47.215.0/24
195.234.184.0/24
217.19.224.0/20
217.21.176.0/20
IPv6:
2a00:1c98::/32
2a00:7000::/32
2a02:d08::/32
2a03:a800::/32
2a07:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:f7:be:ed:fd:90:49:34:07:e7:37:71:72:c6:55:e4:3b:0a:
32:f0:21:0b:ea:13:ba:a2:de:8d:5d:14:47:b2:a1:2c:f3:5c:
36:dd:f8:6d:9b:28:2c:07:90:e2:d6:21:4e:85:f3:15:f8:0a:
84:d0:b1:6a:63:88:ac:9b:fe:b1:f7:db:5e:66:6c:ef:20:6b:
e9:d4:73:1e:80:ed:dc:e7:eb:28:7a:be:d8:bf:ab:a6:de:75:
d1:b4:66:7a:10:4b:2a:0a:80:b6:88:74:7f:b1:41:c2:d3:61:
18:20:17:a8:bf:49:21:37:e0:72:a4:1e:ad:14:c9:5b:5b:f4:
b1:fd:95:e2:27:fc:d6:08:06:39:db:dd:0d:70:97:d1:af:24:
49:9a:55:29:56:0c:82:47:28:62:71:53:5a:a0:20:d9:e1:b2:
e2:44:be:8a:67:17:c8:c1:cc:c7:6d:1c:37:7c:90:69:c2:71:
ca:2c:94:ae:7d:b2:06:68:15:f8:9d:40:7d:55:44:c3:97:6c:
6c:ff:3a:a6:cf:34:1e:73:8b:00:d2:d2:73:d0:67:26:ea:89:
15:cf:cd:cd:52:72:de:c3:48:74:1d:49:75:34:a0:9f:b1:80:
cb:ab:08:86:54:48:9e:c2:f9:06:bb:81:34:13:f2:0a:b4:42:
41:81:00:a6
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgISAZLnV8M4DDfaOj7AdRIj8SGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1
YjkzNzcwHhcNMjQxMTAxMTA0OTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTNlNGE4M2YxOTAyYjlmMGNhMDhjYWUyZmQyZTQ4N2NjMzc2NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7rk8WF3RaHLYvPp5Dose/ftP8fQ
Q8nzGMMly3IcggnZyxLP4lGGsBUVwVneD0LoM3UVDh96qqjf/7posmgArVVli+5G
pxPScE/x8nefVeRLBXQZsQtP0nciLFDSZ4+N5Pzvd7pHNMzPQUwezCplyXSDZdu1
rchfPUFLu6BNxAxuBAL1UZ0t2E4X8Ps0LFf1PnLbHe9c2BwCxfbZbXrsxZvPiRnG
JdhDiKdI016kHN7C+lgvUnwBguSlGEtRVqLzp5zlKIk3ZO0JwU7jxDwRdDXeJMOs
hTnWQGKbTDHPLFz7S6QETLSRHNAUXo+yOJKKL7gi+gHRc8S54aHqxGAl/wIDAQAB
o4IDMzCCAy8wHQYDVR0OBBYEFGk+SoPxkCufDKCMri/S5IfMN2WoMB8GA1UdIwQY
MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt
ZDMzZjA4ZjNhNDhkLzEvYVQ1S2dfR1FLNThNb0l5dUw5TGtoOHczWmFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk
LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRwYIKwYBBQUHAQcBAf8EggE2MIIBMjCCAQMEAgABMIH8
AwQDBYYAAwQBHw4yAwQDH8GwAwQDJUigAwQDJZSwAwQELhXgAwQDPrY4AwQDTUlg
AwQETfFQAwQDT66AAwQFU9lAAwQDV+6gAwQDWJfwAwQBWSRKAwQBWSo2AwQBWSym
AwQBXXOoAwQBXrBiAwQEsD6gAwQFstAgAwQCuQI0AwQCuRIIAwQCuUzsAwQCuVYQ
AwQCuW/EAwQCuaIcAwQCua/EAwQCub5UAwQDvF1gAwQDvF2YAwQBvNAkAwQBvNOq
AwQAwW9fAwQBwe/SAwQAwhoYAwQBwpbgAwQAwqUzAwQBww04AwQAwy/XAwQAw+q4
AwQE2RPgAwQE2RWwMCkEAgACMCMDBQAqAByYAwUAKgBwAAMFACoCDQgDBQAqA6gA
AwUDKgfKgDANBgkqhkiG9w0BAQsFAAOCAQEAfPe+7f2QSTQH5zdxcsZV5DsKMvAh
C+oTuqLejV0UR7KhLPNcNt34bZsoLAeQ4tYhToXzFfgKhNCxamOIrJv+sffbXmZs
7yBr6dRzHoDt3OfrKHq+2L+rpt510bRmehBLKgqAtoh0f7FBwtNhGCAXqL9JITfg
cqQerRTJW1v0sf2V4if81ggGOdvdDXCX0a8kSZpVKVYMgkcoYnFTWqAg2eGy4kS+
imcXyMHMx20cN3yQacJxyiyUrn2yBmgV+J1AfVVEw5dsbP86ps80HnOLANLSc9Bn
JuqJFc/NzVJy3sNIdB1JdTSgn7GAy6sIhlRInsL5BruBNBPyCrRCQYEApg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:52 2024 by rpki-client on console-ams.rpki-client.org