Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/QKzUarPyC-lFcw7pY-B661QPNBo.roa
File: QKzUarPyC-lFcw7pY-B661QPNBo.roa (raw, json)
Hash identifier: ebBlQvbAH33D+YMv9wN6V4SJEslWaZfnl8JNvxdmrOM=
Subject key identifier: 40:AC:D4:6A:B3:F2:0B:E9:45:73:0E:E9:63:E0:7A:EB:54:0F:34:1A
Certificate issuer: /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial: 018CC79481225B3219A37838FE3C1EC7BC0E
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/QKzUarPyC-lFcw7pY-B661QPNBo.roa
Signing time: Tue 02 Jan 2024 00:30:47 +0000
ROA not before: Tue 02 Jan 2024 00:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204805
IP address blocks: 194.5.254.0/23 maxlen: 23
194.5.255.0/24 maxlen: 24
194.5.254.0/24 maxlen: 24
5.180.224.0/24 maxlen: 24
5.180.224.0/23 maxlen: 23
5.180.224.0/22 maxlen: 22
5.180.226.0/24 maxlen: 24
5.180.226.0/23 maxlen: 23
5.180.225.0/24 maxlen: 24
5.180.227.0/24 maxlen: 24
45.138.148.0/22 maxlen: 22
45.138.148.0/24 maxlen: 24
45.138.150.0/24 maxlen: 24
45.138.149.0/24 maxlen: 24
45.138.151.0/24 maxlen: 24
77.83.181.0/24 maxlen: 24
77.83.180.0/23 maxlen: 23
77.83.180.0/22 maxlen: 22
77.83.180.0/24 maxlen: 24
77.83.182.0/23 maxlen: 23
77.83.183.0/24 maxlen: 24
77.83.182.0/24 maxlen: 24
45.9.172.0/22 maxlen: 22
45.9.172.0/23 maxlen: 23
45.9.172.0/24 maxlen: 24
45.9.175.0/24 maxlen: 24
45.9.174.0/23 maxlen: 23
45.9.174.0/24 maxlen: 24
45.9.173.0/24 maxlen: 24
194.8.13.0/24 maxlen: 24
194.8.12.0/24 maxlen: 24
194.8.12.0/23 maxlen: 23
193.142.206.0/24 maxlen: 24
193.142.206.0/23 maxlen: 23
193.142.207.0/24 maxlen: 24
185.209.151.0/24 maxlen: 24
185.209.150.0/24 maxlen: 24
185.209.148.0/22 maxlen: 22
185.209.149.0/24 maxlen: 24
185.209.148.0/24 maxlen: 24
2a0b:47c0::/32 maxlen: 32
2a0b:47c0:4000::/36 maxlen: 36
2a0b:47c0:c000::/36 maxlen: 36
2a0b:47c0:9000::/36 maxlen: 36
2a0b:47c0:1000::/36 maxlen: 36
2a0b:47c0::/36 maxlen: 36
2a0b:47c0:a000::/36 maxlen: 36
2a0b:47c0:2000::/36 maxlen: 36
2a0b:47c0:7000::/36 maxlen: 36
2a0b:47c0:f000::/36 maxlen: 36
2a0b:47c0:d000::/36 maxlen: 36
2a0b:47c0:5000::/36 maxlen: 36
2a0b:47c0:b000::/36 maxlen: 36
2a0b:47c0:6000::/36 maxlen: 36
2a0b:47c0:e000::/36 maxlen: 36
2a0b:47c0:3000::/36 maxlen: 36
2a0b:47c0:8000::/36 maxlen: 36
2a0b:47c2:7000::/36 maxlen: 36
2a0b:47c2::/32 maxlen: 32
2a0b:47c2:8000::/36 maxlen: 36
2a0b:47c2::/36 maxlen: 36
2a0b:47c2:b000::/36 maxlen: 36
2a0b:47c2:3000::/36 maxlen: 36
2a0b:47c2:c000::/36 maxlen: 36
2a0b:47c2:1000::/36 maxlen: 36
2a0b:47c2:e000::/36 maxlen: 36
2a0b:47c2:6000::/36 maxlen: 36
2a0b:47c2:9000::/36 maxlen: 36
2a0b:47c2:4000::/36 maxlen: 36
2a0b:47c2:f000::/36 maxlen: 36
2a0b:47c2:2000::/36 maxlen: 36
2a0b:47c2:a000::/36 maxlen: 36
2a0b:47c2:5000::/36 maxlen: 36
2a0b:47c2:d000::/36 maxlen: 36
2a0b:47c1::/32 maxlen: 32
2a0b:47c1:5000::/36 maxlen: 36
2a0b:47c1:2000::/36 maxlen: 36
2a0b:47c1:a000::/36 maxlen: 36
2a0b:47c1:7000::/36 maxlen: 36
2a0b:47c1:f000::/36 maxlen: 36
2a0b:47c1:c000::/36 maxlen: 36
2a0b:47c1:9000::/36 maxlen: 36
2a0b:47c1:4000::/36 maxlen: 36
2a0b:47c1:1000::/36 maxlen: 36
2a0b:47c1::/36 maxlen: 36
2a0b:47c1:3000::/36 maxlen: 36
2a0b:47c1:e000::/36 maxlen: 36
2a0b:47c1:6000::/36 maxlen: 36
2a0b:47c1:8000::/36 maxlen: 36
2a0b:47c1:b000::/36 maxlen: 36
2a0b:47c1:d000::/36 maxlen: 36
2a0b:47c4:5000::/36 maxlen: 36
2a0b:47c4:2000::/36 maxlen: 36
2a0b:47c4::/36 maxlen: 36
2a0b:47c4::/32 maxlen: 32
2a0b:47c4:a000::/36 maxlen: 36
2a0b:47c4:7000::/36 maxlen: 36
2a0b:47c4:d000::/36 maxlen: 36
2a0b:47c4:8000::/36 maxlen: 36
2a0b:47c4:b000::/36 maxlen: 36
2a0b:47c4:6000::/36 maxlen: 36
2a0b:47c4:e000::/36 maxlen: 36
2a0b:47c4:3000::/36 maxlen: 36
2a0b:47c4:f000::/36 maxlen: 36
2a0b:47c4:c000::/36 maxlen: 36
2a0b:47c4:4000::/36 maxlen: 36
2a0b:47c4:9000::/36 maxlen: 36
2a0b:47c4:1000::/36 maxlen: 36
2a0f:cd80::/32 maxlen: 32
2a0b:47c3:f000::/36 maxlen: 36
2a0b:47c3::/32 maxlen: 32
2a0b:47c3:8000::/36 maxlen: 36
2a0b:47c3::/36 maxlen: 36
2a0b:47c3:b000::/36 maxlen: 36
2a0b:47c3:3000::/36 maxlen: 36
2a0b:47c3:d000::/36 maxlen: 36
2a0b:47c3:5000::/36 maxlen: 36
2a0b:47c3:c000::/36 maxlen: 36
2a0b:47c3:6000::/36 maxlen: 36
2a0b:47c3:e000::/36 maxlen: 36
2a0b:47c3:9000::/36 maxlen: 36
2a0b:47c3:1000::/36 maxlen: 36
2a0b:47c3:7000::/36 maxlen: 36
2a0b:47c3:4000::/36 maxlen: 36
2a0b:47c3:2000::/36 maxlen: 36
2a0b:47c3:a000::/36 maxlen: 36
2a0b:47c0::/29 maxlen: 29
2a0b:47c7::/32 maxlen: 32
2a0b:47c6:a000::/36 maxlen: 36
2a0b:47c6::/32 maxlen: 32
2a0b:47c6:8000::/36 maxlen: 36
2a0b:47c6::/36 maxlen: 36
2a0b:47c6:3000::/36 maxlen: 36
2a0b:47c6:b000::/36 maxlen: 36
2a0b:47c6:6000::/36 maxlen: 36
2a0b:47c6:e000::/36 maxlen: 36
2a0b:47c6:7000::/36 maxlen: 36
2a0b:47c6:4000::/36 maxlen: 36
2a0b:47c6:c000::/36 maxlen: 36
2a0b:47c6:1000::/36 maxlen: 36
2a0b:47c6:9000::/36 maxlen: 36
2a0b:47c6:f000::/36 maxlen: 36
2a0b:47c6:2000::/36 maxlen: 36
2a0b:47c6:d000::/36 maxlen: 36
2a0b:47c6:5000::/36 maxlen: 36
2a0b:47c5:2000::/36 maxlen: 36
2a0b:47c5::/32 maxlen: 32
2a0b:47c5:8000::/36 maxlen: 36
2a0b:47c5:3000::/36 maxlen: 36
2a0b:47c5:b000::/36 maxlen: 36
2a0b:47c5::/36 maxlen: 36
2a0b:47c5:d000::/36 maxlen: 36
2a0b:47c5:5000::/36 maxlen: 36
2a0b:47c5:a000::/36 maxlen: 36
2a0b:47c5:7000::/36 maxlen: 36
2a0b:47c5:f000::/36 maxlen: 36
2a0b:47c5:1000::/36 maxlen: 36
2a0b:47c5:c000::/36 maxlen: 36
2a0b:47c5:4000::/36 maxlen: 36
2a0b:47c5:9000::/36 maxlen: 36
2a0b:47c5:e000::/36 maxlen: 36
2a0b:47c5:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:81:22:5b:32:19:a3:78:38:fe:3c:1e:c7:bc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Validity
Not Before: Jan 2 00:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40acd46ab3f20be945730ee963e07aeb540f341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:ba:d8:e2:73:ea:9d:0b:e3:da:af:8f:c2:
72:f8:61:f3:37:45:59:43:39:0a:98:a3:2f:fc:9f:
8d:97:09:3e:2d:09:2b:63:0d:e7:22:7c:54:1b:b1:
2b:48:b7:2c:f5:ae:27:53:f0:e6:f9:88:75:07:4a:
3a:a8:cb:14:31:0a:93:e0:12:f3:3e:bd:bf:a0:98:
81:ee:50:bc:00:87:52:3c:5a:f9:c6:33:b7:f0:45:
bf:ee:bd:00:7e:78:16:33:ef:88:4c:41:22:67:81:
cb:49:40:ab:ad:0e:00:7c:a9:e4:82:68:c4:91:e5:
bf:08:95:56:32:38:1e:99:67:b7:84:78:bc:30:e9:
8b:4c:ee:d8:ec:8a:d0:a4:21:c7:5e:8b:18:8e:d5:
ee:ef:dd:38:9d:1d:b4:64:d4:5f:5e:9b:c0:89:6e:
d7:fa:2a:4e:8a:be:c6:80:b6:b5:e6:d1:78:55:c6:
11:09:e7:9a:bb:44:4e:0a:d5:00:75:69:97:ce:c9:
47:25:5d:4d:3e:e8:91:27:dc:a3:f2:59:40:ef:74:
81:11:cd:6d:d3:43:56:82:94:18:07:05:43:25:3f:
15:1e:d3:00:b7:89:e1:46:68:3c:b4:7c:54:c8:f4:
d5:97:7f:97:11:89:39:23:9e:cf:46:70:c0:e9:1d:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:D4:6A:B3:F2:0B:E9:45:73:0E:E9:63:E0:7A:EB:54:0F:34:1A
X509v3 Authority Key Identifier:
keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/QKzUarPyC-lFcw7pY-B661QPNBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.224.0/22
45.9.172.0/22
45.138.148.0/22
77.83.180.0/22
185.209.148.0/22
193.142.206.0/23
194.5.254.0/23
194.8.12.0/23
IPv6:
2a0b:47c0::/29
2a0f:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
98:85:4d:31:4f:67:f0:8a:c2:40:05:82:70:06:05:33:31:22:
95:ae:3b:7e:f9:6e:aa:4b:33:40:f7:f8:c9:5e:31:6a:c8:b3:
fd:78:71:81:fb:84:86:e0:48:e5:96:52:43:e1:eb:66:21:aa:
d2:94:c6:b1:83:0f:12:cb:e4:f1:96:86:8e:21:fe:5f:4a:11:
81:c9:66:d3:b5:db:76:31:2e:93:22:0a:d7:52:c5:cb:d5:f2:
89:0d:ca:cd:f7:0e:35:2c:0e:04:db:34:5c:3e:22:30:86:de:
cb:5c:32:60:d0:c2:71:a2:f0:fc:09:c7:49:15:c7:1a:a6:2e:
00:98:2d:8b:84:0a:fe:49:a3:6f:3a:1f:40:fc:c3:ef:74:0f:
9b:c3:ae:ee:61:1f:31:47:32:d0:d4:4d:17:79:dd:4e:f0:03:
6d:e8:08:a6:f6:e0:0b:41:c6:ee:d4:87:ec:23:93:8b:4b:f0:
be:ba:6e:50:7e:72:2b:33:28:61:a8:85:da:42:41:07:38:28:
9f:c5:df:b9:a2:c5:04:9b:5f:a5:d9:ea:ba:2d:14:f3:b9:4d:
c3:44:7c:7f:ff:e5:77:34:f0:72:e2:33:d0:3e:93:17:a1:f4:
a4:bc:be:01:b9:eb:6e:3b:50:d2:4d:43:a6:d7:81:5a:e2:0b:
a3:2e:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:08:47 2024 by rpki-client on console-ams.rpki-client.org