Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/8afVJtuNsr-lF6l8NXk1TWeB9S8.roa
File: 8afVJtuNsr-lF6l8NXk1TWeB9S8.roa (raw, json)
Hash identifier: UtbPQW8CA2gfSWYFpJAakeWl+UxwQ3yKmMhrHaDHeVA=
Subject key identifier: F1:A7:D5:26:DB:8D:B2:BF:A5:17:A9:7C:35:79:35:4D:67:81:F5:2F
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018E56B151CF219584F096C020E68239F36C
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/8afVJtuNsr-lF6l8NXk1TWeB9S8.roa
Signing time: Tue 19 Mar 2024 12:30:45 +0000
ROA not before: Tue 19 Mar 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41164
IP address blocks: 46.212.0.0/17 maxlen: 17
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.214.0/24 maxlen: 24
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:b1:51:cf:21:95:84:f0:96:c0:20:e6:82:39:f3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Mar 19 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a7d526db8db2bfa517a97c3579354d6781f52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:ba:9f:4d:2f:86:75:04:b4:58:26:ca:d8:
1b:12:93:b2:c2:b4:26:53:fd:b8:54:1f:3e:d1:dc:
29:08:db:a1:b8:68:68:ce:e2:71:36:04:96:29:bc:
d5:73:2a:a2:8d:e1:a0:8e:6c:cb:ea:95:b3:5e:3f:
84:8c:73:6d:77:49:b0:7d:d0:43:82:a8:60:b6:75:
b2:31:46:0b:4e:0e:5c:14:c8:c0:c7:70:af:04:95:
4b:90:b9:3e:58:d4:2e:ae:03:70:e6:9c:56:ec:b0:
2f:8f:e1:b0:67:c8:fa:6d:be:9d:b5:8b:6d:38:e4:
e6:89:5d:bd:6d:60:5e:67:ae:51:87:1d:6b:db:de:
1e:6f:a2:16:88:3c:e8:2d:85:54:ee:ce:fa:34:d8:
0a:7b:b7:58:2c:71:7d:06:56:76:bc:58:57:45:37:
4e:70:97:4e:75:69:4b:b5:a2:29:c7:bd:6a:cb:44:
ca:e3:4e:12:ce:6a:2e:e2:d1:48:31:b2:b1:69:62:
78:64:8b:0a:fc:28:7d:0a:a9:55:4b:f3:c9:80:64:
0a:60:fc:99:ed:fb:db:e0:0f:dc:8c:d7:58:56:73:
ad:b5:34:97:f7:54:46:af:2a:55:c4:ca:22:86:bf:
8b:9d:61:7d:76:51:c9:b7:1d:ad:61:1b:67:b0:ff:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:D5:26:DB:8D:B2:BF:A5:17:A9:7C:35:79:35:4D:67:81:F5:2F
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/8afVJtuNsr-lF6l8NXk1TWeB9S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
46.249.224.0/19
62.73.252.0/24
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
84:d2:36:09:ef:76:db:3e:e5:53:97:ca:55:33:1c:36:1f:0d:
2e:77:ef:34:34:8f:21:b1:54:34:3f:e6:45:8e:82:9e:ed:76:
9f:47:8a:2b:95:7f:d7:b6:6a:1d:dc:c9:0e:b4:39:01:eb:d3:
12:ca:12:17:47:18:0d:88:c3:71:5c:57:6a:52:c5:8f:71:d3:
a6:de:d6:ee:30:14:40:b5:d2:3b:31:f5:a1:2d:7c:b2:d3:ad:
67:b0:a6:c0:ed:6c:90:1d:c8:ba:bf:24:54:2b:c8:22:de:f3:
93:49:f1:74:1f:b5:6f:cc:3d:23:32:76:37:5d:6a:f4:01:e4:
0a:f0:29:ed:4c:f2:fd:dc:40:e8:82:0f:65:68:a4:90:05:4b:
aa:14:4d:9c:b1:1a:6a:57:e5:c7:ef:e7:ed:0e:bd:9e:ed:6d:
c9:b6:fa:71:c2:77:8b:a5:aa:5d:4a:8e:fe:0e:7a:78:28:52:
7b:e5:ae:49:c6:b0:90:27:31:e8:83:4e:d0:d1:51:12:74:29:
50:e0:6a:30:df:48:6b:bd:56:e5:93:7e:75:17:4a:5c:74:e4:
78:f9:c5:73:28:df:27:16:f5:17:27:2f:ef:70:53:bb:86:e0:
80:e7:14:5e:26:12:af:8c:fa:bd:c3:5c:7b:20:f3:6d:dd:37:
e3:08:97:72
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY5WsVHPIZWE8JbAIOaCOfNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjQwMzE5MTIzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWE3ZDUyNmRiOGRiMmJmYTUxN2E5N2MzNTc5MzU0ZDY3ODFmNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHa6n00vhnUEtFgmytgbEpOywrQm
U/24VB8+0dwpCNuhuGhozuJxNgSWKbzVcyqijeGgjmzL6pWzXj+EjHNtd0mwfdBD
gqhgtnWyMUYLTg5cFMjAx3CvBJVLkLk+WNQurgNw5pxW7LAvj+GwZ8j6bb6dtYtt
OOTmiV29bWBeZ65Rhx1r294eb6IWiDzoLYVU7s76NNgKe7dYLHF9BlZ2vFhXRTdO
cJdOdWlLtaIpx71qy0TK404Szmou4tFIMbKxaWJ4ZIsK/Ch9CqlVS/PJgGQKYPyZ
7fvb4A/cjNdYVnOttTSX91RGrypVxMoihr+LnWF9dlHJtx2tYRtnsP/32wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPGn1SbbjbK/pRepfDV5NU1ngfUvMB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvOGFmVkp0dU5zci1sRjZsOE5YazFUV2VCOVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjB1BAIAATBvAwMALtQD
BAUu+eADBAA+SfwDBAU+YaADBAU+jYADBAVOnAADBAVSwsADAwNU0AMEBW1swAME
A7BK0AMEBLIRkAMDALLoAwQCuS7gAwQCuUfQAwQCuYogAwQCucl4AwQGvHFAAwQF
vHyAAwQFvH7AMA0EAgACMAcDBQMqAg/gMA0GCSqGSIb3DQEBCwUAA4IBAQCE0jYJ
73bbPuVTl8pVMxw2Hw0ud+80NI8hsVQ0P+ZFjoKe7XafR4orlX/Xtmod3MkOtDkB
69MSyhIXRxgNiMNxXFdqUsWPcdOm3tbuMBRAtdI7MfWhLXyy061nsKbA7WyQHci6
vyRUK8gi3vOTSfF0H7VvzD0jMnY3XWr0AeQK8CntTPL93EDogg9laKSQBUuqFE2c
sRpqV+XH7+ftDr2e7W3JtvpxwneLpapdSo7+Dnp4KFJ75a5JxrCQJzHog07Q0VES
dClQ4Gow30hrvVblk351F0pcdOR4+cVzKN8nFvUXJy/vcFO7huCA5xReJhKvjPq9
w1x7IPNt3TfjCJdy
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:53:19 2024 by rpki-client on console-fra.rpki-client.org