Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QwlL1b3rxuX0hCal_2HUhRY7n-Y.roa
File: QwlL1b3rxuX0hCal_2HUhRY7n-Y.roa (raw, json)
Hash identifier: PoHSKw+aobLkmgQfomRhGD7H5H3/V9SlVmgTSS3hhsY=
Subject key identifier: 43:09:4B:D5:BD:EB:C6:E5:F4:84:26:A5:FF:61:D4:85:16:3B:9F:E6
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0192FC456DFF9AB96EB730F8E38594FE7909
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QwlL1b3rxuX0hCal_2HUhRY7n-Y.roa
Signing time: Tue 05 Nov 2024 12:21:01 +0000
ROA not before: Tue 05 Nov 2024 12:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/20 maxlen: 20
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
212.169.64.0/18 maxlen: 18
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:45:6d:ff:9a:b9:6e:b7:30:f8:e3:85:94:fe:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Nov 5 12:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43094bd5bdebc6e5f48426a5ff61d485163b9fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:92:4a:34:54:a0:c7:69:e5:ba:07:d7:5f:
91:f7:c2:ad:af:16:bd:e4:fa:a5:4f:7d:46:72:6f:
51:bc:cf:69:7e:ed:1e:c8:99:91:c5:9f:0d:41:02:
7b:e3:1a:f3:5a:10:3b:25:5b:b8:ad:7f:1a:fa:9a:
70:8f:9c:80:73:81:07:23:2a:0b:a4:45:c3:c0:04:
7b:9b:99:4b:e5:19:93:38:a3:7f:8b:4b:b0:6e:03:
16:54:8f:df:b6:8d:10:83:bf:b4:fa:75:1f:2b:bf:
e6:69:c0:e3:9b:01:22:3c:6d:ac:75:a7:e8:99:df:
bd:1f:6c:8b:0e:05:80:4c:5d:3a:b8:41:95:3d:94:
70:60:cf:d7:80:70:cf:b9:9b:3c:01:9c:94:67:00:
ff:42:63:64:77:eb:cd:03:84:e4:ec:8f:92:b0:07:
a5:fb:c7:f9:ef:a6:d9:4a:47:d6:1a:bd:38:5f:df:
12:97:1c:1e:1a:f9:db:03:67:45:78:9e:08:58:31:
ec:37:47:73:2d:fa:0d:a5:96:ec:32:78:a0:59:85:
93:90:91:dc:69:54:05:79:fc:28:9b:5f:d4:fc:0e:
2a:4c:08:0f:fe:26:3c:8a:9d:62:d2:c7:97:5c:7e:
10:9b:21:7a:16:59:19:55:7b:1f:c7:7e:9a:27:3e:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:4B:D5:BD:EB:C6:E5:F4:84:26:A5:FF:61:D4:85:16:3B:9F:E6
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QwlL1b3rxuX0hCal_2HUhRY7n-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
212.169.64.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
75:97:4e:30:5b:2f:57:c2:45:d0:e6:bb:36:7b:2c:1a:a1:d8:
2d:0a:8c:08:ad:5e:01:76:51:56:b0:3b:0b:1e:82:f4:77:68:
6b:3f:10:cd:a2:21:6d:bb:5c:0b:6d:1b:8b:0a:60:f3:22:00:
ee:29:e5:b3:26:01:37:f1:94:85:71:bb:6b:a2:42:71:c9:bb:
01:ab:a6:37:ce:44:5f:1c:86:a8:6b:2e:c8:7a:0f:88:2f:b4:
88:67:0f:72:20:4d:1f:9a:9d:6e:0d:53:f5:08:19:9b:7f:aa:
c5:27:97:63:d2:92:2e:ae:d3:a8:5e:fa:22:80:fc:f4:bc:a8:
30:ea:01:78:a0:50:30:a5:6f:f4:d5:bd:be:8a:01:4e:22:03:
2b:b4:69:4b:45:dd:bb:52:ab:39:f3:0f:9a:d8:93:56:d8:47:
88:51:ce:20:7a:e7:84:5e:cd:12:bc:d3:3b:28:5b:68:e0:c7:
30:e1:77:61:4d:7d:fe:82:3d:b3:53:55:0a:02:b5:2a:a5:e8:
cf:ae:88:e0:6c:3e:80:6b:06:ae:0d:61:1a:2d:a8:a8:8f:4d:
57:42:87:2d:9a:fa:be:b5:95:47:64:89:69:6a:2d:b0:44:e6:
88:41:c7:0b:bf:83:f9:eb:df:3b:9f:8b:a3:08:20:74:91:0b:
17:56:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:35 2024 by rpki-client on console-ams.rpki-client.org