Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/ZVHwincxuGBpv_mZ0I4uwO9S0D0.roa
File: ZVHwincxuGBpv_mZ0I4uwO9S0D0.roa (raw, json)
Hash identifier: brr9bWBdIi/B2Bf5wKgkRXmJyjEYEiMeE9nWLb2NVNg=
Subject key identifier: 65:51:F0:8A:77:31:B8:60:69:BF:F9:99:D0:8E:2E:C0:EF:52:D0:3D
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F6EDAFE6BD0C6F18940E65B060B21F0C6
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/ZVHwincxuGBpv_mZ0I4uwO9S0D0.roa
Signing time: Sun 12 May 2024 22:09:56 +0000
ROA not before: Sun 12 May 2024 22:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6e:da:fe:6b:d0:c6:f1:89:40:e6:5b:06:0b:21:f0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 12 22:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6551f08a7731b86069bff999d08e2ec0ef52d03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:6d:44:09:92:db:a5:fa:4e:b5:12:fb:32:
bf:c0:d8:2b:a6:d8:99:f0:b3:0b:fc:7a:23:cf:3d:
fd:c4:3b:b4:76:c1:e6:54:09:ff:fd:06:34:ed:4d:
25:42:5d:6a:b5:a9:e7:b8:b8:99:d4:e1:26:18:c2:
35:6b:95:52:8d:4d:b1:20:fb:37:63:62:f8:df:cc:
37:1e:85:4f:18:1e:41:42:97:6b:74:87:b6:f1:cc:
c3:0a:cf:c6:1f:d1:37:0f:e6:f9:f4:68:f6:56:bf:
8a:c4:77:57:7d:fa:37:34:c4:1c:82:a9:e4:75:82:
b8:ff:32:37:36:9b:33:09:a8:9a:b7:5c:75:83:f9:
8f:89:20:11:42:1d:f2:02:fe:5b:ea:e2:29:9a:15:
4e:0e:24:87:03:4b:9c:8a:6e:df:3d:68:e7:fb:88:
57:72:0b:e3:e8:65:c9:b9:9e:04:24:ee:15:03:80:
49:74:e4:b2:02:ce:22:3b:bc:f2:91:dd:79:fe:13:
a0:4c:34:cf:ba:4f:52:5b:e6:9b:64:2b:45:22:32:
71:7d:c6:8b:db:58:0e:00:3c:fe:bb:1d:65:d9:76:
49:62:84:35:2a:1e:36:11:53:58:c0:8c:25:dc:b8:
c7:fb:98:25:d3:ab:ae:30:d7:e2:b7:cb:80:9b:da:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:F0:8A:77:31:B8:60:69:BF:F9:99:D0:8E:2E:C0:EF:52:D0:3D
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/ZVHwincxuGBpv_mZ0I4uwO9S0D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:30:de:b9:84:f0:4e:51:23:de:0f:5d:78:97:89:a9:c7:74:
2f:1c:a4:b6:22:72:aa:f8:f2:3a:c7:57:61:cf:ca:28:6e:2c:
52:ed:58:ca:48:ec:75:84:9f:08:86:e5:ba:52:d8:d9:47:93:
5c:41:ad:9c:45:c2:7e:f9:8b:d7:88:ce:ea:3d:c9:8b:b8:d8:
c4:19:b8:fa:c4:48:fd:ec:3f:b0:68:20:0e:c2:52:46:e4:39:
93:03:c6:11:fc:57:89:eb:93:29:46:e6:d3:e7:ae:72:6c:d3:
e3:06:30:d4:5b:3e:6f:5c:66:6a:c5:7a:e6:4a:e9:8d:dc:8f:
0c:29:e6:33:df:89:4b:c5:a5:3c:c4:08:10:9d:f3:5a:06:b6:
9e:5e:58:cd:b5:ca:22:b7:88:fb:d1:24:d2:e9:94:e5:1b:c5:
63:cd:d9:2a:c6:e1:52:ac:f0:8c:65:24:d5:05:74:c6:f1:83:
5d:e6:94:ce:e0:b9:5e:34:ee:f2:65:00:df:e1:b0:c6:4c:53:
0c:8d:f1:b8:5f:01:be:f6:e1:95:2c:ca:87:fc:c5:9e:4b:e6:
9a:5c:ed:e0:15:b0:34:c5:44:c2:39:0c:f9:81:ac:bb:39:01:
b7:ba:c2:d9:33:f5:75:0a:0f:5e:a4:c1:59:00:17:8c:d0:19:
3a:30:02:1b
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgISAY9u2v5r0MbxiUDmWwYLIfDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjQwNTEyMjIwOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTUxZjA4YTc3MzFiODYwNjliZmY5OTlkMDhlMmVjMGVmNTJkMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIZtRAmS26X6TrUS+zK/wNgrptiZ
8LML/Hojzz39xDu0dsHmVAn//QY07U0lQl1qtannuLiZ1OEmGMI1a5VSjU2xIPs3
Y2L438w3HoVPGB5BQpdrdIe28czDCs/GH9E3D+b59Gj2Vr+KxHdXffo3NMQcgqnk
dYK4/zI3NpszCaiat1x1g/mPiSARQh3yAv5b6uIpmhVODiSHA0ucim7fPWjn+4hX
cgvj6GXJuZ4EJO4VA4BJdOSyAs4iO7zykd15/hOgTDTPuk9SW+abZCtFIjJxfcaL
21gOADz+ux1l2XZJYoQ1Kh42EVNYwIwl3LjH+5gl06uuMNfit8uAm9r/3wIDAQAB
o4IDGDCCAxQwHQYDVR0OBBYEFGVR8Ip3Mbhgab/5mdCOLsDvUtA9MB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvWlZId2luY3h1R0Jwdl9tWjBJNHV3TzlTMEQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLAYIKwYBBQUHAQcBAf8EggEbMIIBFzCB9wQCAAEwgfAD
AwAuDwMDAC7UAwQFLvngAwQGPknAAwQFPmGgAwQFPnGAAwQFPo2AAwQFTpwAAwQH
UOgAAwQHUO8AAwQFUsLAAwQEVCaQAwMDVNADAwBVEwMEBln+QAMEB118gAMEBW1s
wAMEB22jAAMEA546mAMDALALAwQDsErQAwQEshGQAwMAsugDBAK5LuADBAK5R9AD
BAK5SGADBAK5YVQDBAK5iiADBAK5yXgDBAa8cUADBAW8fIADBAW8fsADBAXDRqAD
BAXUFMADBAXUJeADBAXULaADBAbUfcADBAXVvAADBAbV4UADBAfV7IADBAXZRGAw
GwQCAAIwFQMFACoApUADBQMqAgIoAwUDKgIP4DANBgkqhkiG9w0BAQsFAAOCAQEA
OjDeuYTwTlEj3g9deJeJqcd0LxyktiJyqvjyOsdXYc/KKG4sUu1YykjsdYSfCIbl
ulLY2UeTXEGtnEXCfvmL14jO6j3Ji7jYxBm4+sRI/ew/sGggDsJSRuQ5kwPGEfxX
ieuTKUbm0+eucmzT4wYw1Fs+b1xmasV65krpjdyPDCnmM9+JS8WlPMQIEJ3zWga2
nl5YzbXKIreI+9Ek0umU5RvFY83ZKsbhUqzwjGUk1QV0xvGDXeaUzuC5XjTu8mUA
3+GwxkxTDI3xuF8BvvbhlSzKh/zFnkvmmlzt4BWwNMVEwjkM+YGsuzkBt7rC2TP1
dQoPXqTBWQAXjNAZOjACGw==
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:57:29 2024 by rpki-client on console-fra.rpki-client.org