Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/6VLkJrSppWxh5IxGtrwPZn_LidE.roa
File: 6VLkJrSppWxh5IxGtrwPZn_LidE.roa (raw, json)
Hash identifier: rKih+LHXBuvgbFbapySn47Ghsk445DkKWFe6UB6Hvmo=
Subject key identifier: E9:52:E4:26:B4:A9:A5:6C:61:E4:8C:46:B6:BC:0F:66:7F:CB:89:D1
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 018E74D38D382DD1092CBB6D1BDE26FF22E3
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/6VLkJrSppWxh5IxGtrwPZn_LidE.roa
Signing time: Mon 25 Mar 2024 08:56:45 +0000
ROA not before: Mon 25 Mar 2024 08:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12338
IP address blocks: 5.159.128.0/18 maxlen: 18
5.159.128.0/21 maxlen: 21
5.159.136.0/21 maxlen: 21
5.159.144.0/21 maxlen: 21
5.159.152.0/21 maxlen: 21
5.159.160.0/21 maxlen: 21
5.159.168.0/21 maxlen: 21
5.159.168.0/22 maxlen: 22
5.159.172.0/22 maxlen: 22
5.159.176.0/23 maxlen: 23
5.159.178.0/23 maxlen: 23
5.159.180.0/23 maxlen: 23
5.159.182.0/23 maxlen: 23
5.159.184.0/23 maxlen: 23
5.159.186.0/23 maxlen: 23
5.159.188.0/23 maxlen: 23
5.159.190.0/23 maxlen: 23
37.218.0.0/17 maxlen: 17
62.99.0.0/17 maxlen: 17
81.9.128.0/17 maxlen: 17
81.9.128.0/19 maxlen: 19
81.9.160.0/19 maxlen: 19
81.9.192.0/21 maxlen: 21
81.9.192.0/22 maxlen: 22
81.9.196.0/24 maxlen: 24
81.9.198.0/24 maxlen: 24
81.9.199.0/24 maxlen: 24
81.9.202.0/23 maxlen: 23
81.9.204.0/22 maxlen: 22
81.9.208.0/21 maxlen: 21
81.9.208.0/22 maxlen: 22
81.9.212.0/24 maxlen: 24
81.9.216.0/23 maxlen: 23
81.9.218.0/23 maxlen: 23
81.9.220.0/22 maxlen: 22
81.9.248.0/21 maxlen: 21
82.130.128.0/17 maxlen: 17
82.130.247.0/24 maxlen: 24
83.213.0.0/16 maxlen: 16
83.213.184.0/22 maxlen: 22
85.84.0.0/16 maxlen: 16
85.84.16.0/21 maxlen: 21
85.84.168.0/21 maxlen: 21
85.84.176.0/21 maxlen: 21
85.85.0.0/16 maxlen: 16
85.85.16.0/21 maxlen: 21
85.85.48.0/21 maxlen: 21
85.85.144.0/21 maxlen: 21
85.86.0.0/16 maxlen: 16
85.87.0.0/16 maxlen: 16
85.87.24.0/24 maxlen: 24
85.87.25.0/24 maxlen: 24
85.87.26.0/24 maxlen: 24
85.87.27.0/24 maxlen: 24
85.87.40.0/24 maxlen: 24
85.87.43.0/24 maxlen: 24
85.87.64.0/22 maxlen: 22
85.87.68.0/24 maxlen: 24
85.87.69.0/24 maxlen: 24
85.87.72.0/22 maxlen: 22
85.87.84.0/22 maxlen: 22
85.87.96.0/22 maxlen: 22
85.87.100.0/22 maxlen: 22
85.87.124.0/22 maxlen: 22
85.87.192.0/24 maxlen: 24
85.87.193.0/24 maxlen: 24
85.87.194.0/24 maxlen: 24
85.87.195.0/24 maxlen: 24
91.116.0.0/18 maxlen: 18
91.116.0.0/19 maxlen: 19
91.116.0.0/22 maxlen: 22
91.116.4.0/24 maxlen: 24
91.116.16.0/20 maxlen: 20
91.116.32.0/21 maxlen: 21
91.116.32.0/22 maxlen: 22
91.116.36.0/24 maxlen: 24
91.116.38.0/24 maxlen: 24
91.116.40.0/22 maxlen: 22
91.116.44.0/22 maxlen: 22
91.116.48.0/21 maxlen: 21
91.116.56.0/21 maxlen: 21
178.60.64.0/18 maxlen: 18
178.60.64.0/21 maxlen: 21
178.60.64.0/22 maxlen: 22
178.60.68.0/24 maxlen: 24
178.60.69.0/24 maxlen: 24
178.60.70.0/24 maxlen: 24
178.60.71.0/24 maxlen: 24
178.60.72.0/24 maxlen: 24
178.60.73.0/24 maxlen: 24
178.60.76.0/22 maxlen: 22
178.60.80.0/22 maxlen: 22
178.60.96.0/21 maxlen: 21
178.60.104.0/22 maxlen: 22
178.60.108.0/22 maxlen: 22
178.60.112.0/22 maxlen: 22
178.60.116.0/24 maxlen: 24
178.60.117.0/24 maxlen: 24
178.60.118.0/24 maxlen: 24
178.60.120.0/24 maxlen: 24
178.60.121.0/24 maxlen: 24
178.60.122.0/23 maxlen: 23
185.116.180.0/22 maxlen: 22
212.8.64.0/18 maxlen: 18
212.55.0.0/19 maxlen: 19
212.142.128.0/17 maxlen: 17
2a00:7b00::/29 maxlen: 29
2a00:7b00::/40 maxlen: 40
2a00:7b00:10::/48 maxlen: 48
2a00:7b00:11::/48 maxlen: 48
2a00:7b00:12::/48 maxlen: 48
2a00:7b00:13::/48 maxlen: 48
2a00:7b00:14::/48 maxlen: 48
2a00:7b00:15::/48 maxlen: 48
2a00:7b00:16::/48 maxlen: 48
2a00:7b00:17::/48 maxlen: 48
2a00:7b00:18::/48 maxlen: 48
2a00:7b00:19::/48 maxlen: 48
2a00:7b00:c10::/48 maxlen: 48
2a00:7b00:b000::/40 maxlen: 40
2a00:7b00:c000::/40 maxlen: 40
2a00:7b00:c800::/40 maxlen: 40
2a00:7b00:d000::/40 maxlen: 40
2a00:7b00:d800::/40 maxlen: 40
2a00:7b00:e000::/40 maxlen: 40
2a00:7b00:e800::/40 maxlen: 40
2a00:7b00:ef00::/40 maxlen: 40
2a00:7b00:f000::/40 maxlen: 40
2a00:7b00:f800::/40 maxlen: 40
2a00:7b00:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:d3:8d:38:2d:d1:09:2c:bb:6d:1b:de:26:ff:22:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Mar 25 08:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e952e426b4a9a56c61e48c46b6bc0f667fcb89d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:ad:01:6c:e9:e3:9f:f0:18:76:79:bd:fb:
4d:85:3a:e0:49:ad:27:44:21:be:05:0d:78:4b:c9:
c6:5b:68:51:45:6d:d9:f7:0e:d6:61:86:06:d9:d0:
81:83:2e:0b:fc:5c:67:99:06:0e:ae:40:b4:55:4e:
66:b3:94:fc:42:6f:d6:90:43:7e:8b:04:8b:89:7f:
c0:92:28:a2:9c:99:ab:a0:29:74:5d:e0:8b:b5:ca:
99:57:08:31:4c:9c:b2:9c:b9:56:c3:f7:41:fb:40:
5c:cf:c8:88:38:33:fd:4c:bc:49:95:ad:54:bd:d4:
a2:13:65:51:ca:73:3d:92:53:3f:44:25:1f:96:ab:
32:78:9f:ba:2b:ce:3f:f0:83:fb:4c:54:3d:a8:82:
97:15:dd:90:81:a4:4e:b9:11:b1:04:31:c2:89:e8:
bb:23:34:69:59:22:d6:9c:08:14:82:4a:06:5e:0c:
f3:d1:85:c6:fa:4d:15:63:50:8e:ab:fa:11:dc:61:
ea:30:70:84:2f:0b:71:7b:00:a4:38:95:59:52:3f:
e4:46:4b:b9:3d:82:c8:d0:15:46:a2:42:be:d2:91:
03:d5:59:61:c2:78:f9:d5:f5:62:2a:5c:a2:8d:d9:
74:a1:d8:cf:56:ab:91:0c:ee:53:db:01:bf:ca:9c:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:E4:26:B4:A9:A5:6C:61:E4:8C:46:B6:BC:0F:66:7F:CB:89:D1
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/6VLkJrSppWxh5IxGtrwPZn_LidE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.128.0/18
37.218.0.0/17
62.99.0.0/17
81.9.128.0/17
82.130.128.0/17
83.213.0.0/16
85.84.0.0/14
91.116.0.0/18
178.60.64.0/18
185.116.180.0/22
212.8.64.0/18
212.55.0.0/19
212.142.128.0/17
IPv6:
2a00:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
89:e9:b7:c5:fd:13:52:0d:7b:9f:23:1e:21:bf:a4:7c:97:97:
b2:2a:56:69:0b:be:5f:9e:c6:0c:8c:f3:f8:f1:d8:14:31:45:
86:63:c9:98:4e:09:9c:f7:a8:5c:96:b7:8c:b5:63:b8:9e:57:
a5:13:6e:bf:11:46:38:06:7e:f6:06:0e:55:60:bf:d1:5e:51:
18:e1:40:96:92:96:af:79:27:40:90:7f:b7:b6:bc:2c:4f:cf:
2b:75:a5:d5:cc:97:a4:91:92:50:0c:68:1b:71:99:10:05:72:
07:94:86:a8:f4:a8:dc:43:49:19:64:0f:13:c7:f1:39:78:bf:
a0:fc:a0:48:63:9e:0b:71:3c:2c:ba:10:68:40:b7:ce:d8:5a:
02:44:86:ba:da:48:f5:2f:fe:7c:33:80:03:24:85:74:1c:ba:
f9:2f:20:28:84:df:23:0e:b7:6d:8d:ca:e6:8d:76:98:48:35:
48:a2:b6:5f:e4:2c:ba:f1:f3:3c:27:ab:b5:7d:ee:4f:8f:1c:
5e:68:57:db:45:a0:5e:e8:49:14:47:9d:de:e2:fd:58:db:83:
24:b2:f1:fe:0e:20:5c:3e:d5:70:e7:ba:41:34:6f:b1:5f:4e:
c6:5b:db:bc:c7:ff:b5:d7:e8:8a:3e:a1:98:d2:2e:77:97:f4:
af:2c:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:00:37 2024 by rpki-client on console-fra.rpki-client.org