Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/89bassPj2ijYviFX3ma2Hx4odWE.roa
File: 89bassPj2ijYviFX3ma2Hx4odWE.roa (raw, json)
Hash identifier: wAxhZV9efJefckLPIvrh0TWYFEieAhSz2c+XP3AVKCw=
Subject key identifier: F3:D6:DA:B2:C3:E3:DA:28:D8:BE:21:57:DE:66:B6:1F:1E:28:75:61
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 018E83A001283A6CC7125D046E302F580D72
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/89bassPj2ijYviFX3ma2Hx4odWE.roa
Signing time: Thu 28 Mar 2024 05:54:45 +0000
ROA not before: Thu 28 Mar 2024 05:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35104
IP address blocks: 37.228.64.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.84.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.100.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.104.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.108.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.111.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.218.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.26.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.72.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.79.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.135.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.136.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
185.20.126.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
188.127.47.0/24 maxlen: 24
188.127.48.0/24 maxlen: 24
188.127.49.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.31.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
217.196.26.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
2a03:a300::/32 maxlen: 32
2a03:a300:800::/37 maxlen: 37
2a03:a300:1000::/48 maxlen: 48
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:4000::/44 maxlen: 44
2a03:a300:4100::/48 maxlen: 48
2a03:a300:5000::/36 maxlen: 36
2a03:a300:5000::/42 maxlen: 42
2a03:a300:5000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:83:a0:01:28:3a:6c:c7:12:5d:04:6e:30:2f:58:0d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Mar 28 05:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3d6dab2c3e3da28d8be2157de66b61f1e287561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:74:36:16:86:98:24:8b:8c:81:78:66:5c:
a1:1b:a1:27:2b:3a:05:dd:1f:f4:1a:02:35:3d:f5:
02:dd:f9:6e:54:e5:4c:23:0d:bd:36:0f:3a:0f:85:
17:90:95:fe:4b:1c:8f:2f:9e:0c:f9:4a:00:55:8c:
d6:25:61:2d:3e:7f:ae:02:aa:42:36:4c:66:25:6e:
27:f2:6b:dc:2f:7a:a8:c4:ab:06:5b:e5:ed:b2:4b:
44:a0:8d:c8:f5:97:db:e1:52:70:1b:08:b1:4d:b2:
48:d5:e6:e3:83:71:31:fe:d6:eb:2b:f8:94:d9:a7:
71:d0:91:e7:7b:80:4f:cc:67:4b:2b:83:1a:a3:28:
c7:f9:8c:30:26:23:14:42:36:bc:8b:73:40:8b:2d:
4a:d5:ad:51:85:fd:f1:d1:41:ea:62:c7:50:0a:3e:
18:2d:1a:70:9f:f3:b6:80:25:ce:a4:d7:c7:5b:e8:
d5:56:f9:dd:62:b2:d7:02:c2:bd:95:94:49:40:dc:
39:87:cf:8c:e9:78:4e:46:8e:fa:ab:76:73:21:62:
dd:89:b5:40:22:00:07:a4:15:9c:58:92:4b:87:0a:
b4:77:12:4c:3a:42:4c:13:6e:af:21:5f:fb:c9:3a:
61:26:6c:8f:ce:03:46:bc:8a:46:d6:60:41:be:11:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:DA:B2:C3:E3:DA:28:D8:BE:21:57:DE:66:B6:1F:1E:28:75:61
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/89bassPj2ijYviFX3ma2Hx4odWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/22
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.45.255
188.127.47.0-188.127.49.255
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300::/32
Signature Algorithm: sha256WithRSAEncryption
79:0d:d2:cb:90:02:46:c5:05:8a:4b:82:ac:7d:91:d5:21:3d:
f7:cc:3b:9b:88:25:de:97:60:cb:9e:97:26:49:96:2f:0b:89:
55:27:96:9e:db:c6:41:b2:da:be:cc:a6:b1:72:db:01:68:f7:
ba:c0:93:60:33:81:bd:a3:fa:09:a3:19:7c:b3:2d:a4:d4:32:
00:1b:17:03:60:57:0c:fb:b3:48:7b:98:9d:9f:ed:16:9c:1a:
10:79:89:ca:bd:29:af:1a:84:a9:82:c3:1e:8b:bf:6f:d4:b7:
17:55:65:d4:d3:ae:88:24:ec:28:04:66:43:c6:b3:fd:f5:a0:
54:4b:6f:09:d8:a9:04:7c:bc:9f:1b:ae:80:b8:36:05:3e:ab:
05:48:f2:7b:74:64:f2:d5:ce:dc:88:dc:71:2c:03:49:75:1d:
3c:98:d5:d3:16:f0:1d:cd:73:4f:b7:45:9c:a2:03:78:68:c3:
1d:b1:39:a1:db:19:d4:c6:92:ac:cb:95:bb:1b:da:03:1f:1b:
dd:79:13:46:6f:98:4e:1b:b5:b5:22:9b:35:0c:c7:6b:49:86:
a9:a4:d9:62:0f:d0:a9:f9:45:4f:57:fa:90:cd:f4:a7:78:19:
df:a7:e3:e8:70:cd:ab:20:ef:05:af:99:bd:49:50:fd:72:6e:
8a:f1:56:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:33:24 2024 by rpki-client on console-ams.rpki-client.org