Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/89jcpdk3OOYx83RPTGE5JieqoXs.roa
File: 89jcpdk3OOYx83RPTGE5JieqoXs.roa (raw, json)
Hash identifier: 4gwR8TRqcRYx1bquU5UIPpDPIyjUMR3JzO3424kg2kI=
Subject key identifier: F3:D8:DC:A5:D9:37:38:E6:31:F3:74:4F:4C:61:39:26:27:AA:A1:7B
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 0191DF4E2F4A643CC2DC72CF32C08CAA46BC
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/89jcpdk3OOYx83RPTGE5JieqoXs.roa
Signing time: Wed 11 Sep 2024 04:18:48 +0000
ROA not before: Wed 11 Sep 2024 04:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
61.8.156.0/23 maxlen: 24
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
62.220.1.0/24 maxlen: 24
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.160.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.89.0/24 maxlen: 24
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
202.71.141.0/24 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:4e:2f:4a:64:3c:c2:dc:72:cf:32:c0:8c:aa:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Sep 11 04:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3d8dca5d93738e631f3744f4c61392627aaa17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:28:39:3a:a6:87:e5:3c:06:f3:12:c6:ce:
bd:93:28:cd:be:77:03:ae:3f:ad:ff:3f:e3:76:99:
ac:cf:13:55:19:d2:ef:3e:50:60:8e:ca:e5:a1:1f:
67:d3:ce:a6:f7:77:cf:83:8d:8d:4f:db:54:f6:70:
ea:62:13:de:93:06:6f:4b:a5:ff:bb:5a:ee:df:64:
6f:ab:14:12:5d:6c:91:0a:a5:8d:a0:d0:3b:6d:40:
5c:56:b3:a0:38:75:80:b2:1d:4e:53:7b:b2:75:11:
90:7b:bf:4d:37:36:5f:52:4b:70:5b:21:ef:9e:e4:
c1:1d:f8:4b:f5:c7:be:d3:fa:1b:1e:49:b8:aa:7e:
2a:64:76:d6:cc:cb:89:8a:9e:7a:23:e1:a1:78:c0:
bc:13:56:1a:cd:4c:48:4f:84:e0:86:68:24:2b:0b:
d7:31:f5:05:2d:fa:45:57:82:88:14:1e:0f:63:b4:
17:3c:a7:2a:20:9c:4d:68:07:be:8e:66:8c:d5:65:
af:e4:45:3f:51:1e:46:71:d9:cd:b7:a8:ba:f1:d2:
a1:a3:94:ae:ef:40:e5:58:09:3c:85:bf:d0:ad:e7:
ac:f6:09:96:e4:b2:d6:57:a2:ae:c5:0d:fe:85:b3:
a4:08:49:03:26:a2:18:dd:a6:58:40:2f:2f:8c:88:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:DC:A5:D9:37:38:E6:31:F3:74:4F:4C:61:39:26:27:AA:A1:7B
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/89jcpdk3OOYx83RPTGE5JieqoXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
9c:44:ab:46:18:63:c5:3c:05:bb:13:15:42:b4:2f:ba:41:c9:
dc:78:76:fd:3f:f4:f4:a6:ac:4a:ac:2c:43:48:a4:f3:d3:c6:
7b:08:fc:5a:44:56:72:ec:b6:b5:21:be:8a:0a:e7:48:42:6b:
4f:c8:2d:45:d0:5b:44:97:a7:a1:76:33:5b:07:30:37:19:3d:
1a:ec:2f:e7:66:75:d6:15:8d:b8:9d:48:cc:3f:5d:ea:80:8a:
80:3b:58:ab:1f:1b:8c:5e:f9:8d:09:63:41:66:86:77:8c:fc:
42:db:d8:e7:77:d3:04:53:04:f5:2f:57:9d:0f:40:14:c7:fd:
9a:f3:cf:d2:c8:5a:bd:7b:f3:ac:5b:83:9b:59:2d:61:4f:d0:
a8:10:0c:a5:03:05:4a:7f:0e:64:60:bf:d2:3e:59:2c:60:70:
20:65:1f:9b:a7:bb:f6:8c:52:55:aa:c6:66:a9:18:55:94:89:
73:f3:59:2b:25:91:ef:d2:bb:29:33:df:39:e3:25:a0:96:ee:
9f:cd:cf:ac:21:ad:fe:3b:31:e3:96:f6:eb:bc:54:23:e5:51:
b8:01:2c:28:3f:65:62:26:19:2f:26:49:4a:e4:81:02:cd:7d:
51:f7:aa:38:00:05:6f:14:54:35:5e:d2:9f:e0:cb:07:75:4a:
0f:98:44:84
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAZHfTi9KZDzC3HLPMsCMqka8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjQwOTExMDQxODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2Q4ZGNhNWQ5MzczOGU2MzFmMzc0NGY0YzYxMzkyNjI3YWFhMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zEoOTqmh+U8BvMSxs69kyjNvncD
rj+t/z/jdpmszxNVGdLvPlBgjsrloR9n086m93fPg42NT9tU9nDqYhPekwZvS6X/
u1ru32RvqxQSXWyRCqWNoNA7bUBcVrOgOHWAsh1OU3uydRGQe79NNzZfUktwWyHv
nuTBHfhL9ce+0/obHkm4qn4qZHbWzMuJip56I+GheMC8E1YazUxIT4TghmgkKwvX
MfUFLfpFV4KIFB4PY7QXPKcqIJxNaAe+jmaM1WWv5EU/UR5GcdnNt6i68dKho5Su
70DlWAk8hb/Qrees9gmW5LLWV6KuxQ3+hbOkCEkDJqIY3aZYQC8vjIg2aQIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFPPY3KXZNzjmMfN0T0xhOSYnqqF7MB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvODlqY3BkazNPT1l4ODNSUFRHRTVKaWVxb1hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCASEEAgABMIIB
GQMEBhgogAMDAC6OAwQHLr0AAwQFPQiAAwQFPkhAAwMAPtYDBAU+2SADBAU+3AAD
BARQ8cADBAVQ8qADBAVSd6ADBAZSjAADBAVSkCADBAVSkQADBAVSwmADBAdSz4AD
AwBThwMEBVQTwAMDAVd6AwMAWIIDBAdZG4ADBANZz8gDAwJZ9AMDAV6GAwQHaJcA
AwQGjzpAAwQBuWzkAwQCuYBEAwQAwdsPAwQEw6fQAwQFw8ogAwQFw+JgAwQFw+Kg
AwQEykeAAwQF1AeAAwQF1FDgAwQF1F0AAwQF1MwAAwQG1R7AAwQF1YogAwQF1YuA
AwQF1baAAwQF2QkgAwQF2QlgAwQE2RvAAwQE2UEQAwQE2U6AAwQE2cdAMCkEAgAC
MCMDBQAgAQewAwUAIAEJ6AMFACABFDgDBQAgARa4AwUDKgAPuDANBgkqhkiG9w0B
AQsFAAOCAQEAnESrRhhjxTwFuxMVQrQvukHJ3Hh2/T/09KasSqwsQ0ik89PGewj8
WkRWcuy2tSG+igrnSEJrT8gtRdBbRJenoXYzWwcwNxk9Guwv52Z11hWNuJ1IzD9d
6oCKgDtYqx8bjF75jQljQWaGd4z8QtvY53fTBFME9S9XnQ9AFMf9mvPP0shavXvz
rFuDm1ktYU/QqBAMpQMFSn8OZGC/0j5ZLGBwIGUfm6e79oxSVarGZqkYVZSJc/NZ
KyWR79K7KTPfOeMloJbun83PrCGt/jsx45b267xUI+VRuAEsKD9lYiYZLyZJSuSB
As19UfeqOAAFbxRUNV7Sn+DLB3VKD5hEhA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:59:25 2024 by rpki-client on console-ams.rpki-client.org