Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ypAb-D1z0YVAo19yi03TGdUDjU0.roa
File: ypAb-D1z0YVAo19yi03TGdUDjU0.roa (raw, json)
Hash identifier: apHd1JdjcvnO7xSuIiCBpF+QhFV5GcEOC/KfJWTB3Wk=
Subject key identifier: CA:90:1B:F8:3D:73:D1:85:40:A3:5F:72:8B:4D:D3:19:D5:03:8D:4D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0192FAA6B2DB9811DFC6ED66EEF31DA5CFAE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ypAb-D1z0YVAo19yi03TGdUDjU0.roa
Signing time: Tue 05 Nov 2024 04:48:01 +0000
ROA not before: Tue 05 Nov 2024 04:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.19.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.80.0/21 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.49.0/24 maxlen: 24
5.188.62.0/24 maxlen: 24
5.188.166.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.231.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.48.0/23 maxlen: 23
37.139.53.0/24 maxlen: 24
37.139.54.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.12.0/23 maxlen: 23
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
46.161.32.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.43.0/24 maxlen: 24
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.62.0/23 maxlen: 23
91.243.90.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
146.185.244.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fa:a6:b2:db:98:11:df:c6:ed:66:ee:f3:1d:a5:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Nov 5 04:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca901bf83d73d18540a35f728b4dd319d5038d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:21:37:42:17:d5:17:b0:8e:65:2e:9a:9b:
c9:29:50:bd:ca:17:2f:d2:f8:f3:7b:19:7f:18:ee:
f4:20:4a:36:52:f8:be:60:96:93:ba:d2:46:1c:e3:
7f:d0:3a:c8:79:c9:65:6a:4c:41:8f:c5:9b:a8:c7:
a3:00:31:eb:ea:4f:79:29:e1:31:ce:51:c0:07:5c:
ba:0f:2e:8d:4f:c9:ab:49:09:21:2f:d8:87:57:25:
4b:f0:d0:b4:98:c1:0f:4e:f9:8c:0c:56:57:43:3d:
c7:76:02:bf:01:74:c6:03:4b:85:6b:c7:f8:8e:fe:
79:73:b6:aa:43:c2:d2:12:dc:35:26:06:dc:4d:65:
d8:85:e4:e9:f3:d6:45:33:d7:4d:f4:f0:ac:06:80:
09:2e:e9:0e:db:65:b1:9f:68:6e:ac:54:33:99:c7:
30:b6:c5:8a:6b:96:a5:fe:53:b3:e9:15:94:8e:bf:
45:b9:12:45:9f:33:af:d0:4a:41:45:d0:6a:b4:fb:
dc:af:a4:26:2a:9a:91:b2:10:13:23:9b:fd:20:7b:
50:e1:44:22:7f:ed:7a:70:41:18:28:b8:92:47:eb:
6b:9a:cc:db:2e:83:79:cb:31:3b:bf:f8:29:ac:ed:
fc:4e:4f:a3:5e:5e:24:72:80:25:34:da:af:3c:77:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:1B:F8:3D:73:D1:85:40:A3:5F:72:8B:4D:D3:19:D5:03:8D:4D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ypAb-D1z0YVAo19yi03TGdUDjU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0-5.8.16.255
5.8.19.0/24
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.8.80.0/21
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0-5.188.211.255
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.48.0/23
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.12.0/22
46.161.20.0-46.161.25.255
46.161.32.0/22
46.161.42.0-46.161.51.255
91.243.48.0/22
91.243.60.0/22
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
81:73:5c:46:a9:91:1b:ab:ca:de:ce:05:8f:1d:c0:38:8d:ad:
f2:8a:85:d7:82:d4:9b:e0:33:55:2a:11:bc:34:b2:0a:b0:2e:
ce:db:1d:5b:58:ce:6f:e1:01:86:ac:23:af:a9:82:cf:d5:51:
3a:c3:67:73:d0:ae:89:01:d6:a8:30:73:4a:d2:13:d3:26:6e:
58:87:a8:85:a1:43:9f:59:b7:27:e0:81:e9:87:f6:d8:61:3e:
26:dc:6f:2d:15:b5:3d:88:84:4d:74:67:40:24:77:ee:b4:5e:
ed:a9:b5:c7:cb:f5:0a:75:98:c4:9a:96:8c:74:d1:78:96:63:
24:4b:cb:99:51:87:30:9e:22:6f:68:5c:9b:3a:63:e7:cb:84:
59:8c:89:ef:9d:b3:f0:38:d9:40:04:a9:8a:8c:42:e4:fe:2f:
a4:18:35:71:7a:a5:35:ad:d2:69:e7:5c:d2:d7:8b:0c:53:07:
9c:4a:0c:b0:e1:c5:44:f6:01:a1:f1:88:13:8c:02:b4:7d:76:
fb:70:8f:b1:d6:a3:77:cd:15:a4:a3:99:b2:fc:5c:80:5b:ab:
69:d0:90:4c:15:0b:c9:41:38:13:a9:cc:2b:2b:a1:ba:c6:a9:
24:85:39:51:81:98:f2:4c:55:10:33:e6:05:da:72:52:f7:96:
17:b9:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:34:05 2024 by rpki-client on console-ams.rpki-client.org