Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/saMpOH0h-a1X6S_qpr0soor6TYs.roa
File: saMpOH0h-a1X6S_qpr0soor6TYs.roa (raw, json)
Hash identifier: XxTmGyx921Wi4JYtDBQt+AXuqAoAN1WuijINDGlFMac=
Subject key identifier: B1:A3:29:38:7D:21:F9:AD:57:E9:2F:EA:A6:BD:2C:A2:8A:FA:4D:8B
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 018EEB02B1C2E20B43022F75A5B8F6818591
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/saMpOH0h-a1X6S_qpr0soor6TYs.roa
Signing time: Wed 17 Apr 2024 07:43:25 +0000
ROA not before: Wed 17 Apr 2024 07:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15967
IP address blocks: 31.172.168.0/22 maxlen: 22
31.172.168.0/24 maxlen: 24
31.172.169.0/24 maxlen: 24
31.172.170.0/23 maxlen: 23
77.55.0.0/16 maxlen: 16
77.55.0.0/18 maxlen: 18
77.55.64.0/22 maxlen: 22
77.55.68.0/22 maxlen: 22
77.55.72.0/22 maxlen: 22
77.55.76.0/23 maxlen: 23
77.55.78.0/23 maxlen: 23
77.55.84.0/22 maxlen: 22
77.55.88.0/23 maxlen: 23
77.55.90.0/24 maxlen: 24
77.55.91.0/24 maxlen: 24
77.55.92.0/24 maxlen: 24
77.55.93.0/24 maxlen: 24
77.55.94.0/24 maxlen: 24
77.55.95.0/24 maxlen: 24
77.55.96.0/22 maxlen: 22
77.55.100.0/22 maxlen: 22
77.55.104.0/23 maxlen: 23
77.55.106.0/23 maxlen: 23
77.55.108.0/22 maxlen: 22
77.55.112.0/23 maxlen: 23
77.55.114.0/23 maxlen: 23
77.55.116.0/23 maxlen: 23
77.55.118.0/23 maxlen: 23
77.55.120.0/24 maxlen: 24
77.55.121.0/24 maxlen: 24
77.55.122.0/23 maxlen: 23
77.55.124.0/24 maxlen: 24
77.55.125.0/24 maxlen: 24
77.55.126.0/24 maxlen: 24
77.55.127.0/24 maxlen: 24
77.55.128.0/20 maxlen: 20
77.55.144.0/21 maxlen: 21
77.55.152.0/24 maxlen: 24
77.55.153.0/24 maxlen: 24
77.55.154.0/24 maxlen: 24
77.55.155.0/24 maxlen: 24
77.55.156.0/23 maxlen: 23
77.55.158.0/23 maxlen: 23
77.55.160.0/20 maxlen: 20
77.55.160.0/23 maxlen: 23
77.55.162.0/23 maxlen: 23
77.55.164.0/23 maxlen: 23
77.55.166.0/24 maxlen: 24
77.55.167.0/24 maxlen: 24
77.55.168.0/23 maxlen: 23
77.55.170.0/23 maxlen: 23
77.55.172.0/23 maxlen: 23
77.55.174.0/23 maxlen: 23
77.55.176.0/21 maxlen: 21
77.55.176.0/23 maxlen: 23
77.55.176.0/24 maxlen: 24
77.55.177.0/24 maxlen: 24
77.55.178.0/24 maxlen: 24
77.55.179.0/24 maxlen: 24
77.55.180.0/23 maxlen: 23
77.55.182.0/23 maxlen: 23
77.55.184.0/23 maxlen: 23
77.55.186.0/23 maxlen: 23
77.55.188.0/23 maxlen: 23
77.55.190.0/23 maxlen: 23
77.55.192.0/20 maxlen: 20
77.55.208.0/20 maxlen: 20
77.55.224.0/20 maxlen: 20
77.55.240.0/23 maxlen: 23
77.55.242.0/23 maxlen: 23
77.55.246.0/24 maxlen: 24
77.55.247.0/24 maxlen: 24
77.55.248.0/22 maxlen: 22
77.55.252.0/23 maxlen: 23
77.55.254.0/24 maxlen: 24
77.55.255.0/24 maxlen: 24
85.128.128.0/17 maxlen: 17
85.128.128.0/24 maxlen: 24
85.128.129.0/24 maxlen: 24
85.128.130.0/24 maxlen: 24
85.128.131.0/24 maxlen: 24
85.128.132.0/23 maxlen: 23
85.128.134.0/24 maxlen: 24
85.128.135.0/24 maxlen: 24
85.128.136.0/22 maxlen: 22
85.128.140.0/23 maxlen: 23
85.128.142.0/24 maxlen: 24
85.128.143.0/24 maxlen: 24
85.128.144.0/20 maxlen: 20
85.128.160.0/19 maxlen: 19
85.128.192.0/18 maxlen: 18
2a01:6100::/32 maxlen: 32
2a01:6100::/48 maxlen: 48
2a01:6100:111::/48 maxlen: 48
2a01:6100:fe00::/48 maxlen: 48
2a01:6100:fe01::/48 maxlen: 48
2a01:6100:fe02::/48 maxlen: 48
2a01:6100:fe10::/48 maxlen: 48
2a01:6100:fe11::/48 maxlen: 48
2a01:6100:fe12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:02:b1:c2:e2:0b:43:02:2f:75:a5:b8:f6:81:85:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Apr 17 07:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1a329387d21f9ad57e92feaa6bd2ca28afa4d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:15:69:0d:54:03:f2:7f:cf:9f:a9:9b:21:
ad:28:22:28:c2:64:50:fa:9f:9b:1f:87:27:f7:58:
8e:5b:74:38:24:9e:b0:65:ea:a3:a2:b3:44:56:60:
9e:f3:a6:42:ad:f9:77:85:41:f2:a5:8a:7a:d0:3e:
bc:63:ff:a2:40:3c:b0:66:e6:49:a2:71:fb:a1:13:
f4:18:3e:04:6e:3d:f7:56:87:71:d7:d9:32:0e:94:
27:b7:6c:28:bb:82:af:7c:43:9c:33:64:f3:f0:be:
16:35:30:7c:84:e3:bf:ef:0f:9f:4b:8c:5e:aa:ae:
11:f0:b5:5f:e5:7c:f8:86:ac:66:42:02:44:1f:09:
ca:6e:d5:6a:c0:3a:a4:97:0d:1a:04:2f:76:50:19:
3f:18:fb:fc:d3:9b:7b:de:0f:f4:a9:31:6f:ed:cc:
03:6a:c7:2d:6e:87:83:59:2a:c1:f4:76:ab:a0:3f:
d6:63:cb:61:c1:56:35:40:99:f6:f5:da:c0:8f:71:
39:9f:f3:80:49:d3:63:92:5e:78:14:a8:db:a8:b3:
26:0d:c6:2b:4e:8e:ca:62:f8:f5:f1:58:7f:37:76:
19:6d:05:4e:f9:53:c3:07:cb:52:9d:9e:75:61:85:
ce:b3:32:77:54:81:22:e8:ab:2d:68:80:b0:7b:61:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:29:38:7D:21:F9:AD:57:E9:2F:EA:A6:BD:2C:A2:8A:FA:4D:8B
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/saMpOH0h-a1X6S_qpr0soor6TYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.168.0/22
77.55.0.0/16
85.128.128.0/17
IPv6:
2a01:6100::/32
Signature Algorithm: sha256WithRSAEncryption
32:c6:23:24:65:03:b1:a4:5e:72:ce:2b:e1:e0:7e:2e:63:a9:
03:6f:dc:77:63:77:23:11:68:68:75:ed:70:99:e3:36:0a:fe:
ca:80:42:ee:46:20:9a:d0:88:cf:b8:3e:9a:e4:24:f1:df:2f:
c2:7e:43:3f:8d:89:d5:31:b3:6a:27:f7:cc:0a:1a:2c:fb:a4:
e8:46:30:90:a1:35:0f:22:70:16:26:0b:d4:c4:9e:98:9c:27:
a8:ba:80:f9:75:8d:11:b5:29:22:6e:9c:15:e4:92:bb:16:8e:
35:65:ef:6a:5d:64:c1:65:01:e1:06:1d:4c:52:2d:b6:8b:45:
75:b3:0f:b5:0b:f1:7b:f8:99:97:12:fa:e0:bd:89:51:9a:52:
c6:15:2f:97:09:88:9d:91:a6:72:55:79:ba:f1:19:cc:85:70:
6b:f6:29:46:5c:52:4c:f2:59:f9:56:02:25:62:11:1d:cc:10:
b8:f8:3b:33:f7:68:e4:17:f8:a4:71:88:98:71:8c:0e:24:df:
cb:3a:d2:17:cf:5f:05:3a:3b:34:ef:f8:bf:5c:dc:e8:ca:0a:
c5:74:a7:78:fa:14:bf:d4:f1:a9:23:bb:6f:b7:a1:70:84:e0:
89:ce:3e:2b:6f:b9:cb:53:5a:be:f4:06:ae:7f:50:a4:27:79:
12:ad:30:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:06:08 2024 by rpki-client on console-fra.rpki-client.org