Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/TLHuOoHoBmNmsqb3PSQl3ZWfq9A.roa
File: TLHuOoHoBmNmsqb3PSQl3ZWfq9A.roa (raw, json)
Hash identifier: tdJVrsQSwAACtjaExSn7+z2fDI6zfbw1Fqleok66FBM=
Subject key identifier: 4C:B1:EE:3A:81:E8:06:63:66:B2:A6:F7:3D:24:25:DD:95:9F:AB:D0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01904AAF343B16A8417EDC4A64EAA13D77E5
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/TLHuOoHoBmNmsqb3PSQl3ZWfq9A.roa
Signing time: Mon 24 Jun 2024 14:38:34 +0000
ROA not before: Mon 24 Jun 2024 14:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210756
IP address blocks: 5.8.42.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.3.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
31.184.200.0/24 maxlen: 24
31.184.201.0/24 maxlen: 24
31.184.202.0/24 maxlen: 24
31.184.203.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
82.97.207.0/24 maxlen: 24
83.229.14.0/24 maxlen: 24
83.229.25.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.35.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
95.181.176.0/24 maxlen: 24
95.181.177.0/24 maxlen: 24
95.181.178.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
185.14.46.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
2a11:27c0::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:20::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:210::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:1020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:af:34:3b:16:a8:41:7e:dc:4a:64:ea:a1:3d:77:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jun 24 14:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cb1ee3a81e8066366b2a6f73d2425dd959fabd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:07:f0:33:ae:6c:54:1d:4f:50:a5:57:0c:
eb:2e:1b:81:a3:70:a6:0b:bd:7f:04:39:53:b3:95:
d9:5b:5b:39:b1:02:91:ff:d3:c3:6f:f4:82:6a:e2:
29:5e:49:da:3c:1d:f1:00:96:28:51:87:b4:62:60:
b2:4a:d4:bd:48:87:33:16:a8:1d:30:f1:3f:04:2f:
54:22:0d:32:02:87:a3:10:5c:8a:fd:0a:48:b1:3f:
00:f2:23:46:5b:fc:a2:16:eb:bf:78:cf:d3:f1:d1:
69:a8:da:e5:e1:1b:2b:b6:24:29:2a:58:51:0d:d2:
33:0c:32:39:c9:43:db:9e:bb:11:37:4c:ca:d7:c0:
87:d7:fb:dd:f9:3c:1e:d3:f9:23:97:3d:0f:5f:d9:
a7:d6:ae:ab:23:bb:93:7e:bc:9a:7e:84:cb:e9:62:
02:f5:1e:f7:fe:5d:ac:ee:e4:a3:b1:63:b1:f3:78:
cd:08:fc:a3:aa:ad:33:33:6d:b0:bb:11:8f:b6:58:
dd:8d:1d:42:e9:c0:e4:e7:80:e2:f6:73:79:fd:9b:
34:39:2b:56:b5:f2:7e:1e:1f:5d:31:a0:e4:06:3c:
bd:c3:c3:ff:f8:c0:52:6e:51:34:92:6e:58:7f:64:
ca:98:ee:6b:a6:dd:36:2a:21:9f:29:82:0e:2d:89:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:EE:3A:81:E8:06:63:66:B2:A6:F7:3D:24:25:DD:95:9F:AB:D0
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/TLHuOoHoBmNmsqb3PSQl3ZWfq9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.200.0-31.184.205.255
37.9.36.0/22
37.9.52.0/22
45.147.162.0/23
79.133.127.0/24
82.97.207.0/24
83.229.14.0/24
83.229.25.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.36.255
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.176.0/21
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.14.46.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::-2a11:27c0:2f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:100::/40
2a11:27c0:210::/44
2a11:27c0:1000::-2a11:27c0:102f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:72:ed:2e:9d:1d:38:24:0f:3c:6e:aa:d7:4d:dd:b7:e8:2f:
6f:15:2d:0d:95:7e:c3:66:d7:00:9e:54:d2:d9:e7:21:6c:cc:
df:54:4d:ab:92:fa:d4:7e:82:c7:85:f5:cc:04:04:fd:d7:62:
66:ff:43:94:28:21:c5:60:38:d5:b9:7d:d2:c5:fe:30:a6:46:
39:94:ea:bd:96:72:96:b1:6c:df:8a:56:79:2f:d2:18:4a:2b:
8f:c4:e1:59:bf:2d:ac:fe:e3:51:44:e6:5b:4f:07:86:55:a4:
ad:6e:27:da:1e:20:5d:e7:23:4f:53:55:6a:98:ef:63:69:89:
77:91:63:32:38:f7:c0:d5:36:a5:f6:ea:20:35:9e:55:c7:8a:
13:fa:95:01:62:b1:9d:12:36:73:5f:68:d1:da:7a:51:bc:dc:
ec:a2:37:c0:be:30:7f:e8:94:c0:db:f6:04:9e:2e:ed:35:ed:
7b:65:af:43:16:e6:1f:66:36:33:63:bd:ff:16:48:e0:70:36:
46:de:bb:e1:ba:cf:a6:0e:35:67:e4:32:76:8d:a2:cf:87:a9:
78:c2:5b:38:be:2c:8c:cc:04:bd:c2:59:f1:e5:78:c2:e9:69:
ac:bd:d0:00:e3:c0:83:37:ec:9f:a2:8b:4b:a2:be:e4:54:ad:
41:16:17:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:07:13 2024 by rpki-client on console-ams.rpki-client.org