Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/1-uCaVsKOJN73xcMjMsUetfhgArE.roa
File: 1-uCaVsKOJN73xcMjMsUetfhgArE.roa (raw, json)
Hash identifier: onvZmaAFx72gUPY/6CYS1EELfSLvlZzhKXG2Aa2xDdk=
Subject key identifier: FA:E0:9A:56:C2:8E:24:DE:F7:C5:C3:23:32:C5:1E:B5:F8:60:02:B1
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01904FF3C6447BA60AE03648EC01C3CF5762
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/1-uCaVsKOJN73xcMjMsUetfhgArE.roa
Signing time: Tue 25 Jun 2024 15:11:34 +0000
ROA not before: Tue 25 Jun 2024 15:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5610
IP address blocks: 37.188.128.0/17 maxlen: 17
37.188.128.0/21 maxlen: 21
37.188.136.0/21 maxlen: 21
37.188.144.0/20 maxlen: 20
37.188.144.0/21 maxlen: 21
37.188.152.0/21 maxlen: 21
37.188.160.0/20 maxlen: 20
37.188.160.0/21 maxlen: 21
37.188.168.0/21 maxlen: 21
37.188.176.0/20 maxlen: 20
37.188.176.0/21 maxlen: 21
37.188.184.0/21 maxlen: 21
37.188.192.0/23 maxlen: 23
37.188.194.0/23 maxlen: 23
37.188.224.0/21 maxlen: 21
37.188.232.0/21 maxlen: 21
37.188.240.0/20 maxlen: 20
37.188.240.0/21 maxlen: 21
37.188.248.0/21 maxlen: 21
80.188.0.0/16 maxlen: 16
80.188.0.0/17 maxlen: 17
80.188.40.0/24 maxlen: 24
80.188.128.0/17 maxlen: 17
80.188.222.0/24 maxlen: 24
81.90.160.0/20 maxlen: 20
81.90.168.0/24 maxlen: 24
81.90.170.0/24 maxlen: 24
81.90.173.0/24 maxlen: 24
83.69.32.0/19 maxlen: 19
83.208.0.0/16 maxlen: 16
83.208.0.0/18 maxlen: 18
83.208.64.0/18 maxlen: 18
83.208.128.0/19 maxlen: 19
85.70.0.0/15 maxlen: 15
85.70.0.0/16 maxlen: 16
85.70.0.0/17 maxlen: 17
85.70.128.0/17 maxlen: 17
85.71.0.0/16 maxlen: 16
85.160.0.0/15 maxlen: 15
85.193.0.0/18 maxlen: 18
88.83.160.0/19 maxlen: 19
88.83.175.0/24 maxlen: 24
88.100.0.0/14 maxlen: 14
88.100.0.0/15 maxlen: 15
88.102.0.0/15 maxlen: 15
88.102.0.0/16 maxlen: 16
90.176.32.0/19 maxlen: 19
90.176.64.0/18 maxlen: 18
90.176.128.0/17 maxlen: 17
90.177.0.0/16 maxlen: 16
90.178.0.0/15 maxlen: 15
90.180.0.0/14 maxlen: 14
90.182.6.0/24 maxlen: 24
90.182.108.0/24 maxlen: 24
90.183.72.0/24 maxlen: 24
90.183.76.0/24 maxlen: 24
90.183.77.0/24 maxlen: 24
90.183.78.0/24 maxlen: 24
92.243.192.0/19 maxlen: 19
109.80.0.0/15 maxlen: 15
109.81.208.0/24 maxlen: 24
109.81.209.0/24 maxlen: 24
109.81.210.0/24 maxlen: 24
109.81.211.0/24 maxlen: 24
109.81.212.0/24 maxlen: 24
109.81.213.0/24 maxlen: 24
109.81.214.0/24 maxlen: 24
109.81.215.0/24 maxlen: 24
160.218.0.0/16 maxlen: 16
160.218.13.0/24 maxlen: 24
185.61.228.0/22 maxlen: 22
194.228.0.0/16 maxlen: 16
194.228.0.0/17 maxlen: 17
194.228.11.0/24 maxlen: 24
194.228.13.0/24 maxlen: 24
194.228.20.0/24 maxlen: 24
194.228.32.0/24 maxlen: 24
194.228.59.0/24 maxlen: 24
194.228.68.0/24 maxlen: 24
194.228.72.0/22 maxlen: 22
194.228.76.0/24 maxlen: 24
194.228.79.0/24 maxlen: 24
194.228.128.0/17 maxlen: 17
217.117.208.0/20 maxlen: 20
217.194.160.0/20 maxlen: 20
2001:41d8::/32 maxlen: 32
2a00:1028::/29 maxlen: 29
2a00:1028::/32 maxlen: 32
2a00:1028:d::/48 maxlen: 48
2a02:9b8::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:f3:c6:44:7b:a6:0a:e0:36:48:ec:01:c3:cf:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jun 25 15:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fae09a56c28e24def7c5c32332c51eb5f86002b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:bf:4d:78:00:e4:b2:e6:eb:65:d2:94:38:
ff:6a:27:66:0b:a6:33:16:e7:7f:d6:50:81:8f:26:
cb:08:f3:74:5d:ba:ba:8e:ca:89:0c:7a:ce:2c:4b:
4f:4e:4e:13:3b:3b:2e:8f:7c:3e:bb:c9:36:ad:92:
39:5a:c6:86:70:10:4e:64:cb:28:1e:5f:cc:36:5d:
3f:43:0c:ad:23:2c:a5:89:b3:b4:d4:b4:9e:e6:8a:
5e:a5:93:89:f1:59:7f:47:91:2e:31:84:3f:fb:f5:
fa:70:b8:6a:8a:7c:46:c5:18:cc:64:d8:7b:f2:17:
7b:7a:c8:00:2b:00:ca:b1:57:9f:64:af:f1:a4:73:
84:96:fc:41:b6:08:b1:b2:99:d1:88:53:f2:69:16:
98:4f:87:7d:c8:ac:92:8a:13:1e:50:5d:c1:dc:94:
21:a5:fc:87:df:06:c9:65:20:c7:be:5d:52:30:34:
5f:b4:d5:15:29:4f:70:83:20:9f:a0:cf:a7:db:08:
ee:dd:c7:e2:5d:11:f1:52:52:56:cb:c5:4d:fb:f9:
ca:ae:78:f6:4d:02:70:17:b8:04:f6:04:2e:ba:40:
7f:e4:f4:e5:54:e9:c4:84:83:b4:b4:99:fa:72:33:
56:f2:49:5e:97:5b:d5:3a:e5:39:1b:d5:86:6d:a0:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:9A:56:C2:8E:24:DE:F7:C5:C3:23:32:C5:1E:B5:F8:60:02:B1
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/1-uCaVsKOJN73xcMjMsUetfhgArE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.188.128.0/17
80.188.0.0/16
81.90.160.0/20
83.69.32.0/19
83.208.0.0/16
85.70.0.0/15
85.160.0.0/15
85.193.0.0/18
88.83.160.0/19
88.100.0.0/14
90.176.32.0-90.183.255.255
92.243.192.0/19
109.80.0.0/15
160.218.0.0/16
185.61.228.0/22
194.228.0.0/16
217.117.208.0/20
217.194.160.0/20
IPv6:
2001:41d8::/32
2a00:1028::/29
2a02:9b8::/31
Signature Algorithm: sha256WithRSAEncryption
6d:3e:5f:87:ec:a0:0d:02:22:70:76:e7:78:92:94:eb:9b:83:
21:5b:00:ed:ed:4f:67:53:59:a2:72:ed:9a:90:1c:bb:86:bd:
a6:4a:da:4c:74:b9:fd:25:14:95:74:5f:04:08:7b:fd:c5:f3:
b9:72:fd:f4:9d:b8:bb:1d:e5:b9:ac:6a:3f:93:4e:67:48:d1:
1f:e3:38:9f:d8:4d:0c:59:9b:0f:73:85:0d:66:23:0b:fe:1b:
77:54:b1:f8:90:b0:f2:26:80:d5:80:81:27:b4:7e:ee:47:3c:
62:d1:8b:02:e0:57:80:9b:b8:95:44:7b:87:63:a7:f7:21:c2:
89:1f:50:0a:d6:9b:b4:32:13:93:f1:0c:10:65:cf:a7:26:28:
a2:6b:4f:b3:6e:cf:78:62:77:a6:9b:74:c4:b9:72:80:cb:30:
2b:d7:8e:6f:a0:72:56:8a:22:bd:64:a7:2c:59:f4:31:4d:d9:
8b:27:29:d0:54:0e:91:bd:40:ef:03:e0:26:79:a0:62:4a:cd:
97:36:ea:bf:d6:be:ea:82:4b:6c:3e:0d:74:66:ee:91:c0:75:
8a:60:89:e9:1b:a4:3a:48:29:ab:6c:36:86:97:c6:d2:d4:c7:
aa:e2:30:31:d8:45:da:0c:9f:45:b8:79:d1:b8:4d:df:08:e9:
fd:3c:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:54:25 2024 by rpki-client on console-fra.rpki-client.org