Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/HOUmaZQvg17f_hoGND_w3wMymeY.roa
File: HOUmaZQvg17f_hoGND_w3wMymeY.roa (raw, json)
Hash identifier: +IQjRoKvsylft2g+zXs2VNaYiscoqfREBWNCXXzMCB4=
Subject key identifier: 1C:E5:26:69:94:2F:83:5E:DF:FE:1A:06:34:3F:F0:DF:03:32:99:E6
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 01935424FB8037FFB83FB98AD2E010EC2B4D
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/HOUmaZQvg17f_hoGND_w3wMymeY.roa
Signing time: Fri 22 Nov 2024 13:52:10 +0000
ROA not before: Fri 22 Nov 2024 13:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9146
IP address blocks: 31.176.128.0/17 maxlen: 21
31.176.128.0/19 maxlen: 19
31.176.128.0/20 maxlen: 20
31.176.144.0/20 maxlen: 20
31.176.160.0/19 maxlen: 19
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
31.176.192.0/20 maxlen: 20
31.176.208.0/21 maxlen: 21
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
31.176.224.0/20 maxlen: 20
31.176.240.0/20 maxlen: 20
37.203.64.0/18 maxlen: 21
37.203.64.0/20 maxlen: 20
37.203.80.0/20 maxlen: 20
37.203.96.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
80.65.64.0/19 maxlen: 21
80.65.64.0/20 maxlen: 20
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
80.65.68.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.72.0/22 maxlen: 22
80.65.76.0/22 maxlen: 22
80.65.80.0/20 maxlen: 20
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
85.92.224.0/19 maxlen: 19
85.92.226.0/24 maxlen: 24
85.92.227.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
85.92.230.0/24 maxlen: 24
85.92.232.0/21 maxlen: 21
85.92.240.0/21 maxlen: 21
89.146.128.0/18 maxlen: 21
89.146.128.0/20 maxlen: 20
89.146.144.0/20 maxlen: 20
89.146.160.0/20 maxlen: 20
89.146.176.0/20 maxlen: 20
92.36.128.0/17 maxlen: 21
92.36.128.0/19 maxlen: 19
92.36.128.0/21 maxlen: 21
92.36.136.0/21 maxlen: 21
92.36.144.0/20 maxlen: 20
92.36.160.0/19 maxlen: 19
92.36.160.0/20 maxlen: 20
92.36.176.0/20 maxlen: 20
92.36.192.0/19 maxlen: 19
92.36.192.0/20 maxlen: 20
92.36.192.0/21 maxlen: 21
92.36.208.0/20 maxlen: 20
92.36.224.0/19 maxlen: 19
92.36.224.0/20 maxlen: 20
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.240.0/21 maxlen: 21
109.163.128.0/18 maxlen: 18
109.163.128.0/19 maxlen: 19
109.163.128.0/22 maxlen: 22
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
109.163.146.0/24 maxlen: 24
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.168.0/21 maxlen: 23
109.163.168.0/23 maxlen: 23
109.163.170.0/24 maxlen: 24
109.163.171.0/24 maxlen: 24
109.163.172.0/22 maxlen: 22
109.163.176.0/20 maxlen: 21
109.163.176.0/21 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.188.0/23 maxlen: 23
109.163.190.0/23 maxlen: 23
109.175.0.0/17 maxlen: 21
109.175.0.0/19 maxlen: 19
109.175.4.0/23 maxlen: 23
109.175.6.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
109.175.12.0/23 maxlen: 23
109.175.14.0/23 maxlen: 23
109.175.15.0/24 maxlen: 24
109.175.16.0/22 maxlen: 22
109.175.20.0/23 maxlen: 23
109.175.22.0/23 maxlen: 23
109.175.24.0/24 maxlen: 24
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
109.175.32.0/19 maxlen: 19
109.175.32.0/21 maxlen: 21
109.175.38.0/23 maxlen: 23
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
109.175.48.0/20 maxlen: 20
109.175.64.0/20 maxlen: 20
109.175.96.0/19 maxlen: 19
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.98.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.100.0/23 maxlen: 23
109.175.102.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.106.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
195.222.48.0/20 maxlen: 20
195.222.48.0/21 maxlen: 21
195.222.49.0/24 maxlen: 24
195.222.56.0/21 maxlen: 21
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:24:fb:80:37:ff:b8:3f:b9:8a:d2:e0:10:ec:2b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Nov 22 13:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ce52669942f835edffe1a06343ff0df033299e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:5f:c0:19:67:06:1b:d2:c7:dc:23:c3:62:
76:1d:02:12:ce:23:09:c2:1a:aa:fe:ab:02:ea:1b:
9e:6b:79:01:73:5e:85:b1:61:1b:7f:33:8a:8f:ac:
b6:68:37:45:cf:00:2d:5e:bd:33:17:e4:61:29:f6:
3a:43:0f:bc:6f:f2:aa:ed:bb:ad:06:4a:33:98:42:
fb:3d:93:38:2d:72:af:87:77:6e:6f:d8:89:51:88:
87:d8:9a:10:e0:f6:55:40:8e:b0:b7:fd:3e:8f:73:
94:ee:88:ca:d5:88:12:fa:f4:9b:3b:ef:ff:60:a7:
ef:84:4f:dd:41:2f:0f:4c:0c:84:f3:42:08:20:44:
23:cb:84:a3:e8:14:c3:a5:3e:f7:67:e3:7a:36:e0:
36:cf:89:08:c4:c0:17:3f:70:57:10:82:43:71:fb:
21:c9:d9:1e:58:6b:a1:59:14:30:a3:ff:b8:44:8f:
db:f8:2f:fe:dc:61:a2:21:f9:07:3a:14:a3:29:42:
79:a1:56:53:d1:6b:40:28:cd:be:d6:41:4e:12:b5:
b6:21:4a:d4:24:53:37:b0:f9:8a:ff:44:3f:c8:ab:
be:b4:29:98:a4:2c:a3:d1:32:e4:ce:9f:9d:17:f9:
7a:f8:32:b5:3a:6e:be:c4:c0:79:d7:8b:da:5c:52:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:26:69:94:2F:83:5E:DF:FE:1A:06:34:3F:F0:DF:03:32:99:E6
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/HOUmaZQvg17f_hoGND_w3wMymeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
32:86:e6:3e:79:f9:c9:68:e3:13:83:ca:02:d8:ac:25:f3:5f:
88:5b:68:7e:ff:41:45:b2:12:6c:5f:70:da:d3:c1:1e:62:b0:
21:8c:a9:09:3d:18:93:8c:f7:62:6f:69:e2:3d:89:4e:f1:58:
8c:34:67:f3:e1:d7:b9:fb:9a:3e:00:c2:bd:7c:78:ff:a0:d0:
15:ae:5b:f9:2c:72:3a:b7:df:1b:c3:0d:85:8d:e5:fc:92:99:
5c:31:84:e7:9b:f1:5d:5b:0a:8c:98:57:3e:b4:55:25:3e:fd:
28:6a:8a:94:15:56:b6:ba:ee:2b:2c:b6:48:51:cb:3c:a0:47:
74:ae:79:c3:2b:9a:53:2d:71:2d:cf:f0:b4:f2:e8:6d:2c:cb:
bc:de:b6:9e:b1:4b:33:37:52:52:4f:fb:64:db:59:6f:fa:fe:
38:ba:bc:7d:4e:06:7d:80:57:f6:37:64:95:8f:2f:1b:bb:2f:
26:62:6d:07:01:8c:c8:4d:bc:3e:ea:38:e5:d5:fb:cf:42:c8:
e5:32:12:72:e0:28:91:04:85:dc:93:d9:28:82:5c:81:95:82:
fb:d7:f6:60:84:9a:16:a3:5f:e8:8e:ea:0b:a0:36:f3:bf:9f:
98:f4:26:9d:e1:99:e7:59:b6:0a:c4:96:51:6b:24:e5:f6:41:
56:32:f5:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZNUJPuAN/+4P7mK0uAQ7CtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTViMDE0ZTU2OTE4NmZiODRhMjAyNDk1NGNjY2M5Yzkx
YjFlM2YwHhcNMjQxMTIyMTM1MjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2U1MjY2OTk0MmY4MzVlZGZmZTFhMDYzNDNmZjBkZjAzMzI5OWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXhfwBlnBhvSx9wjw2J2HQISziMJ
whqq/qsC6huea3kBc16FsWEbfzOKj6y2aDdFzwAtXr0zF+RhKfY6Qw+8b/Kq7but
BkozmEL7PZM4LXKvh3dub9iJUYiH2JoQ4PZVQI6wt/0+j3OU7ojK1YgS+vSbO+//
YKfvhE/dQS8PTAyE80IIIEQjy4Sj6BTDpT73Z+N6NuA2z4kIxMAXP3BXEIJDcfsh
ydkeWGuhWRQwo/+4RI/b+C/+3GGiIfkHOhSjKUJ5oVZT0WtAKM2+1kFOErW2IUrU
JFM3sPmK/0Q/yKu+tCmYpCyj0TLkzp+dF/l6+DK1Om6+xMB514vaXFJaMQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFBzlJmmUL4Ne3/4aBjQ/8N8DMpnmMB8GA1UdIwQY
MBaAFOnlsBTlaRhvuEogJJVMzMnJGx4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2Qt
MmJiMWVmYzU3YTg2LzEvSE9VbWFaUXZnMTdmX2hvR05EX3czd015bWVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2QtMmJiMWVmYzU3YTg2
LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQHH7CAAwQG
JctAAwQFUEFAAwQFVVzgAwQGWZKAAwQHXCSAAwQGbaOAAwQHba8AAwQAuQxMAwQB
uQxOAwQFw94gMA0EAgACMAcDBQAqAiewMA0GCSqGSIb3DQEBCwUAA4IBAQAyhuY+
efnJaOMTg8oC2Kwl81+IW2h+/0FFshJsX3Da08EeYrAhjKkJPRiTjPdib2niPYlO
8ViMNGfz4de5+5o+AMK9fHj/oNAVrlv5LHI6t98bww2FjeX8kplcMYTnm/FdWwqM
mFc+tFUlPv0oaoqUFVa2uu4rLLZIUcs8oEd0rnnDK5pTLXEtz/C08uhtLMu83rae
sUszN1JST/tk21lv+v44urx9TgZ9gFf2N2SVjy8buy8mYm0HAYzITbw+6jjl1fvP
QsjlMhJy4CiRBIXck9koglyBlYL71/ZghJoWo1/ojuoLoDbzv5+Y9Cad4ZnnWbYK
xJZRayTl9kFWMvWK
-----END CERTIFICATE-----
Generated at Fri Dec 27 20:34:53 2024 by rpki-client on console-fra.rpki-client.org