Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/wxBgHbe0MmCmT1V-bYD4rb7I1D0.roa
File: wxBgHbe0MmCmT1V-bYD4rb7I1D0.roa (raw, json)
Hash identifier: cyXAldopMVtTSgh5BpahOzlwjXJ5/boNOIv7AuUgX3E=
Subject key identifier: C3:10:60:1D:B7:B4:32:60:A6:4F:55:7E:6D:80:F8:AD:BE:C8:D4:3D
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019323FF3E4731077AB87F94B378C5D6F32B
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/wxBgHbe0MmCmT1V-bYD4rb7I1D0.roa
Signing time: Wed 13 Nov 2024 05:29:10 +0000
ROA not before: Wed 13 Nov 2024 05:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
89.110.88.0/24 maxlen: 24
89.110.89.0/24 maxlen: 24
89.110.90.0/24 maxlen: 24
89.110.91.0/24 maxlen: 24
89.110.92.0/24 maxlen: 24
89.110.93.0/24 maxlen: 24
89.110.94.0/24 maxlen: 24
89.110.95.0/24 maxlen: 24
89.110.96.0/24 maxlen: 24
89.110.97.0/24 maxlen: 24
89.110.98.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:23:ff:3e:47:31:07:7a:b8:7f:94:b3:78:c5:d6:f3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Nov 13 05:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c310601db7b43260a64f557e6d80f8adbec8d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:72:a4:ca:53:d2:c1:28:ee:43:28:6c:8c:
3c:e4:d7:37:9b:f9:c6:8c:c0:63:5e:bf:fa:a6:1b:
14:b9:a8:97:41:7c:65:34:15:dd:71:49:5c:e9:4f:
72:56:36:be:a6:47:ea:16:c9:f4:ed:82:19:92:a7:
38:9f:dd:d6:d8:17:16:3a:45:8c:42:f3:17:49:4d:
f8:7b:f3:92:14:90:d6:0a:b4:b3:8d:6b:d4:bf:cd:
29:b7:a8:42:b6:02:70:42:ad:0a:66:f7:61:6d:f9:
9f:2b:5b:30:98:8e:eb:f3:25:fd:76:6e:f9:a1:48:
3d:4e:01:13:d3:35:33:6f:1d:82:25:a0:ba:9e:4f:
75:f6:66:8c:10:6e:e2:48:19:3d:5d:75:97:09:da:
be:79:93:3c:7e:3e:63:38:b5:fe:a1:45:d8:cb:e9:
a1:70:68:f6:bb:44:ea:51:84:fa:12:d1:64:65:1d:
5f:e3:14:7c:a1:0e:f2:9b:8a:4a:67:4c:5b:6e:ec:
f4:bf:67:4d:b1:c8:bc:b3:d2:0d:cf:ab:6c:1a:d4:
0f:33:6e:93:75:e0:55:0b:28:0f:30:65:05:e0:46:
a4:5e:5d:4e:91:4a:ae:46:f7:fd:51:40:61:f4:d6:
6c:c1:6a:84:f1:21:93:0d:d2:b2:90:b8:5e:55:ef:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:10:60:1D:B7:B4:32:60:A6:4F:55:7E:6D:80:F8:AD:BE:C8:D4:3D
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/wxBgHbe0MmCmT1V-bYD4rb7I1D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.218.60.0/22
89.110.88.0-89.110.98.255
91.142.72.0/22
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
178.20.40.0/21
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
Signature Algorithm: sha256WithRSAEncryption
02:42:70:09:e6:89:27:37:73:5d:21:46:64:fc:92:8e:e6:39:
e2:f7:cd:0d:4c:8e:f5:e7:41:a2:8b:0a:7a:2d:26:35:cb:8a:
73:f6:72:5a:f1:37:be:76:d5:4c:37:5d:29:c1:01:ad:b4:2c:
b8:74:98:49:74:2a:37:d5:c2:33:e9:62:35:7c:7c:b7:19:cb:
ad:e7:8f:63:d6:8d:6c:89:73:94:ec:90:2b:f2:be:1c:04:d2:
00:6f:20:dc:e7:2a:ba:71:1e:98:06:f7:2d:e2:27:69:9c:50:
d8:a9:de:03:2e:41:27:00:df:50:e0:2a:36:4e:ec:3d:a4:ad:
28:59:60:5e:6c:5e:ff:5a:ed:ee:22:9f:40:e1:0e:8e:10:02:
43:c7:3c:3e:ac:4e:22:f1:1e:a2:71:cc:74:a7:8c:9e:92:e3:
56:f9:01:2f:c2:d1:29:e5:de:e4:c4:e3:a3:61:2d:2d:7c:47:
86:0f:d9:6a:21:eb:11:eb:85:fa:45:06:cc:0b:f7:88:a9:9f:
f9:5a:e1:b9:a1:cb:22:6a:95:5f:dd:d2:88:65:4b:d2:80:3c:
1d:1f:d4:fb:16:8d:df:a4:ba:99:dd:25:e9:19:f7:c0:0d:23:
9b:7f:6e:ff:12:13:12:26:e1:69:7c:04:b2:fe:9d:48:f4:69:
a0:e8:63:06
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAZMj/z5HMQd6uH+Us3jF1vMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjQxMTEzMDUyOTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzEwNjAxZGI3YjQzMjYwYTY0ZjU1N2U2ZDgwZjhhZGJlYzhkNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFypMpT0sEo7kMobIw85Nc3m/nG
jMBjXr/6phsUuaiXQXxlNBXdcUlc6U9yVja+pkfqFsn07YIZkqc4n93W2BcWOkWM
QvMXSU34e/OSFJDWCrSzjWvUv80pt6hCtgJwQq0KZvdhbfmfK1swmI7r8yX9dm75
oUg9TgET0zUzbx2CJaC6nk919maMEG7iSBk9XXWXCdq+eZM8fj5jOLX+oUXYy+mh
cGj2u0TqUYT6EtFkZR1f4xR8oQ7ym4pKZ0xbbuz0v2dNsci8s9INz6tsGtQPM26T
deBVCygPMGUF4EakXl1OkUquRvf9UUBh9NZswWqE8SGTDdKykLheVe+jFwIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFMMQYB23tDJgpk9Vfm2A+K2+yNQ9MB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvd3hCZ0hiZTBNbUNtVDFWLWJZRDRyYjdJMUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBAM+
cXADBAJT2dQDBABUNiwDBABUNi8DBAJVxmwDBAJY2jwwDAMEA1luWAMEAFluYgME
AluOSAMEAl23XDAMAwQAXmdTAwQBXmdcMAwDBABfjiEDBABfjiIwDAMEAF+OLQME
BF+OIDAMAwQCbaxUAwQCbaxYAwQDshQoAwQBstliAwQCudEcAwQCueeYAwQAwbKq
AwQBwwJCAwQBwwJGMAwDBADDAkkDBADDAkwwDAMEAcMCTgMEAcMCUAMEAcMCVDAN
BgkqhkiG9w0BAQsFAAOCAQEAAkJwCeaJJzdzXSFGZPySjuY54vfNDUyO9edBoosK
ei0mNcuKc/ZyWvE3vnbVTDddKcEBrbQsuHSYSXQqN9XCM+liNXx8txnLreePY9aN
bIlzlOyQK/K+HATSAG8g3OcqunEemAb3LeInaZxQ2KneAy5BJwDfUOAqNk7sPaSt
KFlgXmxe/1rt7iKfQOEOjhACQ8c8PqxOIvEeonHMdKeMnpLjVvkBL8LRKeXe5MTj
o2EtLXxHhg/ZaiHrEeuF+kUGzAv3iKmf+VrhuaHLImqVX93SiGVL0oA8HR/U+xaN
36S6md0l6Rn3wA0jm39u/xITEibhaXwEsv6dSPRpoOhjBg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:17 2024 by rpki-client on console-fra.rpki-client.org