Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa
File: 3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa (raw, json)
Hash identifier: akr8fvq3b1MRJAZxmdxssOux5X/sXZanMRkztgAfzHg=
Subject key identifier: DD:E5:13:D3:C2:3D:7C:03:F7:46:1D:14:13:D1:5B:7F:1B:06:D5:B7
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019427479939E483DDA3FC4B911C1679C850
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12880
IP address blocks: 2.176.0.0/12 maxlen: 12
2.176.192.0/18 maxlen: 18
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
2.178.0.0/19 maxlen: 19
2.178.32.0/19 maxlen: 19
2.178.64.0/18 maxlen: 18
2.178.128.0/18 maxlen: 18
2.178.192.0/18 maxlen: 18
2.182.0.0/16 maxlen: 24
2.182.96.0/19 maxlen: 19
2.182.214.0/23 maxlen: 23
2.182.248.0/22 maxlen: 22
2.185.0.0/16 maxlen: 16
2.187.0.0/16 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.12.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.15.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
2.188.53.0/24 maxlen: 24
2.188.54.0/24 maxlen: 24
2.188.55.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.59.0/24 maxlen: 24
2.188.60.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.78.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.0.0/16 maxlen: 24
2.189.4.0/28 maxlen: 28
2.189.5.32/28 maxlen: 28
2.189.5.48/28 maxlen: 28
2.189.5.64/28 maxlen: 28
2.189.5.80/28 maxlen: 28
2.189.5.96/28 maxlen: 28
2.189.5.112/28 maxlen: 28
2.189.7.0/24 maxlen: 24
2.189.44.0/24 maxlen: 24
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.78.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.189.79.32/27 maxlen: 27
2.189.79.64/27 maxlen: 27
2.189.186.0/24 maxlen: 24
2.191.0.0/16 maxlen: 16
78.38.0.0/16 maxlen: 24
78.38.32.0/19 maxlen: 19
78.38.160.0/19 maxlen: 19
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
78.39.152.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
80.191.0.0/24 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.61.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
80.191.67.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
80.191.81.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
80.191.103.0/24 maxlen: 24
85.185.0.0/16 maxlen: 24
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
85.185.192.0/22 maxlen: 22
85.185.230.0/23 maxlen: 23
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.32.0/24 maxlen: 24
195.146.36.0/24 maxlen: 24
195.146.37.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.50.0/24 maxlen: 24
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.218.0.0/16 maxlen: 24
217.218.21.0/24 maxlen: 24
217.218.48.0/21 maxlen: 21
217.218.55.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
217.218.64.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
217.218.85.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.104.0/24 maxlen: 24
217.218.105.0/24 maxlen: 24
217.218.114.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
217.218.141.0/24 maxlen: 24
217.218.143.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
217.218.180.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.40.0/22 maxlen: 22
217.219.152.0/21 maxlen: 21
217.219.236.0/22 maxlen: 22
2001:4188::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:99:39:e4:83:dd:a3:fc:4b:91:1c:16:79:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dde513d3c23d7c03f7461d1413d15b7f1b06d5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:ea:e1:5c:65:2c:2e:34:73:ca:01:2d:cf:
40:d7:6d:a4:06:cc:f9:d2:bd:0d:61:61:fe:45:af:
b8:b9:0b:f9:9b:bf:54:a2:12:00:48:7e:d9:f9:fe:
33:7a:a5:17:6a:50:8d:f1:29:46:c8:cc:46:13:89:
86:28:d0:92:a4:2f:e9:af:a6:d5:7b:b2:9d:7d:bf:
75:b5:c7:e9:23:70:58:98:86:49:71:47:e0:62:11:
2d:a8:fd:fe:24:27:73:03:f3:a1:2d:82:48:67:4c:
6d:b2:6e:28:6d:92:5a:40:e5:0b:07:65:b3:ab:f5:
12:b9:20:da:4e:77:74:94:ed:5a:45:85:80:ec:56:
13:56:d2:4c:61:8a:77:ae:45:1e:04:3a:fe:b4:28:
08:09:03:1a:c1:21:34:72:fb:31:ee:1d:16:c4:64:
ec:e6:4d:be:5a:4f:7b:4a:ce:7b:da:bd:17:38:53:
aa:16:12:7f:4e:af:3e:78:dd:5b:ae:87:0c:78:82:
a3:39:9a:76:67:95:a6:eb:a5:a4:53:2c:ac:70:e9:
5e:e6:70:6c:ef:9b:30:cd:35:61:f0:ab:5a:31:83:
09:cb:b1:c6:62:d9:10:17:e5:8f:ab:da:ce:a6:7b:
16:9e:a0:a0:81:51:f1:b6:53:c5:31:43:dc:11:0c:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:13:D3:C2:3D:7C:03:F7:46:1D:14:13:D1:5B:7F:1B:06:D5:B7
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
63:2b:7a:6c:c8:97:61:69:5c:74:8e:1c:38:e5:b5:2d:1a:ab:
f9:42:86:cf:46:15:27:89:86:a8:6e:b9:32:cf:da:d2:4c:1d:
16:00:27:c1:45:a1:fd:80:d7:fd:5b:16:b9:ec:b1:3b:20:41:
61:e5:72:2a:bf:e7:c6:d2:7b:50:65:72:13:e7:d3:f9:12:ce:
03:02:d2:10:37:fe:44:bb:a9:64:ff:23:28:5a:5d:f9:a1:de:
ec:53:4c:b4:19:7a:84:7e:7f:e7:25:7c:99:28:f2:fb:1a:eb:
8f:a0:53:8d:52:5b:6f:d2:f3:20:d5:de:d1:84:44:fa:3a:b2:
93:35:0a:e3:3b:66:04:be:83:14:04:c0:2b:96:07:e1:8d:33:
d7:03:c2:c5:91:80:d1:1a:bb:76:22:29:e0:b7:4b:51:dc:0e:
99:71:83:ce:4b:15:ff:91:0f:10:a2:8b:90:90:af:1f:7a:a0:
f8:c6:46:c1:04:79:6e:50:e2:4a:e0:98:20:f7:e9:21:bf:a1:
fd:2f:ab:83:63:a6:01:e9:fd:92:b7:52:2f:01:8b:5c:a4:93:
9a:8b:9d:f8:ef:11:de:9d:df:3e:0f:dc:8c:21:f5:5b:12:e8:
a4:8c:9a:07:bc:4d:00:61:05:c5:96:02:bd:6c:3b:60:b7:8c:
c8:32:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:28 2025 by rpki-client