Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ExK9kjBHhbnOClVsZE7I0lgCoK4.roa
File: ExK9kjBHhbnOClVsZE7I0lgCoK4.roa (raw, json)
Hash identifier: BafDj6E2ydqAxnlpE2fenJanXnMpq74KMDD/rlpSwG0=
Subject key identifier: 13:12:BD:92:30:47:85:B9:CE:0A:55:6C:64:4E:C8:D2:58:02:A0:AE
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018F26BDCB29FBCE25E722E69F5F684207C4
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ExK9kjBHhbnOClVsZE7I0lgCoK4.roa
Signing time: Sun 28 Apr 2024 22:05:23 +0000
ROA not before: Sun 28 Apr 2024 22:05:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12880
IP address blocks: 2.176.0.0/12 maxlen: 12
2.176.192.0/18 maxlen: 18
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
2.178.0.0/19 maxlen: 19
2.178.32.0/19 maxlen: 19
2.178.64.0/18 maxlen: 18
2.178.128.0/18 maxlen: 18
2.178.192.0/18 maxlen: 18
2.182.0.0/16 maxlen: 24
2.182.96.0/19 maxlen: 19
2.182.214.0/23 maxlen: 23
2.182.248.0/22 maxlen: 22
2.185.0.0/16 maxlen: 16
2.187.0.0/16 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.12.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.15.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
2.188.53.0/24 maxlen: 24
2.188.54.0/24 maxlen: 24
2.188.55.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.59.0/24 maxlen: 24
2.188.60.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.78.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.0.0/16 maxlen: 24
2.189.4.0/28 maxlen: 28
2.189.5.32/28 maxlen: 28
2.189.5.48/28 maxlen: 28
2.189.5.64/28 maxlen: 28
2.189.5.80/28 maxlen: 28
2.189.5.96/28 maxlen: 28
2.189.5.112/28 maxlen: 28
2.189.7.0/24 maxlen: 24
2.189.44.0/24 maxlen: 24
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.78.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.189.79.32/27 maxlen: 27
2.189.79.64/27 maxlen: 27
2.189.186.0/24 maxlen: 24
2.191.0.0/16 maxlen: 16
78.38.0.0/16 maxlen: 24
78.38.32.0/19 maxlen: 19
78.38.160.0/19 maxlen: 19
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
78.39.152.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
80.191.0.0/24 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.61.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
80.191.67.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
80.191.81.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
80.191.103.0/24 maxlen: 24
85.185.0.0/16 maxlen: 24
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
85.185.192.0/22 maxlen: 22
85.185.230.0/23 maxlen: 23
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.32.0/24 maxlen: 24
195.146.36.0/24 maxlen: 24
195.146.37.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.50.0/24 maxlen: 24
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.218.0.0/16 maxlen: 24
217.218.21.0/24 maxlen: 24
217.218.48.0/21 maxlen: 21
217.218.55.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
217.218.64.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
217.218.85.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.104.0/24 maxlen: 24
217.218.105.0/24 maxlen: 24
217.218.114.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
217.218.141.0/24 maxlen: 24
217.218.143.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
217.218.180.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.40.0/22 maxlen: 22
217.219.152.0/21 maxlen: 21
217.219.236.0/22 maxlen: 22
2001:4188::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:26:bd:cb:29:fb:ce:25:e7:22:e6:9f:5f:68:42:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 28 22:05:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1312bd92304785b9ce0a556c644ec8d25802a0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:60:04:c8:9c:f4:d0:8a:6c:47:18:7b:96:
af:2e:50:31:4e:d4:75:db:56:a1:ca:16:0c:39:ae:
f0:92:4c:e7:55:08:9f:01:c1:c7:81:33:cf:fc:60:
b5:95:48:79:db:55:2c:33:d2:04:7c:13:d6:b1:16:
98:97:93:a6:13:bc:99:3b:ef:e6:34:a7:ee:79:54:
8c:30:16:25:d6:43:cb:9a:00:73:b9:f8:56:80:ca:
74:b2:36:0f:a4:69:63:1e:c3:a3:30:6b:36:26:d3:
31:89:92:73:15:4d:af:e6:fd:74:77:71:da:f0:92:
59:16:10:31:6b:4e:66:35:15:8c:a3:99:88:5c:a1:
67:01:a2:f3:9b:df:35:52:06:f7:01:cb:7d:95:06:
b1:5d:ce:43:97:6d:0f:23:1d:a6:c8:c2:7e:7e:8d:
9f:24:fe:49:09:f4:53:7a:02:3a:e1:bb:b4:1d:f3:
ab:dd:7d:fb:84:5e:5d:ce:28:c3:00:32:4f:f0:f5:
05:ae:a2:a7:0b:a6:ff:fd:52:15:43:aa:9d:fb:16:
ce:c4:0b:68:79:69:c0:8b:aa:db:ff:72:f3:22:7f:
e6:b3:7a:ec:55:1b:0c:2f:35:59:7b:de:d5:b8:f5:
be:c6:df:96:2e:99:9a:0f:25:8b:74:14:ce:1b:ad:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:BD:92:30:47:85:B9:CE:0A:55:6C:64:4E:C8:D2:58:02:A0:AE
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ExK9kjBHhbnOClVsZE7I0lgCoK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
35:5d:01:15:95:8f:29:4d:94:ff:24:d8:4b:86:37:c4:40:02:
0c:b1:a1:67:9a:9e:0a:e6:f7:c7:fc:62:61:46:e8:f3:17:02:
46:f6:7b:f7:12:40:2a:95:79:ca:b7:48:0d:6c:f7:55:8d:f2:
b4:31:72:b2:ea:6a:58:2e:77:f5:ff:f4:26:49:e3:ed:6e:51:
c7:3a:61:28:18:40:43:6c:54:3b:39:28:17:d8:58:94:21:dd:
b4:d3:b4:5d:17:e8:89:36:fe:61:6d:2f:a1:9d:e1:9a:f1:6f:
e9:fa:9d:21:05:86:29:44:35:a1:d6:dd:8e:bb:ce:95:63:64:
96:94:17:8d:e3:32:22:19:84:b8:2b:44:06:6d:be:7d:70:6f:
e9:18:c5:4b:e3:a6:cb:35:3f:38:3c:50:d6:09:01:2b:15:ca:
0c:9c:37:3d:53:08:98:90:d2:ba:8e:ff:b6:a4:07:c9:7c:5e:
f8:cb:25:a1:da:e6:08:2d:a7:54:a0:a1:e7:f8:64:fe:eb:d0:
91:0c:61:9a:01:a1:95:da:5d:14:79:fc:b1:0c:64:cf:95:18:
87:18:92:1e:12:e7:f0:20:68:66:65:72:2e:64:ad:bc:3d:64:
52:48:c0:eb:5e:22:5e:42:ad:d6:b8:ff:70:23:d3:41:4e:f2:
3c:55:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 08:53:11 2024 by rpki-client on console-ams.rpki-client.org