Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/nZv1kCDJ7RaoGBWWvtBd2Bcwqpg.roa
File: nZv1kCDJ7RaoGBWWvtBd2Bcwqpg.roa (raw, json)
Hash identifier: alNolklFtEI5upkFjJK0aWEkfPHWkwZohzLtZhL4ACY=
Subject key identifier: 9D:9B:F5:90:20:C9:ED:16:A8:18:15:96:BE:D0:5D:D8:17:30:AA:98
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 0191FAF7CA4B2736192AC70486F2D22825DE
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/nZv1kCDJ7RaoGBWWvtBd2Bcwqpg.roa
Signing time: Mon 16 Sep 2024 13:13:48 +0000
ROA not before: Mon 16 Sep 2024 13:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23764
IP address blocks: 5.10.136.0/24 maxlen: 24
5.10.136.112/29 maxlen: 29
5.10.136.208/30 maxlen: 30
5.10.141.8/30 maxlen: 30
5.10.141.136/30 maxlen: 30
5.10.142.0/24 maxlen: 24
5.154.128.0/24 maxlen: 24
5.154.129.0/24 maxlen: 24
5.154.144.0/24 maxlen: 24
5.154.145.0/24 maxlen: 24
5.154.146.0/24 maxlen: 24
5.154.147.0/24 maxlen: 24
5.154.154.0/24 maxlen: 24
5.154.155.0/24 maxlen: 24
5.154.156.0/24 maxlen: 24
5.154.157.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
79.139.0.0/24 maxlen: 24
79.139.1.0/24 maxlen: 24
79.139.2.0/24 maxlen: 24
79.139.3.0/24 maxlen: 24
79.139.4.0/24 maxlen: 24
79.139.5.0/24 maxlen: 24
79.139.6.0/24 maxlen: 24
79.139.7.0/24 maxlen: 24
79.139.8.0/24 maxlen: 24
79.139.9.0/24 maxlen: 24
79.139.10.0/24 maxlen: 24
79.139.11.0/24 maxlen: 24
79.139.12.0/24 maxlen: 24
79.139.13.0/24 maxlen: 24
79.139.14.0/24 maxlen: 24
87.120.16.0/24 maxlen: 24
87.120.17.0/24 maxlen: 24
87.120.18.0/24 maxlen: 24
87.120.19.0/24 maxlen: 24
87.120.20.0/24 maxlen: 24
87.120.21.0/24 maxlen: 24
87.120.22.0/24 maxlen: 24
87.120.23.0/24 maxlen: 24
87.120.24.0/24 maxlen: 24
87.120.25.0/24 maxlen: 24
87.120.26.0/24 maxlen: 24
87.120.27.0/24 maxlen: 24
95.130.192.0/24 maxlen: 24
95.130.194.0/24 maxlen: 24
95.130.199.0/24 maxlen: 24
145.14.64.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.69.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
2a04:f580:9030:100::/56 maxlen: 56
2a04:f580:9210::/48 maxlen: 48
2a04:f581:110a::/48 maxlen: 48
2a04:f581:110b::/48 maxlen: 48
2a04:f581:8040::/48 maxlen: 48
2a04:f581:8070::/48 maxlen: 48
2a04:f581:8090::/48 maxlen: 48
2a04:f581:80b0::/48 maxlen: 48
2a04:f581:8140::/48 maxlen: 48
2a04:f581:8170::/48 maxlen: 48
2a04:f581:8190::/48 maxlen: 48
2a04:f581:81b0::/48 maxlen: 48
2a04:f581:8240::/48 maxlen: 48
2a04:f581:8270::/48 maxlen: 48
2a04:f581:8290::/48 maxlen: 48
2a04:f581:82b0::/48 maxlen: 48
2a04:f581:a00e:a001::/64 maxlen: 64
2a04:f581:a00e:a002::/64 maxlen: 64
2a04:f581:a00e:a003::/64 maxlen: 64
2a04:f581:a00e:a004::/64 maxlen: 64
2a04:f581:a00f::/48 maxlen: 48
2a04:f581:a111::/48 maxlen: 48
2a04:f581:a123::/48 maxlen: 48
2a04:f581:a125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:f7:ca:4b:27:36:19:2a:c7:04:86:f2:d2:28:25:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Sep 16 13:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d9bf59020c9ed16a8181596bed05dd81730aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:5e:76:09:2c:58:4f:94:95:6d:0b:24:54:
79:b6:f7:cb:af:f9:83:45:9f:36:1d:2a:72:d1:d8:
c3:09:97:a7:65:b9:3d:ca:35:58:1e:a1:94:79:96:
96:86:58:48:1f:cf:94:57:1a:0e:11:e6:b5:77:3b:
e2:32:47:21:c4:84:48:38:68:8b:a1:db:35:79:cf:
03:3e:c2:05:3c:82:13:a7:cb:c6:d7:f6:87:0b:ec:
ce:fa:ff:b8:d2:76:56:b5:31:4a:f2:50:76:34:20:
75:1f:4c:68:ae:1b:d3:4c:10:00:bf:1f:27:e8:48:
f5:a9:28:21:f9:56:fc:e7:f5:54:cf:1e:fb:38:e7:
af:24:a2:08:9a:f3:9c:2c:16:5b:85:ca:2f:f2:19:
fb:21:44:d3:61:fd:83:0d:5d:70:20:e9:74:38:50:
b2:00:91:99:96:5e:30:92:a1:dd:a3:99:30:08:b9:
89:89:ca:32:9d:26:d5:bc:c8:5d:9e:51:23:b3:14:
35:f3:05:57:59:bb:72:ea:47:84:fc:52:1b:9e:1a:
27:9f:a2:25:5c:04:d5:b1:50:3a:26:d4:4b:e9:45:
7a:f7:cc:97:c5:a7:ec:12:3a:44:01:2a:66:af:06:
95:e8:13:f0:0b:cb:cc:c4:73:ad:99:ab:15:b9:9f:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9B:F5:90:20:C9:ED:16:A8:18:15:96:BE:D0:5D:D8:17:30:AA:98
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/nZv1kCDJ7RaoGBWWvtBd2Bcwqpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0/24
5.10.141.8/30
5.10.141.136/30
5.10.142.0/24
5.154.128.0/23
5.154.144.0/22
5.154.154.0-5.154.159.255
79.139.0.0-79.139.14.255
87.120.16.0-87.120.27.255
95.130.192.0/24
95.130.194.0/24
95.130.199.0/24
145.14.64.0/24
145.14.66.0/24
145.14.68.0-145.14.70.255
145.14.73.0/24
145.14.76.0-145.14.78.255
145.14.80.0/24
145.14.83.0/24
145.14.85.0/24
145.14.87.0/24
145.14.89.0/24
145.14.91.0-145.14.93.255
IPv6:
2a04:f580:9030:100::/56
2a04:f580:9210::/48
2a04:f581:110a::/47
2a04:f581:8040::/48
2a04:f581:8070::/48
2a04:f581:8090::/48
2a04:f581:80b0::/48
2a04:f581:8140::/48
2a04:f581:8170::/48
2a04:f581:8190::/48
2a04:f581:81b0::/48
2a04:f581:8240::/48
2a04:f581:8270::/48
2a04:f581:8290::/48
2a04:f581:82b0::/48
2a04:f581:a00e:a001::-2a04:f581:a00e:a004:ffff:ffff:ffff:ffff
2a04:f581:a00f::/48
2a04:f581:a111::/48
2a04:f581:a123::/48
2a04:f581:a125::/48
Signature Algorithm: sha256WithRSAEncryption
67:68:df:8a:88:85:f3:95:73:10:db:e0:13:0f:c7:63:b8:f0:
31:c0:7d:9b:50:86:50:bc:3f:72:fc:3f:eb:98:00:87:c5:de:
c5:51:06:61:7d:ac:30:a3:bf:55:da:f7:74:bb:f7:37:fe:3c:
3a:2e:e7:69:b9:94:e7:c6:e6:dc:a7:7e:f0:6d:fa:20:b8:a4:
61:45:57:fe:af:3e:3f:38:6a:43:40:9c:4f:36:4a:53:e0:6a:
a0:d9:6a:b8:84:fa:5c:4a:8a:cd:ff:9f:46:8f:e1:71:98:63:
83:e6:18:95:c6:76:29:18:e8:d9:ef:54:c2:01:61:8e:3b:f8:
30:38:80:52:d9:f8:aa:63:15:29:4f:26:55:10:01:42:2e:3f:
6b:37:7a:ca:e3:8b:34:5e:92:9f:27:34:97:e6:d1:a3:70:f9:
66:3c:da:99:8b:a6:d4:94:e4:f6:17:26:7d:de:bd:4c:c3:5d:
1e:1b:10:af:bc:34:7b:76:2d:13:b8:7d:59:2f:e4:66:d3:37:
19:45:f9:ff:76:d6:3b:a8:27:56:e3:d1:8b:d8:06:c5:28:5a:
d3:8a:20:df:54:7c:aa:b3:3c:f5:ad:77:ff:a1:c2:9b:07:f0:
2e:1a:f0:ea:4f:ca:55:7c:2a:00:bc:3e:08:50:18:e4:49:30:
59:aa:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:13:31 2024 by rpki-client on console-fra.rpki-client.org