Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kj6XEr5uJhiXCVA9zIuDi0EkWas.roa
File: kj6XEr5uJhiXCVA9zIuDi0EkWas.roa (raw, json)
Hash identifier: jABFfuQK183Zyg+hGXgFngHfRJaaHr3Rp7VZ45PBa3c=
Subject key identifier: 92:3E:97:12:BE:6E:26:18:97:09:50:3D:CC:8B:83:8B:41:24:59:AB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018CC49398E7992000B197F5915350AFB837
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kj6XEr5uJhiXCVA9zIuDi0EkWas.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.125.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.120.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.246.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.205.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.212.0/24 maxlen: 24
5.105.210.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.48.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.58.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.105.1.0/24 maxlen: 24
5.105.0.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.128.0/18 maxlen: 24
5.105.64.0/18 maxlen: 24
5.105.114.0/23 maxlen: 24
5.105.232.0/22 maxlen: 24
5.105.236.0/23 maxlen: 24
5.105.242.0/23 maxlen: 24
5.105.248.0/21 maxlen: 24
5.105.248.0/23 maxlen: 24
5.105.192.0/20 maxlen: 24
5.105.202.0/23 maxlen: 24
5.105.208.0/22 maxlen: 24
5.105.212.0/23 maxlen: 24
5.105.216.0/21 maxlen: 24
5.105.224.0/21 maxlen: 24
5.105.16.0/20 maxlen: 24
5.105.32.0/20 maxlen: 24
5.105.48.0/21 maxlen: 24
5.105.56.0/23 maxlen: 24
5.105.60.0/22 maxlen: 24
5.105.0.0/22 maxlen: 24
5.105.4.0/23 maxlen: 24
5.105.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:98:e7:99:20:00:b1:97:f5:91:53:50:af:b8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=923e9712be6e26189709503dcc8b838b412459ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:c8:79:8c:77:81:cf:7f:ec:fb:be:0a:17:
e7:31:c8:e6:0b:15:0e:90:2b:58:62:7f:f9:11:5b:
ae:f1:31:3d:62:52:e8:1e:44:00:32:45:20:ce:ed:
61:45:fb:67:7c:cc:7f:32:9e:a0:10:67:15:f6:ff:
ef:8a:4a:e4:48:74:5e:be:d2:7c:a4:c2:e8:c7:7f:
c8:30:da:4a:f9:94:62:87:ec:01:5a:33:78:d7:80:
f6:b9:77:3b:6b:21:0b:18:81:d3:36:5c:8b:f4:62:
0b:70:81:bc:36:22:21:eb:11:24:3f:99:85:9d:b7:
2f:4b:3f:d0:c3:29:a6:ff:07:e8:80:4f:55:68:b3:
ca:59:0b:60:d1:6e:f9:c7:19:9b:c6:c9:42:91:f7:
81:96:d6:78:cd:fd:c3:6c:03:44:31:0a:4c:4a:ba:
e8:5f:88:6d:2d:1a:86:13:b8:f7:f3:c4:93:9d:dd:
ef:ca:dd:79:b5:7c:e4:aa:4f:2f:52:35:26:a2:f3:
b8:3a:b4:66:b1:5b:41:2e:f6:cc:15:7b:12:ab:16:
11:5d:fe:a5:f8:6a:69:ce:0e:f8:fa:85:c4:72:f5:
b2:80:76:00:ca:18:37:58:1c:40:a3:d6:6e:cb:ca:
db:80:9b:95:52:cb:65:e8:59:4b:06:96:01:92:28:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:97:12:BE:6E:26:18:97:09:50:3D:CC:8B:83:8B:41:24:59:AB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kj6XEr5uJhiXCVA9zIuDi0EkWas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.0.0-5.105.5.255
5.105.7.0-5.105.58.255
5.105.60.0-5.105.213.255
5.105.216.0-5.105.246.255
5.105.248.0/21
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7c:fb:d5:ee:0c:8b:22:6d:f0:4b:07:1e:8b:43:db:4e:e0:
8a:20:a5:13:c6:91:00:ca:7e:27:71:4c:07:8b:eb:17:b7:56:
ac:19:08:81:93:84:dc:d1:f7:e6:19:5b:3b:3f:96:b8:47:16:
f1:ae:f4:b8:cd:3a:be:c7:51:4c:ac:0a:73:44:82:25:7d:8f:
e1:7d:ee:a0:54:ae:4c:41:4b:fe:b8:1b:1a:88:40:f0:50:3a:
76:9f:0a:e2:f0:e8:fa:69:8a:3d:3c:c2:46:20:c9:c7:97:f6:
a4:c0:2c:1e:56:80:62:5d:4d:55:45:b2:9d:34:8c:99:84:d2:
9d:4a:b6:c4:01:8c:d9:81:59:a2:4c:51:a4:15:e1:5e:b0:fa:
2d:a5:66:6b:84:9e:ae:4e:70:76:45:53:c8:d6:1a:21:91:b2:
63:7a:c8:14:58:78:72:74:07:ef:65:d7:2a:c4:bd:4e:5f:71:
5c:16:2c:21:74:7b:2a:22:51:9a:c2:15:4d:76:69:0a:66:11:
1b:0b:21:a7:1e:a4:87:7e:59:22:50:09:5f:46:92:59:97:1a:
cc:38:46:7b:22:9d:c1:b8:b2:7f:53:80:c0:dd:e8:71:76:98:
4c:9e:f9:dc:b6:01:e4:06:f9:2a:8c:3f:b4:f1:2d:c4:b7:aa:
02:5d:9e:1a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAYzEk5jnmSAAsZf1kVNQr7g3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjQwMTAxMTAzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjNlOTcxMmJlNmUyNjE4OTcwOTUwM2RjYzhiODM4YjQxMjQ1OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnvIeYx3gc9/7Pu+ChfnMcjmCxUO
kCtYYn/5EVuu8TE9YlLoHkQAMkUgzu1hRftnfMx/Mp6gEGcV9v/vikrkSHRevtJ8
pMLox3/IMNpK+ZRih+wBWjN414D2uXc7ayELGIHTNlyL9GILcIG8NiIh6xEkP5mF
nbcvSz/Qwymm/wfogE9VaLPKWQtg0W75xxmbxslCkfeBltZ4zf3DbANEMQpMSrro
X4htLRqGE7j388STnd3vyt15tXzkqk8vUjUmovO4OrRmsVtBLvbMFXsSqxYRXf6l
+Gppzg74+oXEcvWygHYAyhg3WBxAo9Zuy8rbgJuVUstl6FlLBpYBkiieuwIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFJI+lxK+biYYlwlQPcyLg4tBJFmrMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEva2o2WEVyNXVKaGlYQ1ZBOXpJdURpMEVrV2FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBPBAIAATBJMAsDAwAFaQME
AQVpBDAMAwQABWkHAwQABWk6MAwDBAIFaTwDBAEFadQwDAMEAwVp2AMEAAVp9gME
AwVp+AMEAAW0sAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEAinz71e4MiyJt8EsH
HotD207giiClE8aRAMp+J3FMB4vrF7dWrBkIgZOE3NH35hlbOz+WuEcW8a70uM06
vsdRTKwKc0SCJX2P4X3uoFSuTEFL/rgbGohA8FA6dp8K4vDo+mmKPTzCRiDJx5f2
pMAsHlaAYl1NVUWynTSMmYTSnUq2xAGM2YFZokxRpBXhXrD6LaVma4Serk5wdkVT
yNYaIZGyY3rIFFh4cnQH72XXKsS9Tl9xXBYsIXR7KiJRmsIVTXZpCmYRGwshpx6k
h35ZIlAJX0aSWZcazDhGeyKdwbiyf1OAwN3ocXaYTJ753LYB5Ab5Kow/tPEtxLeq
Al2eGg==
-----END CERTIFICATE-----
Generated at Sun May 5 00:21:35 2024 by rpki-client on console-fra.rpki-client.org