Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/Uhasf7x8TM93q6Xy12m4zTcIFB8.roa
File: Uhasf7x8TM93q6Xy12m4zTcIFB8.roa (raw, json)
Hash identifier: zWGRA3NSptsClA6FtdWJV+D8jK0CjFoFrr6lI7GzFO8=
Subject key identifier: 52:16:AC:7F:BC:7C:4C:CF:77:AB:A5:F2:D7:69:B8:CD:37:08:14:1F
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 018EE7A8D8DEDB97B672B534AD9C310B899B
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/Uhasf7x8TM93q6Xy12m4zTcIFB8.roa
Signing time: Tue 16 Apr 2024 16:06:26 +0000
ROA not before: Tue 16 Apr 2024 16:06:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 37.61.208.0/20 maxlen: 20
62.75.130.0/24 maxlen: 24
62.75.136.0/24 maxlen: 24
62.75.167.0/24 maxlen: 24
62.75.179.0/24 maxlen: 24
62.75.181.0/24 maxlen: 24
62.75.182.0/23 maxlen: 24
62.75.194.0/23 maxlen: 24
62.75.196.0/23 maxlen: 24
62.75.198.0/24 maxlen: 24
62.75.201.0/24 maxlen: 24
62.75.202.0/23 maxlen: 24
62.75.203.0/24 maxlen: 24
62.75.204.0/24 maxlen: 24
62.75.207.0/24 maxlen: 24
62.75.213.0/24 maxlen: 24
62.75.214.0/23 maxlen: 24
62.75.216.0/21 maxlen: 24
62.75.224.0/24 maxlen: 24
62.75.228.0/23 maxlen: 24
62.75.230.0/24 maxlen: 24
62.75.232.0/22 maxlen: 24
62.75.236.0/23 maxlen: 24
62.75.238.0/24 maxlen: 24
62.75.252.0/22 maxlen: 24
62.138.0.0/22 maxlen: 24
62.138.5.0/24 maxlen: 24
62.138.6.0/23 maxlen: 24
62.138.8.0/24 maxlen: 24
62.138.10.0/23 maxlen: 24
62.138.12.0/24 maxlen: 24
62.138.14.0/24 maxlen: 24
62.138.16.0/24 maxlen: 24
62.138.18.0/23 maxlen: 24
62.138.24.0/24 maxlen: 24
62.138.26.0/24 maxlen: 24
78.138.96.0/21 maxlen: 21
78.138.104.0/22 maxlen: 22
78.138.118.0/24 maxlen: 24
78.138.126.0/23 maxlen: 23
80.86.81.0/24 maxlen: 24
80.86.82.0/23 maxlen: 24
80.86.84.0/22 maxlen: 24
80.86.90.0/23 maxlen: 24
80.86.92.0/22 maxlen: 24
85.25.1.0/24 maxlen: 24
85.25.8.0/21 maxlen: 24
85.25.20.0/24 maxlen: 24
85.25.27.0/24 maxlen: 24
85.25.40.0/21 maxlen: 24
85.25.43.0/24 maxlen: 24
85.25.48.0/20 maxlen: 24
85.25.64.0/24 maxlen: 24
85.25.66.0/23 maxlen: 24
85.25.68.0/24 maxlen: 24
85.25.71.0/24 maxlen: 24
85.25.72.0/21 maxlen: 24
85.25.92.0/22 maxlen: 24
85.25.98.0/23 maxlen: 24
85.25.100.0/24 maxlen: 24
85.25.102.0/23 maxlen: 24
85.25.103.0/24 maxlen: 24
85.25.104.0/22 maxlen: 24
85.25.108.0/23 maxlen: 24
85.25.110.0/24 maxlen: 24
85.25.116.0/22 maxlen: 24
85.25.120.0/24 maxlen: 24
85.25.122.0/23 maxlen: 24
85.25.124.0/22 maxlen: 24
85.25.128.0/20 maxlen: 24
85.25.144.0/21 maxlen: 24
85.25.152.0/22 maxlen: 24
85.25.156.0/23 maxlen: 24
85.25.159.0/24 maxlen: 24
85.25.160.0/24 maxlen: 24
85.25.172.0/23 maxlen: 24
85.25.174.0/24 maxlen: 24
85.25.176.0/20 maxlen: 24
85.25.192.0/21 maxlen: 24
85.25.200.0/22 maxlen: 24
85.25.206.0/23 maxlen: 24
85.25.208.0/22 maxlen: 24
85.25.213.0/24 maxlen: 24
85.25.214.0/23 maxlen: 24
85.25.216.0/22 maxlen: 24
85.25.220.0/24 maxlen: 24
85.25.222.0/23 maxlen: 24
85.25.226.0/23 maxlen: 24
85.25.232.0/23 maxlen: 24
85.25.235.0/24 maxlen: 24
85.25.236.0/22 maxlen: 24
85.25.242.0/23 maxlen: 24
85.25.244.0/24 maxlen: 24
85.25.246.0/24 maxlen: 24
85.25.248.0/21 maxlen: 24
85.93.88.0/22 maxlen: 24
85.93.92.0/23 maxlen: 24
85.195.64.0/18 maxlen: 18
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 22
92.42.104.0/21 maxlen: 21
92.204.40.0/23 maxlen: 24
92.204.53.0/24 maxlen: 24
92.204.54.0/24 maxlen: 24
92.204.96.0/21 maxlen: 21
92.204.160.0/19 maxlen: 19
92.204.192.0/23 maxlen: 23
92.204.196.0/22 maxlen: 22
92.204.200.0/21 maxlen: 21
92.204.240.0/20 maxlen: 20
92.205.32.0/21 maxlen: 24
92.205.112.0/20 maxlen: 20
92.205.152.0/22 maxlen: 22
146.0.224.0/19 maxlen: 19
185.19.216.0/22 maxlen: 22
185.136.156.0/22 maxlen: 22
185.136.160.0/22 maxlen: 22
185.136.164.0/22 maxlen: 22
185.136.168.0/22 maxlen: 22
188.138.0.0/21 maxlen: 24
188.138.1.0/24 maxlen: 24
188.138.8.0/22 maxlen: 24
188.138.9.0/24 maxlen: 24
188.138.16.0/22 maxlen: 24
188.138.17.0/24 maxlen: 24
188.138.24.0/21 maxlen: 24
188.138.32.0/20 maxlen: 24
188.138.56.0/21 maxlen: 24
188.138.56.0/22 maxlen: 24
188.138.60.0/22 maxlen: 24
188.138.68.0/22 maxlen: 24
188.138.72.0/21 maxlen: 24
188.138.81.0/24 maxlen: 24
188.138.82.0/23 maxlen: 24
188.138.84.0/22 maxlen: 24
188.138.88.0/21 maxlen: 24
188.138.96.0/19 maxlen: 24
188.138.122.0/24 maxlen: 24
195.69.240.0/22 maxlen: 22
217.118.19.0/24 maxlen: 24
217.118.23.0/24 maxlen: 24
217.118.24.0/24 maxlen: 24
217.118.26.0/23 maxlen: 24
217.172.170.0/23 maxlen: 24
217.172.172.0/24 maxlen: 24
217.172.176.0/21 maxlen: 24
217.172.184.0/22 maxlen: 24
217.172.188.0/23 maxlen: 24
217.172.190.0/24 maxlen: 24
2a01:7a0::/29 maxlen: 29
2a01:7a7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:a8:d8:de:db:97:b6:72:b5:34:ad:9c:31:0b:89:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Apr 16 16:06:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5216ac7fbc7c4ccf77aba5f2d769b8cd3708141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:b5:af:09:09:85:ae:30:59:e8:b2:ad:24:
e9:8d:ce:e0:ab:19:bf:b6:4a:b6:d4:22:7f:5a:d9:
26:2d:74:44:65:37:ed:0d:66:bf:a1:78:fc:6f:87:
43:00:28:ad:96:69:70:9d:ea:61:af:1d:d4:81:36:
a0:24:e4:fd:74:d0:8e:7c:18:83:63:35:67:d0:71:
86:0d:6a:fc:76:4f:5f:b4:42:b3:9d:27:0e:83:2e:
40:01:01:e3:c9:d1:e1:9d:d3:dc:97:cb:8d:75:99:
e4:50:bd:2d:1b:f0:0e:38:01:f0:79:d2:e6:98:69:
36:0f:11:e8:ed:4f:5e:00:eb:90:f2:db:98:35:9b:
70:96:47:3d:95:41:b9:39:e9:7d:18:3c:1c:32:ea:
e6:7a:07:88:c9:7c:12:1f:58:b8:11:53:b1:e9:f2:
c0:75:fc:82:b2:47:04:96:0b:bd:ee:57:56:bf:6c:
e3:8b:59:42:d2:ed:33:f9:66:59:15:d7:d9:fd:1c:
35:36:56:1e:8b:13:fe:3d:2d:86:b6:c2:fb:fa:3b:
16:35:84:cb:58:3e:c0:b8:0b:f0:11:bf:a0:8e:16:
d6:a2:c0:ad:19:55:86:0f:eb:06:26:b4:c9:f6:89:
49:c8:a7:df:ee:c2:30:18:ca:49:61:36:00:6b:32:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:16:AC:7F:BC:7C:4C:CF:77:AB:A5:F2:D7:69:B8:CD:37:08:14:1F
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/Uhasf7x8TM93q6Xy12m4zTcIFB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0-85.25.68.255
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/21
92.204.160.0-92.204.193.255
92.204.196.0-92.204.207.255
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
146.0.224.0/19
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:e9:59:3d:ac:67:d5:4f:c5:85:5b:ba:e0:aa:05:d7:39:5e:
57:b7:32:c4:2a:c4:3f:de:fb:68:ab:78:d5:e4:6d:c0:ed:de:
e0:0c:39:d1:5e:4b:4d:73:b6:07:0f:a6:f2:4e:c3:f1:9f:f5:
06:69:b7:16:20:18:f0:5a:74:cc:90:0c:5f:15:70:d2:df:b0:
2a:a5:18:a3:2d:1e:17:2a:62:57:54:e9:74:9f:1c:78:ee:6f:
2f:c1:3e:04:5c:7c:e2:6e:9e:d7:61:d8:bf:d4:c6:1a:95:55:
c1:e1:f7:75:98:6c:8e:64:36:5d:3f:cc:0d:a3:bd:2a:de:32:
09:44:8d:4a:6e:6e:05:67:f7:bd:e7:db:4d:47:42:87:84:41:
7e:b0:0c:28:b1:b2:7d:01:28:bb:a0:8c:0a:15:88:f8:42:60:
15:e1:d9:1a:cb:db:07:f8:ad:91:12:32:06:3c:57:ee:7d:d0:
4f:5d:3b:b1:40:63:5b:1c:ec:ab:d8:a0:a5:c4:46:c5:dd:f5:
9f:51:38:03:10:13:13:e6:b2:59:a5:82:ad:14:0e:a8:2b:e6:
3e:b1:73:81:a5:8c:26:22:4b:90:e8:da:96:89:df:65:09:35:
6b:97:15:e8:31:d8:53:80:f0:81:11:50:10:11:b7:8c:04:8f:
27:7a:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:08:07 2024 by rpki-client on console-ams.rpki-client.org