Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/sclRZkV76KDDNZCkiHw_KYdrrp0.roa
File: sclRZkV76KDDNZCkiHw_KYdrrp0.roa (raw, json)
Hash identifier: M1dzQUP3nY14BSkEeB8oCFmT/Div7R3MTulKuC6dQqw=
Subject key identifier: B1:C9:51:66:45:7B:E8:A0:C3:35:90:A4:88:7C:3F:29:87:6B:AE:9D
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01921DF7245390A37D489D00AB2A1D73C447
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/sclRZkV76KDDNZCkiHw_KYdrrp0.roa
Signing time: Mon 23 Sep 2024 08:19:48 +0000
ROA not before: Mon 23 Sep 2024 08:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 37.61.208.0/20 maxlen: 24
62.75.130.0/24 maxlen: 24
62.75.136.0/24 maxlen: 24
62.75.167.0/24 maxlen: 24
62.75.179.0/24 maxlen: 24
62.75.181.0/24 maxlen: 24
62.75.182.0/23 maxlen: 24
62.75.194.0/23 maxlen: 24
62.75.196.0/23 maxlen: 24
62.75.198.0/24 maxlen: 24
62.75.201.0/24 maxlen: 24
62.75.202.0/23 maxlen: 24
62.75.203.0/24 maxlen: 24
62.75.204.0/24 maxlen: 24
62.75.207.0/24 maxlen: 24
62.75.213.0/24 maxlen: 24
62.75.214.0/23 maxlen: 24
62.75.216.0/21 maxlen: 24
62.75.224.0/24 maxlen: 24
62.75.228.0/23 maxlen: 24
62.75.230.0/24 maxlen: 24
62.75.232.0/22 maxlen: 24
62.75.236.0/23 maxlen: 24
62.75.238.0/24 maxlen: 24
62.75.252.0/22 maxlen: 24
62.138.0.0/22 maxlen: 24
62.138.5.0/24 maxlen: 24
62.138.6.0/23 maxlen: 24
62.138.8.0/24 maxlen: 24
62.138.10.0/23 maxlen: 24
62.138.12.0/24 maxlen: 24
62.138.14.0/24 maxlen: 24
62.138.16.0/24 maxlen: 24
62.138.18.0/23 maxlen: 24
62.138.24.0/24 maxlen: 24
62.138.26.0/24 maxlen: 24
78.138.96.0/21 maxlen: 24
78.138.104.0/22 maxlen: 24
78.138.118.0/24 maxlen: 24
78.138.126.0/23 maxlen: 24
80.86.81.0/24 maxlen: 24
80.86.82.0/23 maxlen: 24
80.86.84.0/22 maxlen: 24
80.86.90.0/23 maxlen: 24
80.86.92.0/22 maxlen: 24
85.25.1.0/24 maxlen: 24
85.25.8.0/21 maxlen: 24
85.25.20.0/24 maxlen: 24
85.25.27.0/24 maxlen: 24
85.25.40.0/21 maxlen: 24
85.25.43.0/24 maxlen: 24
85.25.48.0/20 maxlen: 24
85.25.64.0/24 maxlen: 24
85.25.66.0/23 maxlen: 24
85.25.68.0/24 maxlen: 24
85.25.71.0/24 maxlen: 24
85.25.72.0/21 maxlen: 24
85.25.92.0/22 maxlen: 24
85.25.98.0/23 maxlen: 24
85.25.100.0/24 maxlen: 24
85.25.102.0/23 maxlen: 24
85.25.103.0/24 maxlen: 24
85.25.104.0/22 maxlen: 24
85.25.108.0/23 maxlen: 24
85.25.110.0/24 maxlen: 24
85.25.116.0/22 maxlen: 24
85.25.120.0/24 maxlen: 24
85.25.122.0/23 maxlen: 24
85.25.124.0/22 maxlen: 24
85.25.128.0/20 maxlen: 24
85.25.144.0/21 maxlen: 24
85.25.152.0/22 maxlen: 24
85.25.156.0/23 maxlen: 24
85.25.159.0/24 maxlen: 24
85.25.160.0/24 maxlen: 24
85.25.172.0/23 maxlen: 24
85.25.174.0/24 maxlen: 24
85.25.176.0/20 maxlen: 24
85.25.192.0/21 maxlen: 24
85.25.200.0/22 maxlen: 24
85.25.206.0/23 maxlen: 24
85.25.208.0/22 maxlen: 24
85.25.213.0/24 maxlen: 24
85.25.214.0/23 maxlen: 24
85.25.216.0/22 maxlen: 24
85.25.220.0/24 maxlen: 24
85.25.222.0/23 maxlen: 24
85.25.226.0/23 maxlen: 24
85.25.232.0/23 maxlen: 24
85.25.235.0/24 maxlen: 24
85.25.236.0/22 maxlen: 24
85.25.242.0/23 maxlen: 24
85.25.244.0/24 maxlen: 24
85.25.246.0/24 maxlen: 24
85.25.248.0/21 maxlen: 24
85.93.88.0/22 maxlen: 24
85.93.92.0/23 maxlen: 24
85.195.64.0/18 maxlen: 24
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 24
92.42.104.0/21 maxlen: 24
92.204.40.0/23 maxlen: 24
92.204.53.0/24 maxlen: 24
92.204.54.0/24 maxlen: 24
92.204.96.0/21 maxlen: 24
92.204.104.0/21 maxlen: 21
92.204.160.0/19 maxlen: 24
92.204.192.0/23 maxlen: 24
92.204.194.0/23 maxlen: 24
92.204.196.0/22 maxlen: 24
92.204.200.0/21 maxlen: 24
92.204.240.0/20 maxlen: 24
92.205.32.0/21 maxlen: 24
92.205.112.0/20 maxlen: 24
92.205.152.0/22 maxlen: 24
92.205.152.0/24 maxlen: 24
92.205.153.0/24 maxlen: 24
92.205.154.0/24 maxlen: 24
134.119.176.0/20 maxlen: 24
134.119.192.0/19 maxlen: 24
146.0.224.0/19 maxlen: 24
151.106.0.0/19 maxlen: 24
151.106.48.0/20 maxlen: 24
185.19.216.0/22 maxlen: 24
185.136.156.0/22 maxlen: 24
185.136.160.0/22 maxlen: 24
185.136.164.0/22 maxlen: 24
185.136.168.0/22 maxlen: 24
188.138.0.0/21 maxlen: 24
188.138.1.0/24 maxlen: 24
188.138.8.0/22 maxlen: 24
188.138.9.0/24 maxlen: 24
188.138.16.0/22 maxlen: 24
188.138.17.0/24 maxlen: 24
188.138.24.0/21 maxlen: 24
188.138.32.0/20 maxlen: 24
188.138.56.0/21 maxlen: 24
188.138.56.0/22 maxlen: 24
188.138.60.0/22 maxlen: 24
188.138.68.0/22 maxlen: 24
188.138.72.0/21 maxlen: 24
188.138.81.0/24 maxlen: 24
188.138.82.0/23 maxlen: 24
188.138.84.0/22 maxlen: 24
188.138.88.0/21 maxlen: 24
188.138.96.0/19 maxlen: 24
188.138.122.0/24 maxlen: 24
195.69.240.0/22 maxlen: 24
217.118.19.0/24 maxlen: 24
217.118.23.0/24 maxlen: 24
217.118.24.0/24 maxlen: 24
217.118.26.0/23 maxlen: 24
217.172.170.0/23 maxlen: 24
217.172.172.0/24 maxlen: 24
217.172.176.0/21 maxlen: 24
217.172.184.0/22 maxlen: 24
217.172.188.0/23 maxlen: 24
217.172.190.0/24 maxlen: 24
2a01:7a0::/29 maxlen: 48
2a01:7a0::/32 maxlen: 48
2a01:7a7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:f7:24:53:90:a3:7d:48:9d:00:ab:2a:1d:73:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Sep 23 08:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1c95166457be8a0c33590a4887c3f29876bae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:aa:a7:b6:b5:d9:22:5e:08:3a:1a:cb:77:
33:54:21:44:f6:f4:9c:ff:e4:f6:ba:f9:59:20:93:
b3:f4:78:65:04:d6:19:b4:80:5e:11:ca:0d:6c:e3:
73:fb:ce:79:5e:55:a6:ee:42:ba:c3:c0:5a:88:37:
b3:02:81:35:26:cf:0b:f8:73:e3:1c:54:14:c5:3c:
97:ba:4e:1c:84:ce:ae:e0:8f:73:22:2c:0a:d6:d7:
be:4d:d5:fd:37:01:02:bf:42:a0:64:a0:7b:62:3d:
01:b2:bd:f8:1b:41:e1:b3:2a:0c:eb:56:2a:ba:51:
5a:c3:55:df:d0:69:d3:e0:2f:ee:d5:f9:5a:17:b7:
42:f8:79:4e:bd:dc:51:40:c3:7f:22:fb:5d:c3:02:
ac:29:9d:99:f9:8e:d8:b6:91:00:ad:80:de:7b:23:
79:29:0b:57:fb:b3:9a:15:cb:2a:38:80:ad:a5:8b:
6d:cb:dc:e8:21:8c:1f:67:c0:7f:76:a8:89:8c:ac:
00:e2:bf:7f:4d:88:c7:b7:35:55:22:a6:78:00:b8:
29:cc:19:57:c5:18:e6:dc:1e:dc:da:fa:99:77:3f:
4f:5d:b8:28:7f:95:36:c8:d4:49:6c:fe:fe:d9:3b:
5c:8e:99:4f:aa:4c:91:03:64:f9:77:b6:ec:31:06:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:51:66:45:7B:E8:A0:C3:35:90:A4:88:7C:3F:29:87:6B:AE:9D
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/sclRZkV76KDDNZCkiHw_KYdrrp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0-85.25.68.255
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/20
92.204.160.0-92.204.207.255
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.176.0-134.119.223.255
146.0.224.0/19
151.106.0.0/19
151.106.48.0/20
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
ba:f6:3e:f4:57:76:d9:65:cd:29:c4:a7:5c:18:af:a9:47:69:
f3:e3:e1:00:d6:7c:0c:98:38:4b:6d:42:b2:ca:07:b1:ee:f6:
29:64:ff:1d:b9:d4:98:f9:d4:89:3d:22:da:1b:1d:4a:14:d7:
b6:a0:49:37:b0:9d:5f:91:35:38:5d:c7:98:75:d2:e7:ae:97:
6b:aa:73:bf:4f:ed:ab:58:8b:a8:20:21:55:e1:fe:2a:ad:76:
d5:da:34:7d:e6:32:15:61:6b:87:5d:01:fb:4b:b3:e9:34:83:
b3:e6:b2:76:10:11:62:8c:c4:2d:a8:9a:b5:63:9c:8c:7b:49:
ed:9e:de:8a:12:c0:30:58:40:55:ed:4d:bb:5c:ba:24:ee:cc:
12:77:15:9d:23:d8:77:fc:8c:56:c2:7c:41:b2:f6:03:ad:12:
d3:0e:e3:6d:14:24:88:16:60:17:95:10:45:b4:73:df:db:50:
e6:f5:66:39:11:5f:5f:0c:f2:b4:3a:f7:53:25:63:6b:9a:2b:
14:57:f1:0f:cb:f5:87:cb:6e:8e:3f:ff:2a:54:af:7d:66:54:
69:90:ab:ca:dd:da:80:9c:25:e3:b0:e8:34:4e:cd:65:23:74:
8e:20:69:cd:72:56:eb:d1:37:28:24:51:35:a0:d6:ef:69:19:
83:78:5e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:08 2024 by rpki-client on console-ams.rpki-client.org