Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Rue2GIG53W6wj713b3YI1d6qpHk.roa
File: Rue2GIG53W6wj713b3YI1d6qpHk.roa (raw, json)
Hash identifier: T3C+Cn0k7Xep/PVO1nnd6EoPQRA0SGLYxcTOVMMDqN8=
Subject key identifier: 46:E7:B6:18:81:B9:DD:6E:B0:8F:BD:77:6F:76:08:D5:DE:AA:A4:79
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019108B635E9A4CF216B3662BC32A58BCDD1
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Rue2GIG53W6wj713b3YI1d6qpHk.roa
Signing time: Wed 31 Jul 2024 12:14:04 +0000
ROA not before: Wed 31 Jul 2024 12:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12741
IP address blocks: 5.226.64.0/18 maxlen: 18
5.226.92.0/24 maxlen: 24
5.226.128.0/22 maxlen: 24
5.226.135.0/24 maxlen: 24
37.128.0.0/17 maxlen: 17
62.87.128.0/17 maxlen: 17
62.89.64.0/18 maxlen: 18
62.111.128.0/17 maxlen: 17
62.111.250.0/24 maxlen: 24
62.148.64.0/19 maxlen: 19
62.181.160.0/19 maxlen: 19
62.233.128.0/17 maxlen: 17
62.244.128.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
77.65.209.0/24 maxlen: 24
77.252.0.0/14 maxlen: 14
78.8.0.0/14 maxlen: 14
81.168.128.0/17 maxlen: 17
81.210.0.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
82.143.128.0/18 maxlen: 18
83.238.0.0/16 maxlen: 16
84.40.128.0/17 maxlen: 17
85.31.252.0/24 maxlen: 24
85.128.0.0/17 maxlen: 17
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
87.105.0.0/16 maxlen: 16
87.204.0.0/15 maxlen: 15
87.239.216.0/21 maxlen: 22
89.171.0.0/16 maxlen: 16
91.192.88.0/22 maxlen: 22
93.159.0.0/18 maxlen: 18
93.180.160.0/19 maxlen: 19
159.205.0.0/16 maxlen: 16
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
178.36.0.0/15 maxlen: 15
185.58.160.0/22 maxlen: 22
185.58.160.0/23 maxlen: 23
185.58.162.0/23 maxlen: 23
185.72.184.0/22 maxlen: 22
185.164.140.0/22 maxlen: 22
185.244.96.0/22 maxlen: 22
193.19.104.0/23 maxlen: 23
193.91.16.0/20 maxlen: 20
193.192.173.0/24 maxlen: 24
193.192.181.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
195.114.160.0/19 maxlen: 19
212.49.32.0/19 maxlen: 19
212.106.0.0/19 maxlen: 19
213.17.128.0/17 maxlen: 17
213.17.244.0/24 maxlen: 24
213.134.128.0/19 maxlen: 19
213.146.32.0/19 maxlen: 19
213.186.64.0/19 maxlen: 19
213.195.128.0/18 maxlen: 18
213.216.64.0/18 maxlen: 18
213.238.64.0/18 maxlen: 18
213.241.0.0/17 maxlen: 17
213.241.89.0/24 maxlen: 24
217.30.128.0/19 maxlen: 19
2001:16b0::/32 maxlen: 32
2001:41b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:b6:35:e9:a4:cf:21:6b:36:62:bc:32:a5:8b:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jul 31 12:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46e7b61881b9dd6eb08fbd776f7608d5deaaa479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:74:28:06:0c:ec:91:93:79:c2:65:95:4c:
8d:0b:4c:50:2d:94:89:6f:20:8d:38:75:9e:df:ca:
37:a3:a5:cf:dd:ab:3f:ed:52:4c:98:d3:a1:90:bb:
8b:3f:23:85:db:e9:fb:35:cf:e2:11:82:f4:07:58:
18:ca:f8:3c:0a:08:24:8d:95:7c:00:57:43:71:f7:
18:c5:81:7c:bf:eb:bb:82:51:45:67:f1:35:17:60:
1b:4c:78:c4:bc:88:a5:af:87:f5:be:29:62:4a:a4:
51:29:60:6a:79:5e:42:4a:6d:96:6e:74:85:59:2a:
35:65:cc:3d:dc:cf:09:52:19:32:2e:76:87:f6:fe:
45:a4:4f:d0:3f:5f:07:a1:cb:53:61:f9:cf:d5:26:
eb:1f:6c:85:84:0b:33:3a:ce:8e:23:9a:f9:a7:11:
75:52:12:4a:e1:cf:69:43:3c:8d:b8:db:62:8e:dc:
02:6a:d1:c2:fe:50:2d:7c:59:68:0a:77:0b:c1:e4:
e8:bd:34:95:5c:2f:5c:03:ad:3c:bf:1d:c8:39:03:
31:97:e7:3c:80:78:51:d0:5b:ac:7b:99:ce:48:0d:
c5:44:8c:4e:08:50:ce:14:1d:28:55:17:13:c9:16:
ec:f8:31:38:59:5a:dc:62:63:a6:4d:10:b4:d9:c2:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:B6:18:81:B9:DD:6E:B0:8F:BD:77:6F:76:08:D5:DE:AA:A4:79
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Rue2GIG53W6wj713b3YI1d6qpHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0-5.226.131.255
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.65.209.0/24
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.31.252.0/24
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
87.239.216.0/21
89.171.0.0/16
91.192.88.0/22
93.159.0.0/18
93.180.160.0/19
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
185.58.160.0/22
185.72.184.0/22
185.164.140.0/22
185.244.96.0/22
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.49.32.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
78:23:2a:6c:c9:37:01:d7:a6:83:5c:4c:86:b4:a5:1f:28:58:
64:d4:7e:6a:7b:58:0e:27:c5:90:66:68:f8:34:50:59:ac:ec:
7d:b2:be:e2:ef:9d:42:3f:a3:80:03:ad:62:0f:0d:b2:38:03:
cc:62:a0:55:a4:a0:8c:cd:ff:19:ac:d1:63:2b:7a:47:d0:8b:
cd:25:d7:65:85:57:c1:52:fc:81:8e:e6:38:57:c4:1b:35:67:
4e:8f:81:e6:34:90:97:46:60:8e:5a:36:38:b9:de:6d:80:21:
85:08:ae:8e:43:90:17:6a:10:6f:44:2d:07:a2:81:fa:5f:93:
95:e7:77:96:17:af:92:fd:e8:35:c6:1d:a2:0b:5f:d2:d9:df:
7a:89:32:69:97:fb:89:10:d9:12:58:11:d1:29:c6:78:54:2f:
8e:82:47:b0:52:d2:eb:9f:59:28:2d:d6:c0:49:ef:8f:2f:75:
c3:5b:83:bc:8c:34:80:31:11:40:19:e5:e2:9d:14:cb:2f:9b:
97:09:ca:7f:4f:39:15:bb:ae:2e:15:3b:7f:cc:f3:ae:9a:f4:
45:5e:45:06:17:0c:8e:cd:e6:0d:e5:da:f1:7a:2b:de:c0:18:
a1:20:3c:6d:b6:c0:46:2d:6e:e2:96:28:05:62:9e:30:76:ad:
bc:af:6c:65
-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgISAZEItjXppM8hazZivDKli83RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjQwNzMxMTIxNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmU3YjYxODgxYjlkZDZlYjA4ZmJkNzc2Zjc2MDhkNWRlYWFhNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaR0KAYM7JGTecJllUyNC0xQLZSJ
byCNOHWe38o3o6XP3as/7VJMmNOhkLuLPyOF2+n7Nc/iEYL0B1gYyvg8CggkjZV8
AFdDcfcYxYF8v+u7glFFZ/E1F2AbTHjEvIilr4f1viliSqRRKWBqeV5CSm2WbnSF
WSo1Zcw93M8JUhkyLnaH9v5FpE/QP18HoctTYfnP1SbrH2yFhAszOs6OI5r5pxF1
UhJK4c9pQzyNuNtijtwCatHC/lAtfFloCncLweTovTSVXC9cA608vx3IOQMxl+c8
gHhR0Fuse5nOSA3FRIxOCFDOFB0oVRcTyRbs+DE4WVrcYmOmTRC02cKOzwIDAQAB
o4IDljCCA5IwHQYDVR0OBBYEFEbnthiBud1usI+9d292CNXeqqR5MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvUnVlMkdJRzUzVzZ3ajcxM2IzWUkxZDZxcEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqgYIKwYBBQUHAQcBAf8EggGZMIIBlTCCAXsEAgABMIIB
czAMAwQGBeJAAwQCBeKAAwQABeKHAwQHJYAAAwQHPleAAwQGPllAAwQHPm+AAwQF
PpRAAwQFPrWgAwQHPumAAwQFPvSAAwQATUGGAwQATUGbAwQATUGrAwQATUG8AwQA
TUHBAwQATUHRAwMCTfwDAwJOCAMEB1GogAMEB1HSAAMDAFHbAwQGUo+AAwMAU+4D
BAdUKIADBABVH/wDBAdVgAADBABVyjYDBABVyjsDAwBXaQMDAVfMAwQDV+/YAwMA
WasDBAJbwFgDBAZdnwADBAVdtKADAwCfzQMEALIQdAMEALIQeQMEALIQfQMDAbIk
AwQCuTqgAwQCuUi4AwQCuaSMAwQCufRgAwQBwRNoAwQEwVsQAwQAwcCtAwQAwcC1
AwQAwcC8AwQAwcC+AwQFw3KgAwQF1DEgAwQF1GoAAwQH1RGAAwQF1YaAAwQF1ZIg
AwQF1bpAAwQG1cOAAwQG1dhAAwQG1e5AAwQH1fEAAwQF2R6AMBQEAgACMA4DBQAg
ARawAwUAIAFBsDANBgkqhkiG9w0BAQsFAAOCAQEAeCMqbMk3Ademg1xMhrSlHyhY
ZNR+antYDifFkGZo+DRQWazsfbK+4u+dQj+jgAOtYg8NsjgDzGKgVaSgjM3/GazR
Yyt6R9CLzSXXZYVXwVL8gY7mOFfEGzVnTo+B5jSQl0Zgjlo2OLnebYAhhQiujkOQ
F2oQb0QtB6KB+l+Tled3lhevkv3oNcYdogtf0tnfeokyaZf7iRDZElgR0SnGeFQv
joJHsFLS659ZKC3WwEnvjy91w1uDvIw0gDERQBnl4p0Uyy+blwnKf085FbuuLhU7
f8zzrpr0RV5FBhcMjs3mDeXa8Xor3sAYoSA8bbbARi1u4pYoBWKeMHatvK9sZQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:06 2024 by rpki-client on console-ams.rpki-client.org