Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/KZjgrHJw2QxpwMvNPoIkp7c3vpA.roa
File: KZjgrHJw2QxpwMvNPoIkp7c3vpA.roa (raw, json)
Hash identifier: w3T+R69TdnM5iQotXO2wsy0v6X+9Fy+aBl6Wf+ADcek=
Subject key identifier: 29:98:E0:AC:72:70:D9:0C:69:C0:CB:CD:3E:82:24:A7:B7:37:BE:90
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 018CC5003E0B59363270DF49DD8A216046E5
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/KZjgrHJw2QxpwMvNPoIkp7c3vpA.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47253
IP address blocks: 62.16.64.0/24 maxlen: 24
62.16.64.0/20 maxlen: 20
62.16.65.0/24 maxlen: 24
62.16.67.0/24 maxlen: 24
62.16.66.0/24 maxlen: 24
185.6.58.0/24 maxlen: 24
185.6.57.0/24 maxlen: 24
62.16.79.0/24 maxlen: 24
185.6.56.0/22 maxlen: 24
185.6.56.0/24 maxlen: 24
185.6.59.0/24 maxlen: 24
194.58.242.0/23 maxlen: 23
194.58.244.0/23 maxlen: 23
194.58.247.0/24 maxlen: 24
93.184.1.0/24 maxlen: 24
93.184.0.0/22 maxlen: 22
93.184.0.0/20 maxlen: 20
93.184.0.0/24 maxlen: 24
93.184.3.0/24 maxlen: 24
93.184.2.0/24 maxlen: 24
93.184.4.0/22 maxlen: 22
93.184.4.0/24 maxlen: 24
93.184.11.0/24 maxlen: 24
93.184.5.0/24 maxlen: 24
93.184.6.0/24 maxlen: 24
93.184.8.0/24 maxlen: 24
93.184.7.0/24 maxlen: 24
93.184.8.0/22 maxlen: 22
93.184.10.0/24 maxlen: 24
93.184.9.0/24 maxlen: 24
93.184.12.0/24 maxlen: 24
93.184.13.0/24 maxlen: 24
93.184.12.0/22 maxlen: 22
93.184.15.0/24 maxlen: 24
93.184.14.0/24 maxlen: 24
46.18.17.0/24 maxlen: 24
46.18.16.0/24 maxlen: 24
46.18.16.0/21 maxlen: 21
46.18.18.0/24 maxlen: 24
46.18.19.0/24 maxlen: 24
46.18.21.0/24 maxlen: 24
46.18.20.0/24 maxlen: 24
46.18.23.0/24 maxlen: 24
46.18.22.0/24 maxlen: 24
194.58.72.0/24 maxlen: 24
194.58.73.0/24 maxlen: 24
194.58.72.0/22 maxlen: 22
194.58.75.0/24 maxlen: 24
194.58.74.0/24 maxlen: 24
194.58.76.0/23 maxlen: 23
194.58.220.0/23 maxlen: 23
194.58.240.0/24 maxlen: 24
194.58.152.0/23 maxlen: 23
193.124.248.0/24 maxlen: 24
193.124.248.0/22 maxlen: 22
193.124.250.0/24 maxlen: 24
193.124.249.0/24 maxlen: 24
193.124.251.0/24 maxlen: 24
2a02:26d0::/32 maxlen: 32
2a02:26d0:9::/48 maxlen: 48
2a02:26d0:2::/48 maxlen: 48
2a02:26d0:1::/48 maxlen: 48
2a02:26d0:a::/48 maxlen: 48
2a02:26d0::/48 maxlen: 48
2a02:26d0:4::/48 maxlen: 48
2a02:26d0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3e:0b:59:36:32:70:df:49:dd:8a:21:60:46:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2998e0ac7270d90c69c0cbcd3e8224a7b737be90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:5f:dd:11:38:4e:e2:13:98:a2:b7:d1:ea:
8c:99:84:b6:a3:56:2e:d9:71:06:d8:76:3b:b5:75:
17:a1:9e:c1:0c:47:f1:0d:d1:ac:d3:97:6a:0e:15:
1e:cd:9f:82:5a:b7:f9:df:e6:af:39:78:11:4b:4c:
5b:1a:52:a1:23:95:01:38:49:8e:13:bb:3b:15:f7:
71:dd:78:4c:fe:d5:af:1f:2e:16:a8:48:ac:8c:9c:
e1:71:0c:ad:0b:45:57:7c:27:0a:a7:3d:17:d4:d4:
bc:04:4f:e1:33:03:05:4a:82:66:d5:18:c3:b1:6a:
40:1a:d6:69:85:03:ba:fe:a8:b8:48:56:b7:b3:cb:
a5:ac:8d:b4:3a:93:e8:e2:0b:46:8e:f9:8f:12:a6:
96:53:58:92:8b:ff:59:d9:1f:87:3e:d1:44:50:e2:
1b:e8:43:7b:cd:d7:30:cf:7f:f1:a7:04:ae:e4:a5:
c0:5e:71:ed:51:bc:f9:e3:d0:7a:2e:1c:45:5f:7a:
7d:30:35:8c:15:64:e0:ae:bc:dd:55:89:f6:76:3b:
e5:ba:f0:bc:22:05:f6:e8:2a:3e:c6:ab:d0:23:02:
c4:6d:4e:3c:5f:90:e6:13:ef:44:65:a9:d6:ad:b3:
46:5b:a5:d8:51:29:59:f8:ae:3c:c0:f6:83:7d:75:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:E0:AC:72:70:D9:0C:69:C0:CB:CD:3E:82:24:A7:B7:37:BE:90
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/KZjgrHJw2QxpwMvNPoIkp7c3vpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.16.0/21
62.16.64.0/20
93.184.0.0/20
185.6.56.0/22
193.124.248.0/22
194.58.72.0-194.58.77.255
194.58.152.0/23
194.58.220.0/23
194.58.240.0/24
194.58.242.0-194.58.245.255
194.58.247.0/24
IPv6:
2a02:26d0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:f1:85:1d:62:50:90:fe:b1:ba:22:09:82:f6:11:db:03:73:
7f:20:9b:7e:85:8c:3c:6a:f9:d5:56:c7:09:4b:03:57:1a:33:
b3:db:15:59:c2:3b:0a:26:dc:19:6f:f3:0e:a6:39:cc:3d:d5:
eb:b9:c8:79:8c:39:60:64:7d:d3:56:a2:ef:d0:9e:ba:6c:dd:
19:f5:75:c2:fc:40:e8:4b:4d:a7:12:6e:63:f9:c8:5b:e1:93:
93:44:a4:b7:84:7f:40:f7:bf:24:a1:73:9c:54:8a:c5:66:b5:
37:31:8a:65:1a:27:72:a1:e3:de:71:d3:53:31:48:27:b9:12:
4b:3a:38:19:d0:49:20:d5:bc:49:b3:03:b6:75:54:7d:06:6e:
f1:ed:d6:e4:97:27:93:15:2a:30:4b:e8:ef:61:2f:bf:2a:54:
57:d1:8b:71:b5:9b:d0:bc:be:82:a9:b7:f1:74:80:52:49:08:
9e:03:d1:3d:af:41:4f:7d:db:a7:9d:5a:35:a0:a5:e0:24:48:
46:f6:85:e4:f7:05:0a:89:14:d3:88:1f:e3:a7:c4:1d:b8:11:
a9:61:5c:83:e7:6c:9e:93:0d:b4:3e:96:fb:9a:ac:1a:03:d0:
40:0d:5a:03:b3:be:2b:00:96:47:1c:1d:43:1e:8c:fd:ba:2b:
d4:4e:34:a6
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAYzFAD4LWTYycN9J3YohYEblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi
MDA1YWQwHhcNMjQwMTAxMTIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTk4ZTBhYzcyNzBkOTBjNjljMGNiY2QzZTgyMjRhN2I3MzdiZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkpf3RE4TuITmKK30eqMmYS2o1Yu
2XEG2HY7tXUXoZ7BDEfxDdGs05dqDhUezZ+CWrf53+avOXgRS0xbGlKhI5UBOEmO
E7s7Ffdx3XhM/tWvHy4WqEisjJzhcQytC0VXfCcKpz0X1NS8BE/hMwMFSoJm1RjD
sWpAGtZphQO6/qi4SFa3s8ulrI20OpPo4gtGjvmPEqaWU1iSi/9Z2R+HPtFEUOIb
6EN7zdcwz3/xpwSu5KXAXnHtUbz549B6LhxFX3p9MDWMFWTgrrzdVYn2djvluvC8
IgX26Co+xqvQIwLEbU48X5DmE+9EZanWrbNGW6XYUSlZ+K48wPaDfXWwFwIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFCmY4KxycNkMacDLzT6CJKe3N76QMB8GA1UdIwQY
MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt
ZGJiYjM1YzllMzc4LzEvS1pqZ3JISncyUXhwd012TlBvSWtwN2MzdnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4
LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQDLhIQAwQE
PhBAAwQEXbgAAwQCuQY4AwQCwXz4MAwDBAPCOkgDBAHCOkwDBAHCOpgDBAHCOtwD
BADCOvAwDAMEAcI68gMEAcI69AMEAMI69zANBAIAAjAHAwUAKgIm0DANBgkqhkiG
9w0BAQsFAAOCAQEAKvGFHWJQkP6xuiIJgvYR2wNzfyCbfoWMPGr51VbHCUsDVxoz
s9sVWcI7CibcGW/zDqY5zD3V67nIeYw5YGR901ai79CeumzdGfV1wvxA6EtNpxJu
Y/nIW+GTk0Skt4R/QPe/JKFznFSKxWa1NzGKZRoncqHj3nHTUzFIJ7kSSzo4GdBJ
INW8SbMDtnVUfQZu8e3W5JcnkxUqMEvo72EvvypUV9GLcbWb0Ly+gqm38XSAUkkI
ngPRPa9BT33bp51aNaCl4CRIRvaF5PcFCokU04gf46fEHbgRqWFcg+dsnpMNtD6W
+5qsGgPQQA1aA7O+KwCWRxwdQx6M/bor1E40pg==
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:00:40 2024 by rpki-client on console-fra.rpki-client.org