Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vUgoFZRmoloJgJiSdetzdv1qAjo.roa
File: vUgoFZRmoloJgJiSdetzdv1qAjo.roa (raw, json)
Hash identifier: R4UD/TWK7kiv/dLhP31ek/yKboYI8fCHz40dZ3z4YBQ=
Subject key identifier: BD:48:28:15:94:66:A2:5A:09:80:98:92:75:EB:73:76:FD:6A:02:3A
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018F9566AA701CDD1E9D56ACEE752DACD19C
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vUgoFZRmoloJgJiSdetzdv1qAjo.roa
Signing time: Mon 20 May 2024 09:48:04 +0000
ROA not before: Mon 20 May 2024 09:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.68.0/22 maxlen: 22
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:66:aa:70:1c:dd:1e:9d:56:ac:ee:75:2d:ac:d1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: May 20 09:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd4828159466a25a0980989275eb7376fd6a023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:af:ac:81:b4:71:4f:5e:56:cf:b9:90:fa:
e0:02:b5:f3:e3:57:15:dd:aa:a9:04:8c:20:b5:4e:
8d:1d:61:54:4f:cd:ff:69:5f:af:8b:a3:3c:2f:6a:
2d:e3:42:85:d7:ca:7c:af:d0:d2:39:f4:12:35:9d:
24:05:0b:ac:83:a0:d3:a4:aa:8a:48:c2:65:7f:e4:
90:bc:aa:3e:48:61:5a:b2:6e:67:e3:18:b6:cf:cb:
d7:1d:ca:81:58:83:d8:e5:75:98:c6:51:a0:59:09:
cd:c3:96:51:46:a4:72:c0:d5:61:b4:6c:51:70:f9:
09:41:f6:a3:8b:d6:be:ad:b5:74:c8:2b:79:f9:e5:
d3:39:44:2e:6b:18:8a:49:63:32:30:82:10:ff:ea:
59:73:89:c3:2c:34:f3:60:01:74:e9:4a:c3:09:31:
f3:9d:6a:73:ce:b2:99:17:c0:a1:a0:65:ef:e5:2b:
51:af:65:44:44:8a:85:5e:ce:42:1b:df:0b:80:20:
ef:65:63:f2:77:54:45:37:79:12:ec:2a:c9:30:66:
61:fb:c5:35:9b:82:61:a4:b5:50:81:78:9b:a0:01:
1a:c5:3d:7d:ea:61:30:39:ef:a3:bb:0c:e1:fd:1b:
eb:1b:c2:05:90:a5:7c:5a:5f:fe:f8:5d:00:f9:60:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:28:15:94:66:A2:5A:09:80:98:92:75:EB:73:76:FD:6A:02:3A
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vUgoFZRmoloJgJiSdetzdv1qAjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
89.37.0.0/20
89.43.0.0/20
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:5b:5c:f5:8e:36:d1:ab:6c:d4:b9:39:45:de:2d:70:5e:a4:
19:bc:e6:6f:91:1e:86:51:19:cb:2e:0a:99:3e:9d:57:62:f8:
0a:c1:de:06:fd:fa:b3:fc:d2:c4:1d:10:a7:90:db:5c:84:a2:
21:0b:be:36:df:3a:33:d9:90:a2:18:ba:32:a9:35:c0:48:e7:
7f:b7:c4:52:61:c7:ce:ea:c1:19:9e:e9:4c:b4:f0:22:4d:21:
47:21:d4:5e:e2:85:1a:5c:c0:05:06:dc:f2:be:48:6f:36:15:
5a:18:2e:30:01:c2:7f:fe:7e:fe:5b:49:81:22:c3:e8:4b:39:
14:ad:20:93:1d:86:b2:c7:28:65:15:73:df:99:07:e8:68:dc:
14:84:4f:e5:0a:e7:6f:92:e3:46:49:83:0b:83:9d:88:93:03:
48:53:8c:61:80:e6:4a:a4:32:b0:fc:a5:b5:1d:72:21:cd:85:
c8:f1:21:5c:7a:87:33:e8:10:6d:84:f2:b9:c5:1a:28:3b:e4:
d2:1f:07:92:a6:4d:0e:94:11:bb:c8:a9:b6:01:26:68:18:33:
1e:75:93:4d:3f:7a:87:ea:08:a6:8c:34:7d:b2:11:2a:12:ce:
65:b5:c9:7f:5d:c0:ff:85:3d:e4:e0:7c:0a:22:e3:49:42:3a:
27:7f:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:27:36 2024 by rpki-client on console-fra.rpki-client.org