Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/3AGw272xrLdorgvxAaGXC0Sqb9A.roa
File: 3AGw272xrLdorgvxAaGXC0Sqb9A.roa (raw, json)
Hash identifier: GGALCU2QlNv99kQITvFftiaOLx7ZYj7vKjFVGVZqjWs=
Subject key identifier: DC:01:B0:DB:BD:B1:AC:B7:68:AE:0B:F1:01:A1:97:0B:44:AA:6F:D0
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0190E1BA0C17DE7AFD4A4680F400A773E220
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/3AGw272xrLdorgvxAaGXC0Sqb9A.roa
Signing time: Tue 23 Jul 2024 22:33:04 +0000
ROA not before: Tue 23 Jul 2024 22:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:6a40::/29 maxlen: 29
2a0d:6b40::/29 maxlen: 29
2a0d:6ec0::/29 maxlen: 29
2a0d:7140::/29 maxlen: 29
2a0d:8cc0::/29 maxlen: 29
2a0d:9740::/29 maxlen: 29
2a0d:97c0::/29 maxlen: 29
2a0d:a3c0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b2c0::/29 maxlen: 29
2a0d:b540::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0d:c1c0::/29 maxlen: 29
2a0d:cc40::/29 maxlen: 29
2a0d:ce40::/29 maxlen: 29
2a0d:d3c0::/29 maxlen: 29
2a0d:e1c0::/29 maxlen: 29
2a0d:e240::/29 maxlen: 29
2a0d:e340::/29 maxlen: 29
2a0d:f140::/29 maxlen: 29
2a0d:f5c0::/29 maxlen: 29
2a0d:fbc0::/29 maxlen: 29
2a0e:8c0::/29 maxlen: 29
2a0e:19c0::/29 maxlen: 29
2a0e:adc0::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:2200::/29 maxlen: 29
2a0f:9a40::/29 maxlen: 29
2a0f:cb80::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:ec0::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:25c0::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4480::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:6040::/29 maxlen: 29
2a11:62c0::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:7b00::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:8bc0::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9900::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:a240::/29 maxlen: 29
2a11:a2c0::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c2c0::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:d40::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:57c0::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8780::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:a500::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:ce00::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d380::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:ba:0c:17:de:7a:fd:4a:46:80:f4:00:a7:73:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 23 22:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc01b0dbbdb1acb768ae0bf101a1970b44aa6fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:58:71:c0:44:85:0a:1b:fc:bd:a5:e5:01:
92:5c:4a:fd:20:91:5c:a1:77:5f:ed:78:bf:85:3d:
1d:55:06:45:11:74:77:65:a1:d0:6d:9d:ba:f5:b9:
79:27:1d:9e:4b:32:de:86:f9:1b:79:e3:ed:22:ea:
b9:73:d2:b2:bd:c1:6e:6d:b3:f4:d7:a9:ff:a4:1c:
58:88:bc:aa:af:24:b1:46:81:e4:10:d3:e3:4e:b1:
ce:ca:cf:fb:45:7d:6f:2e:51:0f:ab:f0:82:c7:c0:
c8:82:91:57:e0:db:20:6a:29:62:7a:45:72:86:a3:
43:7c:92:b8:a3:62:86:c4:d8:fb:85:63:36:96:eb:
d9:ae:2c:6f:d7:30:a4:2d:e2:7b:f5:2a:fd:d7:a0:
c2:16:ba:04:ab:b4:c3:e2:69:76:0b:41:62:d8:28:
9c:45:a9:73:64:71:19:cc:c7:7c:1b:d4:bb:f0:db:
bb:2f:38:96:73:1b:73:a5:e1:73:de:1e:05:f8:88:
1a:bf:8c:9e:63:4a:87:92:14:11:b3:06:be:65:16:
7a:b6:31:fe:20:f7:7a:d0:1b:a4:7f:4e:86:5e:d3:
74:8f:71:7f:a3:df:92:9d:ee:b8:62:7f:24:25:6f:
66:a5:57:ba:ba:4c:a1:96:5e:63:02:42:a4:91:75:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:B0:DB:BD:B1:AC:B7:68:AE:0B:F1:01:A1:97:0B:44:AA:6F:D0
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/3AGw272xrLdorgvxAaGXC0Sqb9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6a40::/29
2a0d:6b40::/29
2a0d:6ec0::/29
2a0d:7140::/29
2a0d:8cc0::/29
2a0d:9740::/29
2a0d:97c0::/29
2a0d:a3c0::/29
2a0d:ad40::/29
2a0d:b2c0::/29
2a0d:b540::/29
2a0d:b840::/29
2a0d:c1c0::/29
2a0d:cc40::/29
2a0d:ce40::/29
2a0d:d3c0::/29
2a0d:e1c0::/29
2a0d:e240::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c0::/29
2a0d:fbc0::/29
2a0e:8c0::/29
2a0e:19c0::/29
2a0e:adc0::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:2200::/29
2a0f:9a40::/29
2a0f:cb80::/29
2a0f:e180::/29
2a11:ec0::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:25c0::/29
2a11:2d00::/29
2a11:4480::/29
2a11:4540::/29
2a11:4f00::/29
2a11:6040::/29
2a11:62c0::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:7b00::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:8bc0::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9900::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:a240::/29
2a11:a2c0::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c2c0::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:d40::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:57c0::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8780::/29
2a12:9200::/29
2a12:a500::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:ce00::/29
2a12:cf80::/29
2a12:d200::/29
2a12:d380::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
54:02:4e:6f:72:1b:e7:fe:5e:32:a6:58:b0:9e:0c:92:84:c7:
a2:b4:fe:8b:a3:58:69:b1:bb:52:3f:03:aa:6f:21:85:91:da:
e5:9e:c0:01:2d:a3:79:6f:95:cc:b8:c6:44:f4:f0:b4:4a:be:
7a:86:cf:2a:a4:69:4d:a2:69:9b:d8:72:67:11:7e:14:21:c0:
5b:d2:c7:e8:a2:80:3b:01:33:53:d1:25:10:29:e3:0b:54:be:
6e:f1:2d:1e:82:b1:9c:df:08:d5:95:14:e9:c3:a4:c7:e6:77:
b3:65:ab:0c:b4:4f:1c:af:f8:91:4d:af:ea:26:f8:92:c2:c5:
2e:56:9a:76:9c:f7:e2:53:60:1e:ea:4a:ae:84:22:e6:2f:f2:
e0:92:9d:b5:ac:a1:44:bf:4a:c7:ee:b3:2f:35:6d:19:65:4f:
52:55:b7:35:11:21:41:6f:66:8b:db:b7:71:9c:eb:ba:8e:bc:
80:bb:9f:22:53:ec:c5:9a:d5:12:89:ae:d7:07:3f:f9:2b:46:
35:37:75:16:77:34:27:ea:02:c8:d1:70:66:c0:fa:be:c6:4f:
5f:b3:94:72:be:ab:60:34:04:1a:f3:11:8e:e2:31:e4:7c:eb:
96:66:ba:ba:93:8b:38:38:04:f2:3e:86:ac:64:e6:a9:dc:06:
2e:f7:37:2d
-----BEGIN CERTIFICATE-----
MIIIJjCCBw6gAwIBAgISAZDhugwX3nr9SkaA9ACnc+IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNzIzMjIzMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzAxYjBkYmJkYjFhY2I3NjhhZTBiZjEwMWExOTcwYjQ0YWE2ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bJYccBEhQob/L2l5QGSXEr9IJFc
oXdf7Xi/hT0dVQZFEXR3ZaHQbZ269bl5Jx2eSzLehvkbeePtIuq5c9KyvcFubbP0
16n/pBxYiLyqrySxRoHkENPjTrHOys/7RX1vLlEPq/CCx8DIgpFX4NsgailiekVy
hqNDfJK4o2KGxNj7hWM2luvZrixv1zCkLeJ79Sr916DCFroEq7TD4ml2C0Fi2Cic
RalzZHEZzMd8G9S78Nu7LziWcxtzpeFz3h4F+Igav4yeY0qHkhQRswa+ZRZ6tjH+
IPd60Bukf06GXtN0j3F/o9+Sne64Yn8kJW9mpVe6ukyhll5jAkKkkXVUuwIDAQAB
o4IFMjCCBS4wHQYDVR0OBBYEFNwBsNu9say3aK4L8QGhlwtEqm/QMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvM0FHdzI3MnhyTGRvcmd2eEFhR1hDMFNxYjlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDRgYIKwYBBQUHAQcBAf8EggM1MIIDMTCCAy0EAgACMIID
JQMFAyoNakADBQMqDWtAAwUDKg1uwAMFAyoNcUADBQMqDYzAAwUDKg2XQAMFAyoN
l8ADBQMqDaPAAwUDKg2tQAMFAyoNssADBQMqDbVAAwUDKg24QAMFAyoNwcADBQMq
DcxAAwUDKg3OQAMFAyoN08ADBQMqDeHAAwUDKg3iQAMFAyoN40ADBQMqDfFAAwUD
Kg31wAMFAyoN+8ADBQMqDgjAAwUDKg4ZwAMFAyoOrcADBQMqDq9AAwUDKg7pwAMF
AyoPIgADBQMqD5pAAwUDKg/LgAMFAyoP4YADBQMqEQ7AAwUDKhEXwAMFAyoRHIAD
BQMqESXAAwUDKhEtAAMFAyoRRIADBQMqEUVAAwUDKhFPAAMFAyoRYEADBQMqEWLA
AwUDKhFkwAMFAyoRa4ADBQMqEXfAAwUDKhF7AAMFAyoRgcADBQMqEYbAAwUDKhGH
QAMFAyoRiYADBQMqEYvAAwUDKhGQQAMFAyoRlYADBQMqEZZAAwUDKhGZAAMFAyoR
nwADBQMqEaBAAwUDKhGhQAMFAyoRokADBQMqEaLAAwUDKhGwwAMFAyoRtMADBQMq
EbcAAwUDKhG7AAMFAyoRu8ADBQMqEb3AAwUDKhG+QAMFAyoRv4ADBQMqEcJAAwUD
KhHCwAMFAyoRxYADBQMqEcaAAwUDKhHOwAMFAyoR00ADBQMqEdiAAwUDKhHawAMF
AyoR3wADBQMqEeLAAwUDKhHmQAMFAyoR5sADBQMqEerAAwUDKhH6QAMFAyoR/EAD
BQMqEgWAAwUDKhIGQAMFAyoSCQADBQMqEg1AAwUDKhINwAMFAyoSDkADBQMqEg6A
AwUDKhIRwAMFAyoSEsADBQMqEhqAAwUDKhIoAAMFAyoSK4ADBQMqElfAAwUDKhJk
gAMFAyoSg4ADBQMqEoSAAwUDKhKHgAMFAyoSkgADBQMqEqUAAwUDKhKqAAMFAyoS
rwADBQMqErQAAwUDKhK3AAMFAyoSuwADBQMqErwAAwUDKhK8gAMFAyoSyYADBQMq
Es4AAwUDKhLPgAMFAyoS0gADBQMqEtOAAwUDKhLYAAMFAyoS+YAwDQYJKoZIhvcN
AQELBQADggEBAFQCTm9yG+f+XjKmWLCeDJKEx6K0/oujWGmxu1I/A6pvIYWR2uWe
wAEto3lvlcy4xkT08LRKvnqGzyqkaU2iaZvYcmcRfhQhwFvSx+iigDsBM1PRJRAp
4wtUvm7xLR6CsZzfCNWVFOnDpMfmd7Nlqwy0Txyv+JFNr+om+JLCxS5Wmnac9+JT
YB7qSq6EIuYv8uCSnbWsoUS/Ssfusy81bRllT1JVtzURIUFvZovbt3Gc67qOvIC7
nyJT7MWa1RKJrtcHP/krRjU3dRZ3NCfqAsjRcGbA+r7GT1+zlHK+q2A0BBrzEY7i
MeR865ZmurqTizg4BPI+hqxk5qncBi73Ny0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org