Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/XAwMf4IPa8ymga8unTrlVUv-UaU.roa
File: XAwMf4IPa8ymga8unTrlVUv-UaU.roa (raw, json)
Hash identifier: 3OmyEOvFdWLHr69Q4hahR/JByOekjvQLJmZ5kulif6s=
Subject key identifier: 5C:0C:0C:7F:82:0F:6B:CC:A6:81:AF:2E:9D:3A:E5:55:4B:FE:51:A5
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0193341631D0F0CB0DFB73F3F015247EBD67
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/XAwMf4IPa8ymga8unTrlVUv-UaU.roa
Signing time: Sat 16 Nov 2024 08:28:09 +0000
ROA not before: Sat 16 Nov 2024 08:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50529
IP address blocks: 2a05:3d40::/29 maxlen: 29
2a05:b440::/29 maxlen: 29
2a05:c500::/29 maxlen: 29
2a06:5c00::/29 maxlen: 29
2a06:77c0::/29 maxlen: 29
2a06:b180::/29 maxlen: 29
2a07:3700::/29 maxlen: 29
2a07:bc40::/29 maxlen: 29
2a07:cc40::/29 maxlen: 29
2a09:a80::/29 maxlen: 29
2a09:e00::/29 maxlen: 29
2a09:1100::/29 maxlen: 29
2a09:1200::/29 maxlen: 29
2a09:2380::/29 maxlen: 29
2a09:2a80::/29 maxlen: 29
2a09:2c80::/29 maxlen: 29
2a09:2d00::/29 maxlen: 29
2a09:3280::/29 maxlen: 29
2a09:3480::/29 maxlen: 29
2a09:3780::/29 maxlen: 29
2a09:3f80::/29 maxlen: 29
2a09:4000::/29 maxlen: 29
2a09:4100::/29 maxlen: 29
2a09:4a00::/29 maxlen: 29
2a09:5200::/29 maxlen: 29
2a09:5280::/29 maxlen: 29
2a09:7980::/29 maxlen: 29
2a09:7c80::/29 maxlen: 29
2a09:8100::/29 maxlen: 29
2a09:8800::/29 maxlen: 29
2a09:8e00::/29 maxlen: 29
2a09:8f00::/29 maxlen: 29
2a09:8f40::/29 maxlen: 29
2a09:91c0::/29 maxlen: 29
2a09:9480::/29 maxlen: 29
2a09:9640::/29 maxlen: 29
2a09:9800::/29 maxlen: 29
2a09:9d80::/29 maxlen: 29
2a09:a880::/29 maxlen: 29
2a09:b980::/29 maxlen: 29
2a09:cb40::/29 maxlen: 29
2a09:d440::/29 maxlen: 29
2a09:e000::/29 maxlen: 29
2a09:ed00::/29 maxlen: 29
2a09:f500::/29 maxlen: 29
2a0a:6c0::/29 maxlen: 29
2a0a:780::/29 maxlen: 29
2a0a:1f80::/29 maxlen: 29
2a0a:c500::/29 maxlen: 29
2a0a:ebc0::/29 maxlen: 29
2a0b:5780::/29 maxlen: 29
2a0b:9c80::/29 maxlen: 29
2a0b:ac80::/29 maxlen: 29
2a0b:f340::/29 maxlen: 29
2a0c:3740::/29 maxlen: 29
2a0c:4a80::/29 maxlen: 29
2a0c:5580::/29 maxlen: 29
2a0c:8580::/29 maxlen: 29
2a0c:a280::/29 maxlen: 29
2a0d:1800::/29 maxlen: 29
2a0d:4840::/29 maxlen: 29
2a0d:64c0::/29 maxlen: 29
2a0d:8740::/29 maxlen: 29
2a0d:d2c0::/29 maxlen: 29
2a0d:e040::/29 maxlen: 29
2a0d:fac0::/29 maxlen: 29
2a0e:2340::/29 maxlen: 29
2a0e:2bc0::/29 maxlen: 29
2a0e:4e40::/29 maxlen: 29
2a0e:4ec0::/29 maxlen: 29
2a0e:5500::/29 maxlen: 29
2a0e:61c0::/29 maxlen: 29
2a0e:6d80::/29 maxlen: 29
2a0e:7840::/29 maxlen: 29
2a0e:7940::/29 maxlen: 29
2a0e:86c0::/29 maxlen: 29
2a0e:90c0::/29 maxlen: 29
2a0e:9600::/29 maxlen: 29
2a0e:a040::/29 maxlen: 29
2a0e:a340::/29 maxlen: 29
2a0e:a740::/29 maxlen: 29
2a0e:b840::/29 maxlen: 29
2a0e:bc80::/29 maxlen: 29
2a0e:bcc0::/29 maxlen: 29
2a0e:bd40::/29 maxlen: 29
2a0e:c540::/29 maxlen: 29
2a0e:c8c0::/29 maxlen: 29
2a0e:cc40::/29 maxlen: 29
2a0e:d900::/29 maxlen: 29
2a0e:da00::/29 maxlen: 29
2a0e:ea40::/29 maxlen: 29
2a0e:fbc0::/29 maxlen: 29
2a0f:880::/29 maxlen: 29
2a0f:ec0::/29 maxlen: 29
2a0f:1280::/29 maxlen: 29
2a0f:26c0::/29 maxlen: 29
2a0f:4140::/29 maxlen: 29
2a0f:5600::/29 maxlen: 29
2a0f:5a00::/29 maxlen: 29
2a0f:65c0::/29 maxlen: 29
2a0f:9e40::/29 maxlen: 29
2a0f:aa00::/29 maxlen: 29
2a0f:b600::/29 maxlen: 29
2a0f:b800::/29 maxlen: 29
2a0f:c880::/29 maxlen: 29
2a12:4bc0::/29 maxlen: 29
2a12:4cc0::/29 maxlen: 29
2a12:4d40::/29 maxlen: 29
2a12:4dc0::/29 maxlen: 29
2a12:4fc0::/29 maxlen: 29
2a12:55c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:16:31:d0:f0:cb:0d:fb:73:f3:f0:15:24:7e:bd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Nov 16 08:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c0c0c7f820f6bcca681af2e9d3ae5554bfe51a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:34:b1:25:f2:1c:5c:d3:77:11:69:84:5d:
ff:67:19:c9:29:de:b3:53:7a:2d:b4:5f:06:ed:9f:
94:46:de:2f:90:a7:0c:94:44:bb:02:8e:66:33:bd:
2c:9a:3f:88:be:d8:31:41:de:2f:0e:c0:2b:b6:6a:
5c:f7:9b:1c:e7:75:e2:5f:8e:93:42:90:75:28:f0:
86:19:7c:a6:ae:e7:91:bc:57:14:5c:72:65:b0:32:
a3:84:c6:3e:df:9a:32:50:2b:c7:75:95:40:8b:07:
90:90:0e:a2:06:86:cb:5a:7b:2f:26:a3:68:77:cd:
74:d4:f9:cb:62:05:23:3d:ca:b1:9a:40:1f:2b:c1:
8f:60:4b:6d:0a:eb:c7:4a:16:e5:24:f4:f6:c7:26:
07:9e:9a:e3:b9:82:b5:a1:76:14:2f:83:49:e0:c2:
39:b3:bb:88:ba:dd:25:08:b8:08:75:0c:b8:58:5c:
99:bd:f3:4a:85:ae:3b:5c:1c:0d:57:29:e2:fb:6d:
b3:76:68:06:c6:bf:51:7a:76:05:85:46:f9:4a:da:
42:95:d8:1e:cb:19:56:bf:61:8c:19:fb:6a:51:bb:
a4:31:d0:8f:26:e2:2c:c8:d9:ce:d3:39:e7:32:85:
52:d7:fa:0d:2a:da:81:83:72:99:03:e7:80:a7:f6:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0C:0C:7F:82:0F:6B:CC:A6:81:AF:2E:9D:3A:E5:55:4B:FE:51:A5
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/XAwMf4IPa8ymga8unTrlVUv-UaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:3d40::/29
2a05:b440::/29
2a05:c500::/29
2a06:5c00::/29
2a06:77c0::/29
2a06:b180::/29
2a07:3700::/29
2a07:bc40::/29
2a07:cc40::/29
2a09:a80::/29
2a09:e00::/29
2a09:1100::/29
2a09:1200::/29
2a09:2380::/29
2a09:2a80::/29
2a09:2c80::/29
2a09:2d00::/29
2a09:3280::/29
2a09:3480::/29
2a09:3780::/29
2a09:3f80::/29
2a09:4000::/29
2a09:4100::/29
2a09:4a00::/29
2a09:5200::/29
2a09:5280::/29
2a09:7980::/29
2a09:7c80::/29
2a09:8100::/29
2a09:8800::/29
2a09:8e00::/29
2a09:8f00::/29
2a09:8f40::/29
2a09:91c0::/29
2a09:9480::/29
2a09:9640::/29
2a09:9800::/29
2a09:9d80::/29
2a09:a880::/29
2a09:b980::/29
2a09:cb40::/29
2a09:d440::/29
2a09:e000::/29
2a09:ed00::/29
2a09:f500::/29
2a0a:6c0::/29
2a0a:780::/29
2a0a:1f80::/29
2a0a:c500::/29
2a0a:ebc0::/29
2a0b:5780::/29
2a0b:9c80::/29
2a0b:ac80::/29
2a0b:f340::/29
2a0c:3740::/29
2a0c:4a80::/29
2a0c:5580::/29
2a0c:8580::/29
2a0c:a280::/29
2a0d:1800::/29
2a0d:4840::/29
2a0d:64c0::/29
2a0d:8740::/29
2a0d:d2c0::/29
2a0d:e040::/29
2a0d:fac0::/29
2a0e:2340::/29
2a0e:2bc0::/29
2a0e:4e40::/29
2a0e:4ec0::/29
2a0e:5500::/29
2a0e:61c0::/29
2a0e:6d80::/29
2a0e:7840::/29
2a0e:7940::/29
2a0e:86c0::/29
2a0e:90c0::/29
2a0e:9600::/29
2a0e:a040::/29
2a0e:a340::/29
2a0e:a740::/29
2a0e:b840::/29
2a0e:bc80::/29
2a0e:bcc0::/29
2a0e:bd40::/29
2a0e:c540::/29
2a0e:c8c0::/29
2a0e:cc40::/29
2a0e:d900::/29
2a0e:da00::/29
2a0e:ea40::/29
2a0e:fbc0::/29
2a0f:880::/29
2a0f:ec0::/29
2a0f:1280::/29
2a0f:26c0::/29
2a0f:4140::/29
2a0f:5600::/29
2a0f:5a00::/29
2a0f:65c0::/29
2a0f:9e40::/29
2a0f:aa00::/29
2a0f:b600::/29
2a0f:b800::/29
2a0f:c880::/29
2a12:4bc0::/29
2a12:4cc0::/29
2a12:4d40::/29
2a12:4dc0::/29
2a12:4fc0::/29
2a12:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:96:02:88:98:22:34:9d:05:7e:7d:96:cc:ff:d6:c9:92:44:
04:54:69:5b:fe:f2:d6:e3:18:0b:33:7c:9d:0c:a1:32:73:13:
92:52:05:22:70:6b:0f:c7:b9:ff:fd:1e:4c:3d:ad:2c:8b:be:
3b:8b:1b:17:32:2a:8d:e2:41:ee:8b:1a:56:75:1e:5f:2e:20:
12:f8:71:4b:89:c4:a4:97:0e:46:0c:fa:b9:43:eb:84:87:3d:
27:c1:fe:de:6d:bf:bc:e4:55:2b:3d:c3:05:fb:0d:19:d9:8b:
6a:ce:11:6e:49:09:50:0e:43:58:98:16:9e:ef:96:87:0b:42:
93:5f:a5:40:61:a5:04:3e:54:db:9b:e3:fc:98:71:30:8c:f5:
75:8d:49:36:0a:75:ea:08:cf:25:cd:72:97:d8:2a:f7:9c:ba:
3f:28:b4:87:93:e7:fa:d6:e7:dd:19:82:a8:d2:1a:47:46:2b:
ef:04:fa:0a:70:07:33:3e:41:6f:e8:f3:16:5c:66:a0:1b:98:
8e:2f:fc:d5:61:bf:c9:f9:79:44:9b:b0:70:77:af:8e:93:99:
06:26:0b:85:8a:93:8b:cd:6d:a9:99:53:74:ef:05:fc:1e:28:
8d:ab:96:da:33:80:26:39:26:0d:ad:b8:12:9b:56:04:f4:f6:
88:21:ad:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:59:57 2024 by rpki-client on console-ams.rpki-client.org