Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1Wyy9xML_BAGhjHllJlYZCERWr4.roa
File: 1Wyy9xML_BAGhjHllJlYZCERWr4.roa (raw, json)
Hash identifier: 28OtRSgvnxWichxGD/IZiCucAEEn6v5ChhztgRx3rms=
Subject key identifier: D5:6C:B2:F7:13:0B:FC:10:06:86:31:E5:94:99:58:64:21:11:5A:BE
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192D242F738F9CBE6D3A36E8C8A592F7B4E
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1Wyy9xML_BAGhjHllJlYZCERWr4.roa
Signing time: Mon 28 Oct 2024 08:34:16 +0000
ROA not before: Mon 28 Oct 2024 08:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:42:f7:38:f9:cb:e6:d3:a3:6e:8c:8a:59:2f:7b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 28 08:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d56cb2f7130bfc10068631e59499586421115abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:ad:c9:57:c4:bc:d1:45:68:4e:5b:44:dd:
eb:b7:e1:b8:ac:3f:06:18:e8:9c:06:6f:8e:b8:2f:
13:f0:7d:b8:38:9b:2e:bb:b5:69:03:99:ba:7a:c4:
6b:b4:ac:4a:3d:65:fd:bd:97:10:2b:1f:9c:71:d0:
ea:fd:7b:d7:e8:b3:9c:f0:7a:ed:b3:73:72:aa:87:
69:a9:2a:c3:9d:a8:67:4c:55:8b:2c:e6:e1:9a:75:
b2:91:19:5c:59:86:c9:e3:cf:6b:87:1a:54:66:ee:
af:dc:ef:fb:8b:54:de:31:c9:81:fc:15:63:ee:5d:
92:81:1b:64:1e:9a:ac:88:9a:91:53:e3:20:61:34:
55:16:d8:6d:2c:9f:93:e8:34:3d:73:9c:0f:8a:db:
75:44:cd:39:4d:98:d8:59:5f:c0:86:d0:54:ac:fd:
49:26:9e:94:6e:78:16:be:4e:a3:05:68:a9:de:51:
61:75:e1:ab:18:5d:36:61:65:29:18:b0:8b:8e:4d:
ba:01:43:75:c5:b6:7a:9c:8f:e4:f7:bd:ac:04:8a:
b8:6a:6c:8c:29:c3:ea:51:2b:1b:6b:e3:9b:92:4f:
8b:9c:32:a9:b6:47:e1:0a:b9:07:ec:59:35:88:ae:
21:58:fb:7b:b5:7d:82:51:7a:75:98:82:3f:b8:61:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:B2:F7:13:0B:FC:10:06:86:31:E5:94:99:58:64:21:11:5A:BE
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1Wyy9xML_BAGhjHllJlYZCERWr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.100.0/24
86.38.102.0/24
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.152.0-86.38.154.255
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0/24
86.38.173.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.215.0/24
86.38.234.0/24
86.38.236.0/24
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.185.0/24
89.117.219.0/24
89.117.223.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e5:ff:7b:54:55:ef:14:14:be:6a:e1:17:06:c6:d3:44:5a:
b5:59:74:ce:18:5a:55:07:bd:18:ad:1f:4e:d2:45:cd:2e:22:
ac:29:80:97:1c:cc:e5:80:f4:fd:86:3b:3e:e2:33:f5:27:75:
b4:7e:c9:98:60:9f:d3:14:db:e6:66:ff:1b:2a:d5:e0:88:a7:
d3:ad:9f:6f:a8:0a:46:0f:bb:33:1d:d3:ba:47:5b:ea:a8:a5:
6d:27:7b:16:29:e8:43:0d:70:73:00:36:a9:48:9b:d6:ee:1a:
b4:76:33:b7:4b:ee:b8:e4:78:e4:71:86:fc:df:f4:26:10:d9:
07:cf:28:08:22:0f:e0:da:ad:ad:60:b9:be:99:ba:95:b3:5f:
1f:cb:32:25:35:61:28:5d:76:11:96:f2:be:ad:1b:2c:e8:ca:
38:78:b9:b9:ee:44:60:02:95:98:11:f2:fd:52:c6:74:96:b5:
92:e9:33:41:f2:7a:d8:02:7a:ce:0d:23:2e:40:0c:38:f7:82:
a3:c9:a1:23:e6:bf:e8:e2:24:b3:0c:3e:a0:76:e4:dc:bf:2c:
e1:ab:73:67:a5:62:c7:40:04:9d:55:a2:7b:32:8c:e2:c9:e0:
1a:9e:d8:99:14:9e:62:c8:a4:83:e4:9b:a3:b7:cd:0f:65:f2:
f5:88:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:22 2024 by rpki-client on console-fra.rpki-client.org