Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xko_2_OeQo9dO3INCJL_azJvXDQ.roa
File: Xko_2_OeQo9dO3INCJL_azJvXDQ.roa (raw, json)
Hash identifier: UT6AZTd2KIwuHEFVV/kDDS2tL/EHcsAAw7ePVXYtGyE=
Subject key identifier: 5E:4A:3F:DB:F3:9E:42:8F:5D:3B:72:0D:08:92:FF:6B:32:6F:5C:34
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018F049388D27079EF3D89C2192A57C39F09
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xko_2_OeQo9dO3INCJL_azJvXDQ.roa
Signing time: Mon 22 Apr 2024 06:52:08 +0000
ROA not before: Mon 22 Apr 2024 06:52:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.132.0/22 maxlen: 22
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.179.0/24 maxlen: 24
82.140.180.0/23 maxlen: 23
82.140.184.0/22 maxlen: 22
82.140.188.0/24 maxlen: 24
82.140.190.0/23 maxlen: 23
84.46.128.0/19 maxlen: 19
84.46.160.0/21 maxlen: 21
84.46.168.0/23 maxlen: 23
84.46.172.0/22 maxlen: 22
84.46.172.0/24 maxlen: 24
84.46.173.0/24 maxlen: 24
84.46.175.0/24 maxlen: 24
84.46.176.0/20 maxlen: 20
84.46.192.0/21 maxlen: 21
84.46.201.0/24 maxlen: 24
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.0.0/23 maxlen: 23
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.25.0/24 maxlen: 24
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/23 maxlen: 23
86.38.40.0/21 maxlen: 21
86.38.42.0/24 maxlen: 24
86.38.43.0/24 maxlen: 24
86.38.45.0/24 maxlen: 24
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.146.0/23 maxlen: 24
86.38.148.0/23 maxlen: 23
86.38.150.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.208.0/22 maxlen: 22
86.38.212.0/23 maxlen: 23
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.229.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.236.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
86.38.244.0/23 maxlen: 23
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.165.0/24 maxlen: 24
89.117.166.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.220.0/23 maxlen: 23
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 23
89.117.248.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.253.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
217.9.244.0/23 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:93:88:d2:70:79:ef:3d:89:c2:19:2a:57:c3:9f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Apr 22 06:52:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e4a3fdbf39e428f5d3b720d0892ff6b326f5c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:30:39:f5:0c:92:f0:83:c1:4b:ed:c1:94:
9e:d9:23:5b:97:f9:a3:ce:8d:90:a3:c4:57:10:58:
61:3e:64:de:69:9b:c9:75:2f:64:2b:ac:f2:d1:dc:
5f:a1:e1:7c:c7:6e:99:7d:a0:ac:38:5c:c4:dd:81:
85:cb:4b:4a:b0:89:e6:c7:9d:3f:fe:18:a1:19:d7:
58:fe:28:89:0d:08:4f:56:f9:47:43:bb:26:1a:ef:
dd:d1:75:33:f8:04:6c:8e:d4:de:ed:4d:42:ec:c0:
c5:d7:ee:47:89:74:ee:83:13:f2:ed:6d:7f:e5:43:
b4:ee:3f:12:61:6a:ef:5b:ac:70:73:26:a2:f7:d5:
7a:df:08:69:1a:19:6c:c2:99:e6:55:ad:90:12:32:
9a:02:05:b8:5e:04:c9:d2:1b:4f:5b:12:58:f7:a5:
3d:c3:72:96:a5:c9:35:f8:24:52:70:c0:f9:21:07:
51:cf:a0:56:9f:9e:62:49:19:b4:d9:4b:e6:19:c7:
45:79:4f:18:06:16:16:59:35:e4:36:9a:9c:fd:ab:
7a:62:01:91:5a:16:9e:f4:f6:b8:76:41:b1:f1:36:
2d:93:96:e6:f0:05:59:7d:07:a8:32:e9:72:ec:a9:
0c:16:59:1c:1b:fb:1a:98:b9:3d:77:94:bc:99:3d:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4A:3F:DB:F3:9E:42:8F:5D:3B:72:0D:08:92:FF:6B:32:6F:5C:34
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xko_2_OeQo9dO3INCJL_azJvXDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0/23
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.160.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.208.0-86.38.213.255
86.38.215.0/24
86.38.222.0/23
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.251.255
Signature Algorithm: sha256WithRSAEncryption
3e:6e:24:b3:c8:3c:fd:73:df:44:37:9c:12:68:bd:92:09:28:
9a:af:28:68:ab:16:56:13:b7:56:33:33:98:f4:a6:ba:e4:54:
53:fe:45:f3:bb:27:58:69:bf:3b:b3:64:d4:d0:61:1d:8f:16:
c5:0e:48:45:87:28:48:ad:98:a4:2d:a7:64:60:2c:f2:d9:07:
08:cd:86:eb:5f:6c:d7:33:17:2b:25:a7:cc:17:88:9e:12:fe:
24:98:e9:2a:26:2d:a7:65:15:79:1e:99:24:10:b2:47:1e:e7:
7b:b8:ee:f5:4d:29:e1:b9:e4:d8:83:35:10:54:1b:7c:33:c6:
13:ce:56:9b:f9:8c:06:04:be:0d:25:65:15:4e:be:7f:77:ff:
ce:ca:02:b1:20:94:7b:9c:00:15:99:65:7f:7c:1d:5a:36:ea:
05:43:94:70:e0:31:42:b2:41:a9:08:26:b4:27:94:08:88:43:
94:c5:12:39:37:4f:b0:79:46:c2:73:88:c6:49:e1:5d:99:2f:
ab:24:83:cc:07:83:ac:61:ff:19:ce:ed:0c:fc:b1:7d:2f:ec:
6b:34:95:10:9f:8d:51:2f:dc:fe:ab:7e:8f:d1:f5:15:ef:1d:
1f:1b:3b:ac:ef:68:b1:0b:f0:8c:a4:93:91:32:4c:f0:ce:63:
bc:11:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:44:52 2024 by rpki-client on console-ams.rpki-client.org