Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/xayzWP1XFSpmhsEQtX9dy14HdVU.roa
File: xayzWP1XFSpmhsEQtX9dy14HdVU.roa (raw, json)
Hash identifier: FpWhElBBvOKw3YBu1jUuz1Kk9+DUVYMI499RyiqBSsU=
Subject key identifier: C5:AC:B3:58:FD:57:15:2A:66:86:C1:10:B5:7F:5D:CB:5E:07:75:55
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018E80B973408989CB341ACA45452106B65D
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/xayzWP1XFSpmhsEQtX9dy14HdVU.roa
Signing time: Wed 27 Mar 2024 16:23:41 +0000
ROA not before: Wed 27 Mar 2024 16:23:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.132.0/22 maxlen: 22
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.179.0/24 maxlen: 24
82.140.180.0/23 maxlen: 23
82.140.184.0/22 maxlen: 22
82.140.188.0/24 maxlen: 24
82.140.190.0/23 maxlen: 23
84.46.128.0/19 maxlen: 19
84.46.160.0/21 maxlen: 21
84.46.168.0/23 maxlen: 23
84.46.172.0/22 maxlen: 22
84.46.176.0/20 maxlen: 20
84.46.192.0/21 maxlen: 21
84.46.201.0/24 maxlen: 24
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.0.0/23 maxlen: 23
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.25.0/24 maxlen: 24
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/23 maxlen: 23
86.38.40.0/21 maxlen: 21
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.146.0/23 maxlen: 24
86.38.148.0/23 maxlen: 23
86.38.150.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.208.0/22 maxlen: 22
86.38.212.0/23 maxlen: 23
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.229.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.236.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
86.38.244.0/23 maxlen: 23
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.165.0/24 maxlen: 24
89.117.166.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.220.0/23 maxlen: 23
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 23
89.117.248.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.253.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
217.9.244.0/23 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:b9:73:40:89:89:cb:34:1a:ca:45:45:21:06:b6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 27 16:23:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5acb358fd57152a6686c110b57f5dcb5e077555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:82:30:7f:fd:5a:ac:b7:10:46:1f:5f:b5:
08:9a:ec:f1:e2:7a:79:9f:11:d7:50:58:c1:aa:cf:
23:e7:d2:0d:8f:5e:39:02:d6:89:73:18:5d:5d:be:
67:24:51:8a:f6:96:2d:dc:69:85:a8:a0:5a:2c:f1:
ef:67:f9:3b:7a:dc:b9:98:3f:3f:88:9d:47:82:23:
86:c2:f2:5b:57:4b:80:c0:ed:b7:57:cc:ac:81:50:
22:1c:5a:25:ae:e4:36:e2:7c:4c:21:9b:3f:3f:50:
6f:3a:a7:9e:51:b0:d1:54:11:9f:0c:2d:03:51:18:
fe:61:93:60:f5:96:1b:e2:bf:6f:59:8b:f3:47:8c:
67:2d:00:4a:36:8a:9d:88:d0:98:ec:dd:6e:34:af:
37:c2:9e:3a:8f:77:13:c8:7d:4e:6d:26:ad:73:ad:
a4:06:2f:92:3f:9f:99:0c:21:38:26:0b:de:f9:5c:
d0:7b:a2:30:bb:7b:ef:34:7f:e4:eb:0c:d1:12:41:
4d:ca:0e:b0:79:50:51:b5:c6:20:1c:08:03:cc:bf:
39:7f:e4:a0:56:1e:68:dc:f7:46:a0:27:fc:6e:8a:
0f:71:12:10:bc:35:14:37:a0:71:67:43:69:39:83:
36:58:3b:36:4e:96:ba:03:e4:03:29:db:2f:91:d7:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:B3:58:FD:57:15:2A:66:86:C1:10:B5:7F:5D:CB:5E:07:75:55
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/xayzWP1XFSpmhsEQtX9dy14HdVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0/23
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.160.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.208.0-86.38.213.255
86.38.215.0/24
86.38.222.0/23
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
59:42:1b:32:b0:04:81:1c:ea:f6:d0:9d:e3:69:17:de:a4:b8:
fd:ac:1f:7e:91:34:7c:a1:b7:ed:ef:19:64:11:50:c9:c1:2b:
48:be:e6:24:cb:c3:31:74:a8:08:93:f7:dd:0b:e3:ac:f7:ef:
cb:7f:70:dc:cf:76:48:be:d2:d7:f6:8e:db:c2:3d:0a:50:63:
e8:60:00:14:5d:81:8a:0f:59:45:ea:56:ad:a8:46:06:79:8a:
be:09:c3:6d:75:29:dd:ce:ed:e6:8a:4e:3b:3f:c2:4f:30:9d:
ea:e8:6d:b8:67:38:dd:af:7b:1a:57:1d:82:00:e9:13:7a:3a:
ae:ff:a5:34:1c:13:27:18:42:26:de:ba:57:72:b3:66:7b:26:
bd:f0:4c:dd:61:53:b7:60:e3:ff:1f:a4:08:5c:ad:43:53:10:
ee:a8:c1:20:3c:4b:f8:c9:b1:57:de:cb:45:8b:cd:9e:1e:7d:
9a:cb:fc:fe:5d:88:82:69:61:7e:89:bd:57:c1:fe:0c:a7:0d:
f4:e1:ca:a3:e1:b1:9f:b8:06:4c:4f:a0:fd:71:ab:08:f3:67:
06:a6:27:4e:86:e1:45:ca:ba:72:9d:1c:73:31:41:f3:db:e5:
6d:87:47:d8:b3:c3:b8:2e:18:a4:7c:28:a5:dc:2d:c8:20:31:
57:28:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:03:26 2024 by rpki-client on console-fra.rpki-client.org