Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/U7hCeKegKYMgB5pMLISHp2CSgUo.roa
File: U7hCeKegKYMgB5pMLISHp2CSgUo.roa (raw, json)
Hash identifier: hyTOanbomA8c17RGXgefv8go/BejpU1GKTrSFDIG5hw=
Subject key identifier: 53:B8:42:78:A7:A0:29:83:20:07:9A:4C:2C:84:87:A7:60:92:81:4A
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AF1D2ABF154457D1E3101BF61B8C60FE
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/U7hCeKegKYMgB5pMLISHp2CSgUo.roa
Signing time: Mon 21 Oct 2024 12:46:17 +0000
ROA not before: Mon 21 Oct 2024 12:46:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 77.72.104.0/21 maxlen: 24
84.18.0.0/19 maxlen: 24
92.60.160.0/20 maxlen: 24
176.98.220.0/22 maxlen: 24
185.66.60.0/22 maxlen: 24
185.145.224.0/22 maxlen: 24
185.155.64.0/22 maxlen: 24
185.173.44.0/22 maxlen: 24
185.187.180.0/22 maxlen: 24
185.224.76.0/22 maxlen: 24
193.34.240.0/22 maxlen: 24
195.5.64.0/19 maxlen: 24
212.49.128.0/18 maxlen: 24
212.49.189.0/24 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 24
212.163.0.0/16 maxlen: 24
213.9.128.0/17 maxlen: 24
213.192.192.0/18 maxlen: 24
213.192.193.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 48
2001:ac0:30fd::/48 maxlen: 48
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
2a0d:59c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:1d:2a:bf:15:44:57:d1:e3:10:1b:f6:1b:8c:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:46:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53b84278a7a0298320079a4c2c8487a76092814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:f5:35:72:e4:1e:3b:96:ee:fd:56:48:be:
f9:89:02:40:e8:94:9e:46:a6:9f:e1:15:8b:42:a3:
94:c0:4e:fd:ad:1a:6c:47:41:9c:96:58:e4:2a:22:
6a:8b:24:76:0f:73:2b:23:97:a2:7f:4c:3d:20:a5:
85:bd:f3:48:e5:c7:a3:16:d9:8f:81:5a:44:aa:94:
7e:f6:c5:cd:ac:a6:e2:1b:7b:e8:c0:ea:d2:d9:77:
42:44:ed:eb:ae:c8:87:2e:9c:f8:10:bf:15:90:99:
8b:6b:ca:60:ac:8e:97:21:c5:b9:50:ea:40:b1:da:
1d:fc:f4:98:24:cd:a6:d7:ea:7a:70:e1:c6:df:15:
a7:c8:dd:28:81:c0:78:8c:9a:d6:35:77:8d:d6:de:
c3:5c:4c:f0:f4:d7:76:9a:14:ab:72:16:1d:92:96:
d0:a9:65:0d:f2:14:77:ec:eb:17:41:e2:0e:25:d0:
58:70:4f:95:0e:1b:07:21:7b:a5:0b:b6:5c:73:e4:
f9:de:19:b0:fe:3b:c3:8d:9e:6a:0b:87:97:7f:28:
ca:88:d3:1a:33:e5:65:e9:c4:96:2e:9f:e5:ff:db:
dc:1d:d6:0d:0d:ce:85:91:7b:2b:23:18:8e:bb:47:
7b:22:06:ed:f2:07:79:e2:50:af:a1:57:23:eb:04:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B8:42:78:A7:A0:29:83:20:07:9A:4C:2C:84:87:A7:60:92:81:4A
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/U7hCeKegKYMgB5pMLISHp2CSgUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.104.0/21
84.18.0.0/19
92.60.160.0/20
176.98.220.0/22
185.66.60.0/22
185.145.224.0/22
185.155.64.0/22
185.173.44.0/22
185.187.180.0/22
185.224.76.0/22
193.34.240.0/22
195.5.64.0/19
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
2a0d:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:1f:aa:50:81:69:6f:1f:14:1a:f5:03:09:a1:d3:ea:d7:a2:
f3:c2:a2:67:4f:5d:81:91:cc:04:7f:bf:8c:67:1b:75:36:be:
73:3c:ab:c0:39:91:64:67:d3:1d:cf:ec:01:15:8c:7d:e0:82:
a2:05:c5:88:8b:a8:a1:a7:9b:fd:d2:33:c1:9a:7a:bc:4d:a0:
66:bc:18:41:45:4b:0f:8a:f3:dd:45:28:ef:68:f0:05:ee:25:
d7:2e:8f:af:0c:f9:f9:19:d3:85:32:b4:8d:2b:49:11:f4:92:
68:17:34:6e:46:3f:9f:37:3f:87:53:48:27:e1:27:04:47:de:
f0:b0:71:d7:c9:56:18:2f:62:9a:0e:07:8b:61:05:ab:80:44:
83:0e:58:f0:fb:ab:c3:1d:de:36:2d:ff:07:71:2d:53:a1:4d:
ce:92:60:96:47:c5:1c:60:7a:0d:7a:07:14:1d:ca:eb:d5:3a:
92:c1:f4:ae:f8:d1:97:be:c9:56:f9:9b:40:d5:9d:1f:0c:27:
55:70:33:cd:00:3a:c1:15:e4:2b:86:4c:22:49:6d:2f:cc:0c:
4c:54:68:ec:17:37:72:7f:18:19:d8:78:dc:c1:e4:67:49:34:
ce:f1:f4:c5:7e:de:2a:20:f6:ac:72:32:a5:01:30:cb:7f:e9:
f4:c7:50:1b
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAZKvHSq/FURX0eMQG/YbjGD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx
ZDA5OWIwHhcNMjQxMDIxMTI0NjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2I4NDI3OGE3YTAyOTgzMjAwNzlhNGMyYzg0ODdhNzYwOTI4MTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4r1NXLkHjuW7v1WSL75iQJA6JSe
Rqaf4RWLQqOUwE79rRpsR0GclljkKiJqiyR2D3MrI5eif0w9IKWFvfNI5cejFtmP
gVpEqpR+9sXNrKbiG3vowOrS2XdCRO3rrsiHLpz4EL8VkJmLa8pgrI6XIcW5UOpA
sdod/PSYJM2m1+p6cOHG3xWnyN0ogcB4jJrWNXeN1t7DXEzw9Nd2mhSrchYdkpbQ
qWUN8hR37OsXQeIOJdBYcE+VDhsHIXulC7Zcc+T53hmw/jvDjZ5qC4eXfyjKiNMa
M+Vl6cSWLp/l/9vcHdYNDc6FkXsrIxiOu0d7Igbt8gd54lCvoVcj6wT+VwIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFFO4QninoCmDIAeaTCyEh6dgkoFKMB8GA1UdIwQY
MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt
Mjc0NzNjYTYxMmRlLzEvVTdoQ2VLZWdLWU1nQjVwTUxJU0hwMkNTZ1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl
LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBzBAIAATBtAwQDTUho
AwQFVBIAAwQEXDygAwQCsGLcAwQCuUI8AwQCuZHgAwQCuZtAAwQCua0sAwQCubu0
AwQCueBMAwQCwSLwAwQFwwVAAwQG1DGAMAwDBADUQqEDBAbUQoADAwDUowMEB9UJ
gAMEBtXAwDAUBAIAAjAOAwUDIAEKwAMFAyoNWcAwDQYJKoZIhvcNAQELBQADggEB
AJAfqlCBaW8fFBr1Awmh0+rXovPComdPXYGRzAR/v4xnG3U2vnM8q8A5kWRn0x3P
7AEVjH3ggqIFxYiLqKGnm/3SM8GaerxNoGa8GEFFSw+K891FKO9o8AXuJdcuj68M
+fkZ04UytI0rSRH0kmgXNG5GP583P4dTSCfhJwRH3vCwcdfJVhgvYpoOB4thBauA
RIMOWPD7q8Md3jYt/wdxLVOhTc6SYJZHxRxgeg16BxQdyuvVOpLB9K740Ze+yVb5
m0DVnR8MJ1VwM80AOsEV5CuGTCJJbS/MDExUaOwXN3J/GBnYeNzB5GdJNM7x9MV+
3iog9qxyMqUBMMt/6fTHUBs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:56 2024 by rpki-client on console-ams.rpki-client.org