Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GQIvntaNzvvi75vGNYIQ4Hy7nEU.roa
File: GQIvntaNzvvi75vGNYIQ4Hy7nEU.roa (raw, json)
Hash identifier: VAPFpy1PKo1pUOrXvIWyuSoBxDweGy5Xr9hpAIir8SI=
Subject key identifier: 19:02:2F:9E:D6:8D:CE:FB:E2:EF:9B:C6:35:82:10:E0:7C:BB:9C:45
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018EF5AAF73C3F3BF6E001E42A17EE45612B
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GQIvntaNzvvi75vGNYIQ4Hy7nEU.roa
Signing time: Fri 19 Apr 2024 09:23:26 +0000
ROA not before: Fri 19 Apr 2024 09:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5378
IP address blocks: 62.49.0.0/16 maxlen: 16
62.49.0.0/18 maxlen: 18
62.49.64.0/18 maxlen: 18
62.49.128.0/18 maxlen: 18
62.49.192.0/18 maxlen: 18
62.56.0.0/17 maxlen: 17
62.56.0.0/18 maxlen: 18
62.56.64.0/18 maxlen: 18
77.233.128.0/19 maxlen: 19
80.176.0.0/15 maxlen: 15
80.177.0.0/19 maxlen: 19
83.104.0.0/14 maxlen: 14
83.104.0.0/18 maxlen: 18
83.104.64.0/18 maxlen: 18
83.104.128.0/18 maxlen: 18
83.104.192.0/18 maxlen: 18
83.105.0.0/18 maxlen: 18
83.105.64.0/18 maxlen: 18
83.105.128.0/18 maxlen: 18
83.105.192.0/18 maxlen: 18
83.106.0.0/18 maxlen: 18
83.106.64.0/18 maxlen: 18
83.106.128.0/18 maxlen: 18
83.106.192.0/18 maxlen: 18
83.107.0.0/18 maxlen: 18
83.107.64.0/18 maxlen: 18
83.107.128.0/18 maxlen: 18
83.107.192.0/18 maxlen: 18
141.195.192.0/18 maxlen: 18
141.195.192.0/19 maxlen: 19
141.195.240.0/20 maxlen: 20
193.237.0.0/16 maxlen: 16
193.237.0.0/19 maxlen: 19
193.237.32.0/19 maxlen: 19
193.237.64.0/19 maxlen: 19
193.237.96.0/19 maxlen: 19
193.237.128.0/21 maxlen: 21
193.237.136.0/22 maxlen: 22
193.237.140.0/22 maxlen: 22
193.237.144.0/21 maxlen: 21
193.237.152.0/21 maxlen: 21
193.237.160.0/19 maxlen: 19
193.237.192.0/19 maxlen: 19
193.237.224.0/19 maxlen: 19
194.222.0.0/16 maxlen: 16
195.8.160.0/19 maxlen: 19
195.58.64.0/19 maxlen: 19
212.225.0.0/17 maxlen: 17
212.228.0.0/15 maxlen: 15
212.228.0.0/18 maxlen: 18
212.228.64.0/18 maxlen: 18
212.228.128.0/19 maxlen: 19
212.228.192.0/18 maxlen: 18
212.229.0.0/18 maxlen: 18
212.229.64.0/21 maxlen: 21
212.229.72.0/22 maxlen: 22
212.229.76.0/23 maxlen: 23
212.229.78.0/23 maxlen: 23
212.229.80.0/21 maxlen: 21
212.229.88.0/21 maxlen: 21
212.229.96.0/19 maxlen: 19
212.229.128.0/18 maxlen: 18
212.229.192.0/18 maxlen: 18
212.248.128.0/17 maxlen: 17
2001:958::/32 maxlen: 32
2a0a:ef40::/29 maxlen: 29
2a0a:ef40:1400::/42 maxlen: 42
2a0a:ef40:1440::/42 maxlen: 42
2a0a:ef40:1480::/42 maxlen: 42
2a0a:ef40:14c0::/42 maxlen: 42
2a0a:ef40:1500::/42 maxlen: 42
2a0a:ef40:1540::/42 maxlen: 42
2a0a:ef40:1580::/42 maxlen: 42
2a0a:ef40:15c0::/42 maxlen: 42
2a0a:ef40:1600::/42 maxlen: 42
2a0a:ef40:1640::/42 maxlen: 42
2a0a:ef40:1680::/42 maxlen: 42
2a0a:ef40:16c0::/42 maxlen: 42
2a0a:ef40:1700::/42 maxlen: 42
2a0a:ef40:1740::/42 maxlen: 42
2a0a:ef40:1780::/42 maxlen: 42
2a0a:ef40:17c0::/42 maxlen: 42
2a0a:ef40:1800::/42 maxlen: 42
2a0a:ef40:1840::/42 maxlen: 42
2a0a:ef40:1880::/42 maxlen: 42
2a0a:ef40:18c0::/42 maxlen: 42
2a0a:ef40:1900::/42 maxlen: 42
2a0a:ef40:1940::/42 maxlen: 42
2a0a:ef40:1980::/42 maxlen: 42
2a0a:ef40:19c0::/42 maxlen: 42
2a0a:ef40:1a00::/42 maxlen: 42
2a0a:ef40:1a40::/42 maxlen: 42
2a0a:ef40:1a80::/42 maxlen: 42
2a0a:ef40:1ac0::/42 maxlen: 42
2a0a:ef40:1b00::/42 maxlen: 42
2a0a:ef40:1b40::/42 maxlen: 42
2a0a:ef40:1b80::/42 maxlen: 42
2a0a:ef40:1bc0::/42 maxlen: 42
2a0a:ef40:1c00::/42 maxlen: 42
2a0a:ef40:1c40::/42 maxlen: 42
2a0a:ef40:1c80::/42 maxlen: 42
2a0a:ef40:1cc0::/42 maxlen: 42
2a0a:ef40:1d00::/42 maxlen: 42
2a0a:ef40:1d40::/42 maxlen: 42
2a0a:ef40:1d80::/42 maxlen: 42
2a0a:ef40:1dc0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:aa:f7:3c:3f:3b:f6:e0:01:e4:2a:17:ee:45:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Apr 19 09:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19022f9ed68dcefbe2ef9bc6358210e07cbb9c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:78:b0:a8:c3:58:f1:23:97:a7:65:7a:71:
fb:3d:49:a0:06:81:58:66:52:6c:6f:9e:cb:74:f3:
52:aa:57:61:28:85:f5:b2:69:89:02:93:fe:3f:1b:
65:34:67:76:3b:3f:75:da:1b:9d:a9:d7:ba:04:97:
da:07:57:34:b3:5e:48:2d:76:d4:4c:76:d5:1c:e5:
4f:5d:e3:e7:36:66:3c:b7:cc:cb:71:5a:77:7e:24:
e3:fd:6d:5f:b3:cb:ff:df:66:9e:2c:48:ae:64:32:
5a:17:e8:17:03:91:09:ac:14:90:7f:e3:38:ca:7f:
f7:7d:be:2e:33:ae:e1:ca:0f:55:de:47:4b:bd:7d:
8b:a3:97:be:bd:9c:98:4b:65:8c:bb:d2:fb:4a:a4:
0f:54:bf:af:ea:41:c7:37:fc:f6:62:11:7f:ef:6e:
52:d5:64:df:8a:52:4d:ab:7d:40:31:47:01:41:f9:
3b:75:21:18:6e:ee:68:9d:d5:fd:aa:1b:07:70:ee:
db:be:0b:3b:6f:21:f5:96:1e:13:45:5f:7a:af:0d:
04:de:1e:76:3d:89:e7:54:d3:55:48:ef:f5:5d:83:
75:f4:7a:6e:5e:f1:f1:44:ab:cf:88:1b:15:5a:c6:
90:14:c3:18:d2:32:31:e3:bc:53:07:12:1e:2c:ae:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:02:2F:9E:D6:8D:CE:FB:E2:EF:9B:C6:35:82:10:E0:7C:BB:9C:45
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GQIvntaNzvvi75vGNYIQ4Hy7nEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
141.195.192.0/18
193.237.0.0/16
194.222.0.0/16
195.8.160.0/19
195.58.64.0/19
212.225.0.0/17
212.228.0.0/15
212.248.128.0/17
IPv6:
2001:958::/32
2a0a:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
18:fe:c3:8d:3d:d8:38:5f:35:03:26:d5:09:61:44:04:8d:67:
80:f1:ab:5a:19:90:0e:fa:a0:a6:6f:7a:27:3c:42:27:a5:68:
e1:ac:a7:fd:2d:16:5e:4f:bb:a5:36:36:d2:87:dd:ee:f0:be:
4b:4a:cb:0c:5c:28:df:fa:44:29:31:c0:56:4a:14:b9:d8:f3:
40:db:74:fc:69:5b:9f:33:1c:59:08:4a:b8:64:fc:51:ba:a2:
58:3f:ed:6b:4a:61:5f:4c:38:f0:b8:5d:b4:95:fb:11:41:74:
6f:36:c9:9f:8c:fa:3e:23:a1:c9:fb:21:65:eb:7f:71:59:56:
3a:74:24:38:9a:53:1e:fc:35:0e:40:79:db:42:cf:2c:a1:30:
be:c5:9a:29:15:38:03:d7:09:37:c2:1d:a4:7c:49:90:0a:f0:
4e:bf:34:18:9e:a1:cf:ec:be:3e:c4:d1:87:21:7b:26:73:56:
3c:00:ec:cc:98:fe:41:48:6a:8a:ab:b6:88:56:17:08:24:e9:
fe:05:a0:2a:e6:22:9f:ee:cb:6d:34:cf:05:c1:59:67:c2:5f:
8c:18:32:89:55:d1:07:a5:a1:5a:bd:c8:4a:75:6a:94:5d:4a:
0a:6f:55:f9:e5:ef:4d:6c:4a:c6:05:f9:1c:0d:b6:62:90:fd:
49:8e:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 22:56:42 2024 by rpki-client on console-fra.rpki-client.org