Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/9jbjqZdAWh2JI3imiQgunb6O7qg.roa
File: 9jbjqZdAWh2JI3imiQgunb6O7qg.roa (raw, json)
Hash identifier: FcB/DMij17xaPsf4QPeNIk790ZcpEhPzpEIjdkALGh8=
Subject key identifier: F6:36:E3:A9:97:40:5A:1D:89:23:78:A6:89:08:2E:9D:BE:8E:EE:A8
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 01922884DC79C18B7E1AABCAA6F63BAA0F93
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/9jbjqZdAWh2JI3imiQgunb6O7qg.roa
Signing time: Wed 25 Sep 2024 09:30:48 +0000
ROA not before: Wed 25 Sep 2024 09:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/20 maxlen: 20
46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/20 maxlen: 20
46.57.144.0/21 maxlen: 21
46.57.152.0/21 maxlen: 21
46.57.160.0/20 maxlen: 20
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.176.0/20 maxlen: 20
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/20 maxlen: 20
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/20 maxlen: 20
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/20 maxlen: 20
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/20 maxlen: 20
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/20 maxlen: 20
46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/20 maxlen: 20
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/20 maxlen: 20
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/20 maxlen: 20
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/20 maxlen: 20
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/20 maxlen: 20
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/20 maxlen: 20
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/20 maxlen: 20
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/20 maxlen: 20
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/20 maxlen: 20
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/20 maxlen: 20
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/20 maxlen: 20
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/20 maxlen: 20
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/20 maxlen: 20
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/20 maxlen: 20
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/20 maxlen: 20
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/20 maxlen: 20
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/20 maxlen: 20
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/20 maxlen: 20
94.252.240.0/21 maxlen: 21
94.252.248.0/22 maxlen: 22
94.252.252.0/22 maxlen: 22
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.8.0/21 maxlen: 21
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/20 maxlen: 20
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/20 maxlen: 20
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/20 maxlen: 20
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/20 maxlen: 20
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/20 maxlen: 20
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/20 maxlen: 20
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/20 maxlen: 20
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
2a00:b800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:84:dc:79:c1:8b:7e:1a:ab:ca:a6:f6:3b:aa:0f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Sep 25 09:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f636e3a997405a1d892378a689082e9dbe8eeea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:4b:8c:40:83:29:a8:e4:45:63:a0:3d:fd:
af:93:18:ac:01:af:15:96:b5:b0:5b:2b:81:bf:b5:
b4:f9:fa:8a:12:9c:00:6d:9f:95:85:7f:d0:3e:e8:
8e:15:7c:f2:dc:d4:d7:bd:e7:e0:42:3c:0e:55:44:
9b:71:73:4b:05:59:93:16:df:86:49:ca:66:32:55:
1d:56:8f:9d:a9:6e:ed:7b:57:a7:e3:b5:60:7f:f8:
2a:f0:14:f6:db:7a:a1:79:bc:76:aa:6c:d7:25:4f:
b2:f8:6b:d0:dc:dc:36:af:4e:b2:a1:4c:68:97:23:
32:8a:3b:21:f6:0a:4d:fe:50:a8:2e:a4:31:4e:59:
01:3c:da:24:ab:83:20:bf:3b:63:cd:bd:5f:d8:c2:
9d:d6:cd:72:03:12:d8:d2:e8:4a:d3:79:d9:ac:9b:
64:9e:87:b6:20:31:61:90:52:a2:0d:82:c7:b7:d9:
49:82:61:4d:7c:d2:08:87:b4:76:40:0c:79:78:dc:
2f:29:fc:db:61:28:9e:11:b8:99:30:d3:94:f2:10:
24:9d:c6:34:8d:d9:fb:40:36:be:2d:95:25:46:21:
e7:3f:24:ce:5f:68:ef:c2:93:52:27:86:ec:37:84:
1c:00:a4:b8:be:1a:3c:d6:27:0c:88:db:72:13:b8:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:E3:A9:97:40:5A:1D:89:23:78:A6:89:08:2E:9D:BE:8E:EE:A8
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/9jbjqZdAWh2JI3imiQgunb6O7qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0/17
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
40:81:a0:ad:db:32:df:f0:d2:00:48:ec:a3:dc:3e:15:5f:82:
1f:1d:90:84:a6:60:6b:3a:29:83:4f:b9:80:65:86:c5:0e:ab:
69:0f:de:d9:9a:fd:1c:ae:0b:4f:2d:9a:a0:98:9c:13:86:78:
33:eb:3c:44:00:c3:64:a6:20:74:e2:81:a3:f3:4b:81:15:20:
85:1c:80:4d:a0:ab:dd:44:26:31:f8:c0:a7:c9:38:4d:83:b2:
37:f8:49:ae:4c:de:4f:be:98:1e:59:aa:8e:8d:45:19:d6:b1:
a4:ad:55:c5:e7:b6:6d:fd:f6:9b:fb:40:2a:51:18:24:75:2d:
31:9e:65:ab:e9:75:55:da:24:8c:ac:b2:6a:fe:1c:3b:73:da:
7d:60:96:60:f4:0a:1e:18:76:97:86:be:67:e5:23:44:bc:a0:
aa:27:1b:a6:30:9c:18:1c:4c:19:93:60:d9:a6:01:48:17:21:
b6:90:f7:8e:12:5f:92:bd:fc:f3:2b:02:69:c5:92:6b:b6:a1:
ae:d0:6b:5c:ff:54:e5:31:9b:00:fe:fb:b4:16:aa:c8:81:59:
ed:78:bf:ee:06:e5:0a:90:02:72:e7:71:59:61:a1:6e:ab:5e:
84:0c:d5:83:b6:d5:fa:70:ea:46:8e:e3:3c:5f:94:a2:2d:0f:
d4:45:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:16:56 2024 by rpki-client on console-fra.rpki-client.org