Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/X7KrZuArX80XjlIbYP38uRXs2_k.roa
File: X7KrZuArX80XjlIbYP38uRXs2_k.roa (raw, json)
Hash identifier: IsE8mtr68ZolcYwlzhRJpqSPG1EPXmL6ie+XXoB+U0Y=
Subject key identifier: 5F:B2:AB:66:E0:2B:5F:CD:17:8E:52:1B:60:FD:FC:B9:15:EC:DB:F9
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0191EB56F1EA52868A7A394DA757D3EC5A16
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/X7KrZuArX80XjlIbYP38uRXs2_k.roa
Signing time: Fri 13 Sep 2024 12:23:49 +0000
ROA not before: Fri 13 Sep 2024 12:23:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12491
IP address blocks: 62.56.128.0/23 maxlen: 24
62.56.128.0/24 maxlen: 24
62.56.129.0/24 maxlen: 24
62.56.130.0/24 maxlen: 24
62.56.131.0/24 maxlen: 24
62.56.132.0/24 maxlen: 24
62.56.133.0/24 maxlen: 24
62.56.134.0/23 maxlen: 24
62.56.134.0/24 maxlen: 24
62.56.136.0/24 maxlen: 24
62.56.137.0/24 maxlen: 24
62.56.139.0/24 maxlen: 24
62.56.140.0/22 maxlen: 24
62.56.144.0/22 maxlen: 24
62.56.148.0/23 maxlen: 24
62.56.150.0/24 maxlen: 24
62.56.151.0/24 maxlen: 24
62.56.152.0/24 maxlen: 24
62.56.153.0/24 maxlen: 24
62.56.154.0/24 maxlen: 24
62.56.156.0/22 maxlen: 24
62.56.160.0/22 maxlen: 24
62.56.164.0/24 maxlen: 24
62.56.165.0/24 maxlen: 24
62.56.166.0/24 maxlen: 24
62.56.167.0/24 maxlen: 24
62.56.168.0/22 maxlen: 24
62.56.168.0/23 maxlen: 24
62.56.168.0/24 maxlen: 24
62.56.169.0/24 maxlen: 24
62.56.170.0/23 maxlen: 24
62.56.170.0/24 maxlen: 24
62.56.171.0/24 maxlen: 24
62.56.172.0/24 maxlen: 24
62.56.173.0/24 maxlen: 24
62.56.174.0/23 maxlen: 24
62.56.175.0/24 maxlen: 24
62.56.216.0/24 maxlen: 24
62.56.217.0/24 maxlen: 24
62.56.218.0/23 maxlen: 24
62.56.220.0/23 maxlen: 24
62.56.224.0/22 maxlen: 24
62.56.228.0/23 maxlen: 24
62.56.230.0/24 maxlen: 24
62.56.231.0/24 maxlen: 24
62.56.232.0/21 maxlen: 24
62.56.240.0/22 maxlen: 24
62.56.244.0/23 maxlen: 24
62.56.246.0/24 maxlen: 24
62.56.247.0/24 maxlen: 24
62.56.248.0/22 maxlen: 24
62.56.248.0/23 maxlen: 24
62.56.248.0/24 maxlen: 24
62.56.249.0/24 maxlen: 24
62.56.250.0/23 maxlen: 24
62.56.250.0/24 maxlen: 24
62.56.251.0/24 maxlen: 24
81.199.0.0/24 maxlen: 24
81.199.1.0/24 maxlen: 24
81.199.2.0/23 maxlen: 24
81.199.4.0/22 maxlen: 24
81.199.8.0/24 maxlen: 24
81.199.9.0/24 maxlen: 24
81.199.10.0/23 maxlen: 24
81.199.13.0/24 maxlen: 24
81.199.16.0/22 maxlen: 24
81.199.16.0/23 maxlen: 24
81.199.16.0/24 maxlen: 24
81.199.17.0/24 maxlen: 24
81.199.18.0/23 maxlen: 24
81.199.18.0/24 maxlen: 24
81.199.19.0/24 maxlen: 24
81.199.21.0/24 maxlen: 24
81.199.22.0/23 maxlen: 24
81.199.32.0/22 maxlen: 24
81.199.40.0/24 maxlen: 24
81.199.41.0/24 maxlen: 24
81.199.42.0/24 maxlen: 24
81.199.43.0/24 maxlen: 24
81.199.44.0/24 maxlen: 24
81.199.45.0/24 maxlen: 24
81.199.46.0/24 maxlen: 24
81.199.47.0/24 maxlen: 24
81.199.48.0/24 maxlen: 24
81.199.49.0/24 maxlen: 24
81.199.50.0/24 maxlen: 24
81.199.51.0/24 maxlen: 24
81.199.52.0/22 maxlen: 24
81.199.54.0/24 maxlen: 24
81.199.56.0/23 maxlen: 24
81.199.58.0/24 maxlen: 24
81.199.59.0/24 maxlen: 24
81.199.60.0/24 maxlen: 24
81.199.61.0/24 maxlen: 24
81.199.62.0/24 maxlen: 24
81.199.63.0/24 maxlen: 24
81.199.80.0/24 maxlen: 24
81.199.81.0/24 maxlen: 24
81.199.82.0/24 maxlen: 24
81.199.83.0/24 maxlen: 24
81.199.84.0/24 maxlen: 24
81.199.85.0/24 maxlen: 24
81.199.86.0/23 maxlen: 24
81.199.88.0/23 maxlen: 24
81.199.90.0/24 maxlen: 24
81.199.91.0/24 maxlen: 24
81.199.92.0/24 maxlen: 24
81.199.93.0/24 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.95.0/24 maxlen: 24
81.199.96.0/24 maxlen: 24
81.199.98.0/23 maxlen: 24
81.199.101.0/24 maxlen: 24
81.199.102.0/23 maxlen: 24
81.199.104.0/24 maxlen: 24
81.199.105.0/24 maxlen: 24
81.199.106.0/24 maxlen: 24
81.199.107.0/24 maxlen: 24
81.199.108.0/22 maxlen: 24
81.199.118.0/23 maxlen: 24
81.199.124.0/22 maxlen: 24
81.199.128.0/24 maxlen: 24
81.199.129.0/24 maxlen: 24
81.199.130.0/23 maxlen: 24
81.199.132.0/24 maxlen: 24
81.199.134.0/23 maxlen: 24
81.199.136.0/22 maxlen: 24
81.199.136.0/23 maxlen: 24
81.199.136.0/24 maxlen: 24
81.199.137.0/24 maxlen: 24
81.199.138.0/23 maxlen: 24
81.199.138.0/24 maxlen: 24
81.199.139.0/24 maxlen: 24
81.199.140.0/23 maxlen: 24
81.199.142.0/23 maxlen: 24
81.199.146.0/24 maxlen: 24
81.199.147.0/24 maxlen: 24
81.199.148.0/22 maxlen: 24
81.199.152.0/22 maxlen: 24
81.199.156.0/23 maxlen: 24
81.199.158.0/23 maxlen: 24
81.199.160.0/21 maxlen: 24
81.199.168.0/24 maxlen: 24
81.199.172.0/23 maxlen: 24
81.199.174.0/23 maxlen: 24
81.199.176.0/21 maxlen: 24
81.199.184.0/24 maxlen: 24
81.199.185.0/24 maxlen: 24
81.199.186.0/24 maxlen: 24
81.199.187.0/24 maxlen: 24
81.199.188.0/22 maxlen: 24
81.199.192.0/24 maxlen: 24
81.199.193.0/24 maxlen: 24
81.199.194.0/24 maxlen: 24
81.199.195.0/24 maxlen: 24
81.199.196.0/22 maxlen: 24
81.199.200.0/24 maxlen: 24
81.199.204.0/24 maxlen: 24
81.199.205.0/24 maxlen: 24
81.199.206.0/23 maxlen: 24
81.199.208.0/23 maxlen: 24
81.199.210.0/24 maxlen: 24
81.199.211.0/24 maxlen: 24
81.199.212.0/24 maxlen: 24
81.199.213.0/24 maxlen: 24
81.199.214.0/24 maxlen: 24
81.199.215.0/24 maxlen: 24
81.199.216.0/24 maxlen: 24
81.199.217.0/24 maxlen: 24
81.199.219.0/24 maxlen: 24
81.199.220.0/22 maxlen: 24
81.199.224.0/22 maxlen: 24
81.199.228.0/23 maxlen: 24
81.199.230.0/24 maxlen: 24
81.199.232.0/21 maxlen: 24
81.199.240.0/22 maxlen: 24
81.199.244.0/22 maxlen: 24
81.199.248.0/23 maxlen: 24
91.203.121.0/24 maxlen: 24
91.203.122.0/23 maxlen: 23
193.93.96.0/22 maxlen: 24
193.93.96.0/24 maxlen: 24
193.93.97.0/24 maxlen: 24
193.93.98.0/24 maxlen: 24
195.200.92.0/23 maxlen: 23
195.200.92.0/24 maxlen: 24
195.225.62.0/23 maxlen: 24
195.225.62.0/24 maxlen: 24
195.245.108.0/23 maxlen: 24
195.245.108.0/24 maxlen: 24
2a02:ba0::/32 maxlen: 48
2a02:ba0:1000::/36 maxlen: 48
2a02:ba0:1006::/48 maxlen: 48
2a02:ba0:1007::/48 maxlen: 48
2a02:ba0:1008::/48 maxlen: 48
2a02:ba0:1009::/48 maxlen: 48
2a02:ba0:100a::/48 maxlen: 48
2a02:ba0:100b::/48 maxlen: 48
2a02:ba0:100c::/48 maxlen: 48
2a02:ba0:100d::/48 maxlen: 48
2a02:ba0:1012::/48 maxlen: 48
2a02:ba0:1013::/48 maxlen: 48
2a02:ba0:1014::/48 maxlen: 48
2a02:ba0:1015::/48 maxlen: 48
2a02:ba0:1016::/48 maxlen: 48
2a02:ba0:1017::/48 maxlen: 48
2a02:ba0:1018::/48 maxlen: 48
2a02:ba0:1019::/48 maxlen: 48
2a02:ba0:101e::/48 maxlen: 48
2a02:ba0:101f::/48 maxlen: 48
2a02:ba0:1020::/48 maxlen: 48
2a02:ba0:1021::/48 maxlen: 48
2a02:ba0:1024::/48 maxlen: 48
2a02:ba0:1025::/48 maxlen: 48
2a02:ba0:1026::/48 maxlen: 48
2a02:ba0:1027::/48 maxlen: 48
2a02:ba0:102a::/48 maxlen: 48
2a02:ba0:102b::/48 maxlen: 48
2a02:ba0:102d::/48 maxlen: 48
2a02:ba0:102e::/48 maxlen: 48
2a02:ba0:1030::/48 maxlen: 48
2a02:ba0:1031::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:56:f1:ea:52:86:8a:7a:39:4d:a7:57:d3:ec:5a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Sep 13 12:23:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb2ab66e02b5fcd178e521b60fdfcb915ecdbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:b9:cc:ac:73:ac:25:08:f5:ad:79:22:7b:
35:ad:8c:f3:13:cd:b2:bd:9d:31:2f:9a:80:59:80:
17:e0:b3:20:1a:60:5d:19:be:73:87:43:99:13:39:
b5:f4:ce:63:8c:b7:c3:d3:a8:c3:29:d8:3a:92:af:
a4:8e:18:90:ae:a0:a5:c7:07:77:e6:2d:6d:92:de:
49:15:be:31:31:ea:8e:8d:38:a7:63:05:7e:08:74:
f7:80:8e:16:9d:0d:55:8d:5e:c4:e4:4b:d0:75:e8:
21:d8:17:55:f7:1a:0e:52:0b:35:8e:28:71:8d:a0:
72:4b:d5:61:39:74:75:ff:34:b5:69:56:de:c5:5f:
f5:75:a7:12:fa:71:60:c3:cd:c1:ff:dd:37:87:55:
ac:c9:2c:36:6c:39:2c:e7:e5:59:13:a2:70:93:46:
82:3c:e2:3b:36:af:a8:a9:82:c2:53:97:f6:ea:db:
46:d5:10:94:d9:ed:23:91:94:fa:f2:f4:9d:33:8e:
67:87:48:52:a8:d9:3b:af:90:a1:d0:ad:58:8b:89:
d7:a2:7a:01:c3:dc:72:a0:a1:9b:55:50:15:0a:53:
57:43:16:e5:3a:4c:ae:24:eb:e2:99:24:38:79:84:
e6:90:f4:72:b9:26:12:9d:cd:f4:80:cc:95:78:88:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:AB:66:E0:2B:5F:CD:17:8E:52:1B:60:FD:FC:B9:15:EC:DB:F9
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/X7KrZuArX80XjlIbYP38uRXs2_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.128.0-62.56.137.255
62.56.139.0-62.56.154.255
62.56.156.0-62.56.175.255
62.56.216.0-62.56.221.255
62.56.224.0-62.56.251.255
81.199.0.0-81.199.11.255
81.199.13.0/24
81.199.16.0/22
81.199.21.0-81.199.23.255
81.199.32.0/22
81.199.40.0-81.199.63.255
81.199.80.0-81.199.96.255
81.199.98.0/23
81.199.101.0-81.199.111.255
81.199.118.0/23
81.199.124.0-81.199.132.255
81.199.134.0-81.199.143.255
81.199.146.0-81.199.168.255
81.199.172.0-81.199.200.255
81.199.204.0-81.199.217.255
81.199.219.0-81.199.230.255
81.199.232.0-81.199.249.255
91.203.121.0-91.203.123.255
193.93.96.0/22
195.200.92.0/23
195.225.62.0/23
195.245.108.0/23
IPv6:
2a02:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
45:54:5f:91:20:a3:02:04:d1:56:d9:1e:37:50:9b:3b:63:5e:
ce:03:70:72:19:a2:ee:c3:5e:93:c3:52:75:ab:47:be:b5:5b:
b2:be:83:95:dd:02:90:4c:d9:aa:35:38:12:51:75:59:5e:5c:
83:7d:91:43:37:9b:bc:0b:fe:4d:c1:f8:12:2c:b6:4f:39:8f:
98:fb:e5:08:41:67:0c:b1:b1:9b:9c:58:9e:40:ef:ab:c7:b5:
f3:eb:dd:3c:74:28:42:03:0f:79:7b:14:d6:0c:2c:d8:82:d5:
5a:71:60:94:f6:23:63:0a:49:36:54:a7:6b:c9:54:30:be:41:
bc:2f:b8:2e:25:db:b8:d2:9d:74:70:23:e5:4f:d2:91:b6:28:
f7:fc:c4:a0:e5:31:b0:a2:49:16:6e:3c:ea:a6:9a:e6:43:4f:
2a:62:2f:44:87:a6:d3:29:57:75:d4:84:8f:98:56:65:8a:e6:
35:a3:8b:85:b3:bb:67:68:2a:6f:38:27:70:f2:58:1d:36:7d:
f9:50:9b:c6:d7:be:cf:60:89:64:8e:d3:df:2c:56:f4:83:2c:
57:70:20:e5:89:44:4e:0f:f0:ae:26:be:58:ab:97:0a:8b:38:
e6:e8:7c:92:85:b8:53:7e:b8:db:3a:6e:2d:f1:bf:50:0b:bf:
21:12:92:70
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgISAZHrVvHqUoaKejlNp1fT7FoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjQwOTEzMTIyMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmIyYWI2NmUwMmI1ZmNkMTc4ZTUyMWI2MGZkZmNiOTE1ZWNkYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZq5zKxzrCUI9a15Ins1rYzzE82y
vZ0xL5qAWYAX4LMgGmBdGb5zh0OZEzm19M5jjLfD06jDKdg6kq+kjhiQrqClxwd3
5i1tkt5JFb4xMeqOjTinYwV+CHT3gI4WnQ1VjV7E5EvQdegh2BdV9xoOUgs1jihx
jaByS9VhOXR1/zS1aVbexV/1dacS+nFgw83B/903h1WsySw2bDks5+VZE6Jwk0aC
POI7Nq+oqYLCU5f26ttG1RCU2e0jkZT68vSdM45nh0hSqNk7r5Ch0K1Yi4nXonoB
w9xyoKGbVVAVClNXQxblOkyuJOvimSQ4eYTmkPRyuSYSnc30gMyVeIh3rQIDAQAB
o4IDTTCCA0kwHQYDVR0OBBYEFF+yq2bgK1/NF45SG2D9/LkV7Nv5MB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvWDdLclp1QXJYODBYamxJYllQMzh1UlhzMl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYQYIKwYBBQUHAQcBAf8EggFQMIIBTDCCATkEAgABMIIB
MTAMAwQHPjiAAwQBPjiIMAwDBAA+OIsDBAA+OJowDAMEAj44nAMEBD44oDAMAwQD
PjjYAwQBPjjcMAwDBAU+OOADBAI+OPgwCwMDAFHHAwQCUccIAwQAUccNAwQCUccQ
MAwDBABRxxUDBANRxxADBAJRxyAwDAMEA1HHKAMEBlHHADAMAwQEUcdQAwQAUcdg
AwQBUcdiMAwDBABRx2UDBARRx2ADBAFRx3YwDAMEAlHHfAMEAFHHhDAMAwQBUceG
AwQEUceAMAwDBAFRx5IDBABRx6gwDAMEAlHHrAMEAFHHyDAMAwQCUcfMAwQBUcfY
MAwDBABRx9sDBABRx+YwDAMEA1HH6AMEAVHH+DAMAwQAW8t5AwQCW8t4AwQCwV1g
AwQBw8hcAwQBw+E+AwQBw/VsMA0EAgACMAcDBQAqAgugMA0GCSqGSIb3DQEBCwUA
A4IBAQBFVF+RIKMCBNFW2R43UJs7Y17OA3ByGaLuw16Tw1J1q0e+tVuyvoOV3QKQ
TNmqNTgSUXVZXlyDfZFDN5u8C/5NwfgSLLZPOY+Y++UIQWcMsbGbnFieQO+rx7Xz
6908dChCAw95exTWDCzYgtVacWCU9iNjCkk2VKdryVQwvkG8L7guJdu40p10cCPl
T9KRtij3/MSg5TGwokkWbjzqpprmQ08qYi9Eh6bTKVd11ISPmFZliuY1o4uFs7tn
aCpvOCdw8lgdNn35UJvG177PYIlkjtPfLFb0gyxXcCDliUROD/CuJr5Yq5cKizjm
6HyShbhTfrjbOm4t8b9QC78hEpJw
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:52 2024 by rpki-client on console-ams.rpki-client.org