Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/X0IkHnaKLpLoKPxf1SpyuNSg3w0.roa
File: X0IkHnaKLpLoKPxf1SpyuNSg3w0.roa (raw, json)
Hash identifier: /xf6S+OWgdSQjsHg2deTur4PxcJsmz0OsplqCCrKODc=
Subject key identifier: 5F:42:24:1E:76:8A:2E:92:E8:28:FC:5F:D5:2A:72:B8:D4:A0:DF:0D
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01917860E8D69A91927A21F57ED8E8DF492A
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/X0IkHnaKLpLoKPxf1SpyuNSg3w0.roa
Signing time: Thu 22 Aug 2024 04:38:22 +0000
ROA not before: Thu 22 Aug 2024 04:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 5.181.170.0/24 maxlen: 24
5.183.252.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
45.10.165.0/24 maxlen: 24
45.10.166.0/24 maxlen: 24
45.10.167.0/24 maxlen: 24
45.66.208.0/24 maxlen: 24
45.132.184.0/24 maxlen: 24
45.138.100.0/24 maxlen: 24
45.148.124.0/24 maxlen: 24
77.220.192.0/24 maxlen: 24
77.220.193.0/24 maxlen: 24
77.220.194.0/24 maxlen: 24
77.220.195.0/24 maxlen: 24
83.171.225.0/24 maxlen: 24
91.132.198.0/24 maxlen: 24
93.177.118.0/23 maxlen: 24
141.98.84.0/24 maxlen: 24
147.78.180.0/24 maxlen: 24
147.78.181.0/24 maxlen: 24
147.78.182.0/24 maxlen: 24
147.78.183.0/24 maxlen: 24
185.61.217.0/24 maxlen: 24
185.61.218.0/24 maxlen: 24
185.61.219.0/24 maxlen: 24
185.61.221.0/24 maxlen: 24
185.61.222.0/24 maxlen: 24
185.61.223.0/24 maxlen: 24
185.68.185.0/24 maxlen: 24
185.77.220.0/24 maxlen: 24
185.77.221.0/24 maxlen: 24
185.77.222.0/24 maxlen: 24
185.77.223.0/24 maxlen: 24
185.88.100.0/24 maxlen: 24
194.104.8.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.11.0/24 maxlen: 24
213.108.0.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.2.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
217.145.224.0/24 maxlen: 24
217.145.226.0/24 maxlen: 24
217.145.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:60:e8:d6:9a:91:92:7a:21:f5:7e:d8:e8:df:49:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 22 04:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f42241e768a2e92e828fc5fd52a72b8d4a0df0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:6f:45:f0:f7:7e:4b:2d:c7:ca:dc:53:ab:
02:58:f3:2c:5f:af:8f:68:53:db:68:f0:d4:83:e3:
aa:dc:16:ee:de:19:f8:39:e1:1f:42:c0:9f:d6:0d:
97:b8:a2:4b:22:3c:7f:6c:ac:95:e0:c0:9f:19:00:
45:30:74:a2:e4:0a:43:52:7a:15:17:a2:e0:1e:45:
07:fa:6b:3e:a9:3a:82:e4:d5:d4:75:2a:86:9d:b4:
f9:0a:ce:a9:b6:d2:8c:0b:15:b8:ec:cc:62:12:d3:
24:a0:6d:8a:1f:98:f2:de:34:7e:34:b6:71:1c:87:
51:14:94:66:07:10:19:68:02:5a:5c:e9:2a:9c:62:
b9:f8:c1:8b:eb:a1:26:19:c9:fe:f4:cb:3d:15:f6:
33:ac:9a:5f:e3:3f:7c:e3:8a:f7:a3:fc:7f:ea:93:
32:8d:a6:9d:26:73:c7:9d:e9:32:be:c5:2c:3c:f9:
ed:d5:c1:c1:51:b1:75:23:92:9c:f5:42:47:57:73:
58:70:ec:15:72:90:27:e3:93:68:19:06:8e:a2:2b:
6e:35:ad:40:81:9a:96:75:ec:0a:1b:ac:a1:64:be:
e3:09:af:1b:ba:a0:73:d8:f8:69:03:9c:bc:aa:c1:
b1:a4:a6:f0:40:5d:8c:0a:46:f1:80:1f:6c:75:9d:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:24:1E:76:8A:2E:92:E8:28:FC:5F:D5:2A:72:B8:D4:A0:DF:0D
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/X0IkHnaKLpLoKPxf1SpyuNSg3w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.170.0/24
5.183.252.0/24
45.10.164.0/22
45.66.208.0/24
45.132.184.0/24
45.138.100.0/24
45.148.124.0/24
77.220.192.0/22
83.171.225.0/24
91.132.198.0/24
93.177.118.0/23
141.98.84.0/24
147.78.180.0/22
185.61.217.0-185.61.219.255
185.61.221.0-185.61.223.255
185.68.185.0/24
185.77.220.0/22
185.88.100.0/24
194.104.8.0/23
194.104.11.0/24
213.108.0.0/22
217.145.224.0/24
217.145.226.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:85:fb:c7:b8:67:64:c4:1a:ca:9b:07:ef:c7:7f:22:f2:c1:
f8:37:2e:a4:db:82:3f:e7:56:b3:26:cd:10:a2:1b:d9:86:07:
c1:77:29:fd:3c:00:c7:c1:a4:b7:9a:42:5b:1d:e7:b8:a5:f5:
26:df:aa:b7:30:6f:fe:d5:56:f3:21:ec:5b:11:7e:64:a1:1e:
75:bc:63:69:b4:e5:27:9f:be:12:4a:e2:8d:21:43:e8:cc:44:
88:a8:c3:bd:b1:84:41:e3:10:f2:cb:66:c0:16:ab:e4:e4:bb:
be:33:20:08:e1:cb:14:62:bd:4f:11:2f:6f:be:46:96:74:8b:
13:59:20:65:5b:11:c8:4f:02:6e:de:97:53:26:74:58:24:33:
9b:30:a0:59:d9:e5:22:5c:76:79:b7:6d:3f:01:f1:a6:ce:c0:
96:f3:f6:72:a6:8c:40:29:ea:0a:bf:2f:f9:5b:f8:42:9a:f4:
9b:36:b6:5a:e3:fb:5f:e5:07:9a:98:9b:3e:28:da:17:39:25:
a2:06:d6:e8:fe:11:d9:29:85:f2:9b:c4:cc:be:90:fa:41:00:
a6:e9:f2:ff:2a:79:e9:87:2b:08:c9:79:aa:f6:df:c4:c9:0f:
a8:18:4f:f2:29:85:63:77:49:f8:dd:01:09:7b:6e:3a:67:66:
a3:3d:e8:41
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZF4YOjWmpGSeiH1ftjo30kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjQwODIyMDQzODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjQyMjQxZTc2OGEyZTkyZTgyOGZjNWZkNTJhNzJiOGQ0YTBkZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/BvRfD3fkstx8rcU6sCWPMsX6+P
aFPbaPDUg+Oq3Bbu3hn4OeEfQsCf1g2XuKJLIjx/bKyV4MCfGQBFMHSi5ApDUnoV
F6LgHkUH+ms+qTqC5NXUdSqGnbT5Cs6pttKMCxW47MxiEtMkoG2KH5jy3jR+NLZx
HIdRFJRmBxAZaAJaXOkqnGK5+MGL66EmGcn+9Ms9FfYzrJpf4z9844r3o/x/6pMy
jaadJnPHnekyvsUsPPnt1cHBUbF1I5Kc9UJHV3NYcOwVcpAn45NoGQaOoituNa1A
gZqWdewKG6yhZL7jCa8buqBz2PhpA5y8qsGxpKbwQF2MCkbxgB9sdZ1YoQIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFF9CJB52ii6S6Cj8X9UqcrjUoN8NMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvWDBJa0huYUtMcExvS1B4ZjFTcHl1TlNnM3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAAF
taoDBAAFt/wDBAItCqQDBAAtQtADBAAthLgDBAAtimQDBAAtlHwDBAJN3MADBABT
q+EDBABbhMYDBAFdsXYDBACNYlQDBAKTTrQwDAMEALk92QMEArk92DAMAwQAuT3d
AwQFuT3AAwQAuUS5AwQCuU3cAwQAuVhkAwQBwmgIAwQAwmgLAwQC1WwAAwQA2ZHg
AwQB2ZHiMA0GCSqGSIb3DQEBCwUAA4IBAQBqhfvHuGdkxBrKmwfvx38i8sH4Ny6k
24I/51azJs0QohvZhgfBdyn9PADHwaS3mkJbHee4pfUm36q3MG/+1VbzIexbEX5k
oR51vGNptOUnn74SSuKNIUPozESIqMO9sYRB4xDyy2bAFqvk5Lu+MyAI4csUYr1P
ES9vvkaWdIsTWSBlWxHITwJu3pdTJnRYJDObMKBZ2eUiXHZ5t20/AfGmzsCW8/Zy
poxAKeoKvy/5W/hCmvSbNrZa4/tf5QeamJs+KNoXOSWiBtbo/hHZKYXym8TMvpD6
QQCm6fL/KnnphysIyXmq9t/EyQ+oGE/yKYVjd0n43QEJe246Z2ajPehB
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:26:29 2024 by rpki-client on console-ams.rpki-client.org