Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/6jSVWjzpYwtKwT5RER4P6GfXqIA.roa
File: 6jSVWjzpYwtKwT5RER4P6GfXqIA.roa (raw, json)
Hash identifier: EDAw318H8efckzY5u3R17wkx92dNwwNk7XRygZcsJZg=
Subject key identifier: EA:34:95:5A:3C:E9:63:0B:4A:C1:3E:51:11:1E:0F:E8:67:D7:A8:80
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC50105CD00D111A9F412AAD869A590FD
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/6jSVWjzpYwtKwT5RER4P6GfXqIA.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3326
IP address blocks: 185.46.248.0/22 maxlen: 22
195.114.131.0/24 maxlen: 24
194.146.198.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
194.146.196.0/24 maxlen: 24
176.241.130.0/23 maxlen: 23
176.241.128.0/23 maxlen: 23
176.241.132.0/22 maxlen: 22
176.241.136.0/21 maxlen: 21
176.241.144.0/20 maxlen: 20
176.241.148.0/22 maxlen: 22
176.241.104.0/21 maxlen: 21
176.112.0.0/19 maxlen: 19
178.213.174.0/24 maxlen: 24
188.247.96.0/20 maxlen: 20
178.213.175.0/24 maxlen: 24
188.247.112.0/22 maxlen: 22
188.247.116.0/22 maxlen: 22
217.112.208.0/20 maxlen: 20
91.193.68.0/22 maxlen: 22
178.213.168.0/22 maxlen: 22
178.213.168.0/21 maxlen: 21
178.213.172.0/23 maxlen: 23
109.206.32.0/19 maxlen: 19
80.91.166.0/24 maxlen: 24
80.91.160.0/22 maxlen: 22
80.91.164.0/23 maxlen: 23
85.159.0.0/21 maxlen: 21
80.91.172.0/22 maxlen: 22
80.91.168.0/24 maxlen: 24
80.91.167.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.170.0/24 maxlen: 24
80.91.169.0/24 maxlen: 24
80.91.176.0/22 maxlen: 22
80.91.180.0/23 maxlen: 23
80.91.184.0/21 maxlen: 21
80.91.183.0/24 maxlen: 24
213.111.192.0/18 maxlen: 18
46.164.128.0/20 maxlen: 20
46.164.144.0/21 maxlen: 21
46.164.152.0/23 maxlen: 23
46.164.158.0/24 maxlen: 24
46.164.159.0/24 maxlen: 24
46.164.154.0/23 maxlen: 23
46.164.156.0/23 maxlen: 23
94.232.72.0/21 maxlen: 21
46.164.164.0/23 maxlen: 23
80.77.38.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.36.0/24 maxlen: 24
80.77.32.0/22 maxlen: 22
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 21
93.183.200.0/21 maxlen: 21
93.183.208.0/22 maxlen: 22
93.183.212.0/23 maxlen: 23
93.183.218.0/23 maxlen: 23
93.183.215.0/24 maxlen: 24
93.183.214.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.220.0/22 maxlen: 22
93.183.225.0/24 maxlen: 24
93.183.224.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.232.0/22 maxlen: 22
93.183.230.0/23 maxlen: 23
93.183.228.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
93.183.239.0/24 maxlen: 24
93.183.237.0/24 maxlen: 24
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
93.183.192.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
93.183.193.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.196.0/24 maxlen: 24
93.183.194.0/23 maxlen: 23
93.183.198.0/23 maxlen: 23
195.69.176.0/23 maxlen: 23
195.69.177.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
195.69.179.0/24 maxlen: 24
195.69.178.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.220.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
91.204.92.0/23 maxlen: 23
91.204.95.0/24 maxlen: 24
91.204.94.0/24 maxlen: 24
194.29.60.0/22 maxlen: 22
5.1.16.0/20 maxlen: 20
88.81.232.0/22 maxlen: 22
176.102.32.0/21 maxlen: 21
88.81.237.0/24 maxlen: 24
88.81.236.0/24 maxlen: 24
88.81.238.0/23 maxlen: 23
88.81.240.0/22 maxlen: 22
176.102.40.0/21 maxlen: 21
88.81.246.0/24 maxlen: 24
88.81.244.0/22 maxlen: 22
88.81.248.0/24 maxlen: 24
88.81.247.0/24 maxlen: 24
88.81.251.0/24 maxlen: 24
176.102.48.0/23 maxlen: 23
88.81.249.0/24 maxlen: 24
88.81.252.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 22
176.102.56.0/21 maxlen: 21
88.81.254.0/23 maxlen: 23
77.88.202.0/24 maxlen: 24
77.88.201.0/24 maxlen: 24
77.88.206.0/24 maxlen: 24
77.88.208.0/23 maxlen: 23
77.88.207.0/24 maxlen: 24
77.88.212.0/24 maxlen: 24
77.88.211.0/24 maxlen: 24
77.88.210.0/24 maxlen: 24
5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
88.81.224.0/21 maxlen: 21
77.88.216.0/22 maxlen: 22
77.88.214.0/23 maxlen: 23
77.88.221.0/24 maxlen: 24
77.88.220.0/24 maxlen: 24
77.88.248.0/24 maxlen: 24
77.88.253.0/24 maxlen: 24
77.88.252.0/24 maxlen: 24
77.88.254.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
77.88.255.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
185.8.40.0/22 maxlen: 22
77.222.137.0/24 maxlen: 24
77.222.139.0/24 maxlen: 24
77.222.138.0/24 maxlen: 24
77.222.140.0/22 maxlen: 22
77.222.144.0/21 maxlen: 21
188.0.64.0/22 maxlen: 22
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
31.128.68.0/22 maxlen: 22
77.222.152.0/22 maxlen: 22
31.128.72.0/22 maxlen: 22
77.222.158.0/23 maxlen: 23
31.128.76.0/23 maxlen: 23
77.222.156.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/20 maxlen: 20
193.108.51.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.48.0/24 maxlen: 24
195.114.139.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.144.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/20 maxlen: 22
195.114.149.0/24 maxlen: 24
195.114.148.0/24 maxlen: 24
195.114.147.0/24 maxlen: 24
195.114.146.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
195.114.150.0/24 maxlen: 24
77.222.128.0/21 maxlen: 21
193.108.129.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
193.41.48.0/22 maxlen: 22
80.249.224.0/20 maxlen: 20
2a01:758::/32 maxlen: 48
2a01:758:ffe0::/48 maxlen: 48
2a01:758:ffe3::/48 maxlen: 48
2a02:70:1::/48 maxlen: 48
2a01:758:ffe1::/48 maxlen: 48
2a01:758:ffe4::/48 maxlen: 48
2a02:70::/32 maxlen: 32
2a02:70:100::/40 maxlen: 40
2a01:758:fff3::/48 maxlen: 48
2a01:758:ffe2::/48 maxlen: 48
2a01:758:ffe8::/48 maxlen: 48
2a02:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:05:cd:00:d1:11:a9:f4:12:aa:d8:69:a5:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea34955a3ce9630b4ac13e51111e0fe867d7a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:fe:5b:19:d9:ab:09:98:89:49:38:3b:67:
cf:b4:6d:23:d7:f7:d1:4e:01:5b:ae:2c:6e:89:9d:
50:e0:9d:fc:e5:b2:35:c1:ef:d2:1e:f9:4d:81:1c:
c3:2b:a9:78:01:27:29:a2:75:45:b6:fd:0f:d0:8c:
34:41:ef:cb:44:fc:82:68:d4:b3:50:82:82:28:6b:
1e:45:cd:fb:2b:e8:9d:93:12:b4:66:69:fe:60:d2:
98:c9:dd:27:0e:f9:8c:49:34:55:96:2e:73:7c:a0:
a5:71:76:9f:d3:26:fc:fd:a8:c2:63:76:13:cb:58:
e8:bc:df:db:17:9a:69:b5:01:f1:52:8b:f0:2b:dd:
55:24:d5:30:39:a6:5f:70:b7:04:d3:ac:5f:30:51:
74:2e:97:56:e4:d9:a2:fa:58:b4:ed:1c:fd:86:c1:
bc:68:3f:80:33:73:a6:d8:7b:1e:86:6f:f5:53:44:
2e:32:8d:3f:77:ac:10:f5:07:cb:fd:56:7f:9e:df:
79:63:bb:31:d9:90:ff:e7:25:b3:3a:c3:bf:e9:64:
5c:04:c2:49:03:40:64:15:b5:dc:0e:0d:5d:be:ed:
d1:8a:3d:b1:a0:57:08:44:64:0a:f3:5c:32:a8:74:
30:24:eb:7e:21:c3:84:a0:64:b8:ec:55:63:6c:05:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:95:5A:3C:E9:63:0B:4A:C1:3E:51:11:1E:0F:E8:67:D7:A8:80
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/6jSVWjzpYwtKwT5RER4P6GfXqIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.68.0-31.128.95.255
46.164.128.0/19
46.164.164.0/23
77.88.201.0-77.88.202.255
77.88.206.0-77.88.212.255
77.88.214.0-77.88.221.255
77.88.248.0/24
77.88.252.0/22
77.222.128.0/21
77.222.137.0-77.222.159.255
80.77.32.0/20
80.91.160.0-80.91.181.255
80.91.183.0-80.91.191.255
80.249.224.0/20
85.159.0.0/21
88.81.224.0-88.81.249.255
88.81.251.0-88.81.255.255
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
93.183.192.0-93.183.235.255
93.183.237.0/24
93.183.239.0-93.183.255.255
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/22
188.247.96.0-188.247.119.255
193.41.48.0/22
193.108.48.0/23
193.108.51.0/24
193.108.128.0/23
193.109.164.0/22
194.29.60.0/22
194.146.196.0-194.146.198.255
195.69.176.0/22
195.114.131.0/24
195.114.139.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
217.112.208.0/20
IPv6:
2a01:758::/32
2a02:70::/32
Signature Algorithm: sha256WithRSAEncryption
23:a4:9b:d0:b4:e3:35:72:7b:ed:6a:19:bd:71:57:3e:26:e0:
46:8b:cb:a4:f5:66:f9:64:d1:bb:bd:64:d3:bb:cc:99:7f:53:
24:9f:c3:3d:b5:b5:ac:04:a3:df:7e:06:91:cf:1f:97:65:af:
9c:2c:d2:ec:04:ad:43:5f:19:04:2b:f3:fc:77:17:2c:22:20:
5d:35:58:86:8c:a8:28:c6:ec:ba:f7:c5:73:29:29:8b:9d:be:
4a:35:23:39:b9:77:02:f1:9a:73:8e:a6:2d:4f:75:40:d6:ad:
7d:b2:7b:f7:20:56:82:a8:c2:9c:25:2e:d4:15:50:19:1c:94:
cc:29:37:cf:cb:e1:fd:75:b0:46:e9:5f:b6:94:b0:a9:d9:39:
96:55:63:bb:07:d7:c2:d6:4e:1c:17:3e:6e:a6:04:68:fd:6f:
39:0c:ed:aa:7f:e0:11:f1:52:ea:4a:72:3e:d3:24:91:06:9a:
82:b4:d3:50:92:74:6d:87:d8:10:15:68:7b:f9:28:0a:13:9b:
92:78:55:e9:eb:dd:6f:c5:ed:48:50:1a:ae:6b:37:25:77:03:
8e:05:a5:b6:fa:12:fc:b2:a4:1f:9e:94:16:a1:bd:82:14:97:
e8:32:c2:dd:ba:30:d1:a4:a9:b4:91:b8:b7:d0:ee:2d:56:d4:
d5:9f:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:25:52 2024 by rpki-client on console-fra.rpki-client.org