Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/81_71xReY0XGHcOcexbRmTmANhU.roa
File: 81_71xReY0XGHcOcexbRmTmANhU.roa (raw, json)
Hash identifier: zKuiAvHYsrHebwZaO64EdhdTVdy9IdzSh3geer4jTlk=
Subject key identifier: F3:5F:FB:D7:14:5E:63:45:C6:1D:C3:9C:7B:16:D1:99:39:80:36:15
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 019362BFFED4614320274BFE00647D3D4CE2
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/81_71xReY0XGHcOcexbRmTmANhU.roa
Signing time: Mon 25 Nov 2024 09:56:09 +0000
ROA not before: Mon 25 Nov 2024 09:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31520
IP address blocks: 5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
5.1.16.0/20 maxlen: 20
31.128.76.0/23 maxlen: 24
31.128.78.0/23 maxlen: 24
31.128.80.0/22 maxlen: 22
31.128.84.0/22 maxlen: 22
31.128.88.0/22 maxlen: 22
31.128.92.0/22 maxlen: 22
77.222.139.0/24 maxlen: 24
77.222.152.0/22 maxlen: 24
77.222.156.0/23 maxlen: 24
77.222.158.0/23 maxlen: 24
80.77.32.0/22 maxlen: 24
80.77.36.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.38.0/24 maxlen: 24
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 24
80.77.40.0/22 maxlen: 22
80.77.44.0/22 maxlen: 22
80.91.166.0/24 maxlen: 24
85.159.0.0/21 maxlen: 24
91.197.220.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
93.183.214.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.218.0/23 maxlen: 23
93.183.220.0/22 maxlen: 22
93.183.224.0/24 maxlen: 24
93.183.225.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.230.0/24 maxlen: 24
93.183.231.0/24 maxlen: 24
93.183.232.0/22 maxlen: 22
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
94.232.72.0/21 maxlen: 21
109.206.32.0/19 maxlen: 24
176.102.48.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 24
176.102.56.0/21 maxlen: 24
176.112.0.0/19 maxlen: 24
176.241.128.0/19 maxlen: 24
176.241.148.0/22 maxlen: 22
178.213.168.0/21 maxlen: 24
185.46.248.0/22 maxlen: 24
188.247.96.0/20 maxlen: 20
188.247.116.0/24 maxlen: 24
188.247.117.0/24 maxlen: 24
188.247.118.0/24 maxlen: 24
188.247.119.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
194.29.60.0/22 maxlen: 24
195.114.128.0/24 maxlen: 24
195.114.129.0/24 maxlen: 24
195.114.135.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.146.0/23 maxlen: 24
195.114.148.0/23 maxlen: 24
195.114.150.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
195.114.152.0/24 maxlen: 24
195.114.153.0/24 maxlen: 24
195.114.154.0/24 maxlen: 24
195.114.155.0/24 maxlen: 24
195.114.156.0/24 maxlen: 24
195.114.157.0/24 maxlen: 24
195.114.158.0/24 maxlen: 24
195.114.159.0/24 maxlen: 24
213.111.192.0/18 maxlen: 24
213.111.201.0/24 maxlen: 24
213.111.202.0/24 maxlen: 24
213.111.206.0/23 maxlen: 23
213.111.215.0/24 maxlen: 24
213.111.216.0/24 maxlen: 24
213.111.218.0/23 maxlen: 23
213.111.248.0/24 maxlen: 24
213.111.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:bf:fe:d4:61:43:20:27:4b:fe:00:64:7d:3d:4c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Nov 25 09:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f35ffbd7145e6345c61dc39c7b16d19939803615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:ca:dc:be:a8:94:98:20:62:cf:3c:a3:6e:
c1:4c:bf:33:87:52:08:ef:cd:e6:aa:4b:b1:fc:c9:
50:51:80:72:5d:39:ea:89:ad:c7:80:6d:63:84:b5:
75:e8:f8:ef:29:aa:81:29:cd:0c:e8:02:08:66:93:
c6:bf:3f:e7:d0:ea:89:89:4f:32:b3:76:fc:2a:42:
73:08:6a:21:4b:11:ac:67:9c:cc:5b:cd:19:45:68:
a2:d4:43:7c:66:09:1a:54:bf:4f:1b:97:d5:bb:d5:
0d:e0:a4:b0:9d:04:3f:d4:44:11:f8:02:d5:c4:24:
0a:c7:5f:a6:d4:20:48:62:69:f8:f1:93:06:54:b5:
06:45:d7:e6:90:51:a1:29:61:28:77:7a:eb:ed:72:
e3:34:06:ba:b2:9c:ea:b4:a3:6d:6f:a8:3d:a1:dc:
23:c9:0d:4b:41:41:d8:47:fd:0b:b0:01:2b:62:cb:
79:81:28:54:df:20:c4:d8:6a:90:e6:32:de:c2:08:
91:55:2e:49:aa:69:2c:5c:6f:6e:a0:e7:07:ff:f9:
e9:60:2d:11:c3:11:f4:70:a6:c3:cc:3b:0b:7b:9f:
d8:7a:2f:92:ea:78:2c:c7:60:35:2d:6e:da:a2:e7:
12:e2:41:2b:b0:38:11:9b:9b:16:f0:f6:c5:c0:3e:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:FB:D7:14:5E:63:45:C6:1D:C3:9C:7B:16:D1:99:39:80:36:15
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/81_71xReY0XGHcOcexbRmTmANhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.76.0-31.128.95.255
77.222.139.0/24
77.222.152.0/21
80.77.32.0/20
80.91.166.0/24
85.159.0.0/21
91.197.220.0/22
93.183.214.0/24
93.183.216.0-93.183.227.255
93.183.230.0-93.183.235.255
93.183.240.0/20
94.232.72.0/21
109.206.32.0/19
176.102.48.0/20
176.112.0.0/19
176.241.128.0/19
178.213.168.0/21
185.46.248.0/22
188.247.96.0/20
188.247.116.0/22
193.108.49.0/24
193.108.128.0/24
194.29.60.0/22
195.114.128.0/23
195.114.135.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
70:9c:e8:2b:13:6a:32:82:dd:d4:51:62:64:50:76:16:77:96:
26:18:99:ff:6d:da:f1:db:f2:60:74:99:88:14:eb:0b:33:cf:
92:c9:14:9d:5d:d4:d5:d2:60:ea:5f:4d:35:a3:a5:3d:a0:45:
f8:e4:58:5c:0c:8d:12:bb:b8:13:af:17:a0:f6:cb:96:94:fe:
b2:40:03:db:13:3c:87:e0:06:d7:01:4f:57:ba:6c:21:cb:e8:
e1:2a:de:85:6e:94:18:25:9a:c2:38:70:fe:97:88:06:0d:61:
35:69:5c:53:1c:b5:bf:ca:99:e2:3b:f1:ec:1c:ea:79:53:5b:
f9:b6:d0:a6:ff:32:a9:f8:9e:3d:ad:01:0d:7b:bd:87:d6:fb:
93:cf:0b:d7:04:ce:19:65:fa:9c:f0:27:b4:ca:b5:cd:86:d5:
40:27:cc:68:ba:7a:fa:b2:79:2b:15:96:52:f4:8b:72:91:a3:
03:e8:af:09:dc:ab:18:45:24:ec:54:85:57:7f:02:66:4b:c9:
fa:99:d4:e0:58:05:9a:06:30:b9:02:9a:ce:7d:d4:fc:05:f9:
ce:dc:13:05:2b:34:71:cf:cc:16:ac:b9:00:80:65:a1:01:3f:
d2:04:08:25:26:45:20:39:f6:a6:6b:c1:a3:92:69:40:38:40:
e9:c4:ad:89
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAZNiv/7UYUMgJ0v+AGR9PUziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjQxMTI1MDk1NjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzVmZmJkNzE0NWU2MzQ1YzYxZGMzOWM3YjE2ZDE5OTM5ODAzNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80nK3L6olJggYs88o27BTL8zh1II
783mqkux/MlQUYByXTnqia3HgG1jhLV16PjvKaqBKc0M6AIIZpPGvz/n0OqJiU8y
s3b8KkJzCGohSxGsZ5zMW80ZRWii1EN8ZgkaVL9PG5fVu9UN4KSwnQQ/1EQR+ALV
xCQKx1+m1CBIYmn48ZMGVLUGRdfmkFGhKWEod3rr7XLjNAa6spzqtKNtb6g9odwj
yQ1LQUHYR/0LsAErYst5gShU3yDE2GqQ5jLewgiRVS5JqmksXG9uoOcH//npYC0R
wxH0cKbDzDsLe5/Yei+S6ngsx2A1LW7aoucS4kErsDgRm5sW8PbFwD5yTQIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFPNf+9cUXmNFxh3DnHsW0Zk5gDYVMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvODFfNzF4UmVZMFhHSGNPY2V4YlJtVG1BTmhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAEF
AQAwDAMEAgUBBAMEBQUBADAMAwQCH4BMAwQFH4BAAwQATd6LAwQDTd6YAwQEUE0g
AwQAUFumAwQDVZ8AAwQCW8XcAwQAXbfWMAwDBANdt9gDBAJdt+AwDAMEAV235gME
Al236AMEBF238AMEA17oSAMEBW3OIAMEBLBmMAMEBbBwAAMEBbDxgAMEA7LVqAME
Arku+AMEBLz3YAMEArz3dAMEAMFsMQMEAMFsgAMEAsIdPAMEAcNygAMEAMNyhzAM
AwQAw3KNAwQFw3KAAwQG1W/AMA0GCSqGSIb3DQEBCwUAA4IBAQBwnOgrE2oygt3U
UWJkUHYWd5YmGJn/bdrx2/JgdJmIFOsLM8+SyRSdXdTV0mDqX001o6U9oEX45Fhc
DI0Su7gTrxeg9suWlP6yQAPbEzyH4AbXAU9Xumwhy+jhKt6FbpQYJZrCOHD+l4gG
DWE1aVxTHLW/ypniO/HsHOp5U1v5ttCm/zKp+J49rQENe72H1vuTzwvXBM4ZZfqc
8Ce0yrXNhtVAJ8xounr6snkrFZZS9ItykaMD6K8J3KsYRSTsVIVXfwJmS8n6mdTg
WAWaBjC5AprOfdT8BfnO3BMFKzRxz8wWrLkAgGWhAT/SBAglJkUgOfama8GjkmlA
OEDpxK2J
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:41:24 2024 by rpki-client on console-fra.rpki-client.org