Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/uv5SozVCIDIOvAPihsaU09GX_aY.roa
File: uv5SozVCIDIOvAPihsaU09GX_aY.roa (raw, json)
Hash identifier: 3mJ5bbxrMrLBSzi6MJPphOqkhhxS4tmISAnB0CcBk5o=
Subject key identifier: BA:FE:52:A3:35:42:20:32:0E:BC:03:E2:86:C6:94:D3:D1:97:FD:A6
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0190591A9A42432E06459BE662AE851A4DBD
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/uv5SozVCIDIOvAPihsaU09GX_aY.roa
Signing time: Thu 27 Jun 2024 09:50:33 +0000
ROA not before: Thu 27 Jun 2024 09:50:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3326
IP address blocks: 5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
5.1.16.0/20 maxlen: 20
31.128.68.0/22 maxlen: 22
31.128.72.0/22 maxlen: 22
31.128.76.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/20 maxlen: 20
46.164.128.0/20 maxlen: 20
46.164.144.0/21 maxlen: 21
46.164.152.0/23 maxlen: 23
46.164.154.0/23 maxlen: 23
46.164.156.0/23 maxlen: 23
46.164.158.0/24 maxlen: 24
46.164.159.0/24 maxlen: 24
46.164.164.0/23 maxlen: 23
46.164.168.0/22 maxlen: 22
77.88.201.0/24 maxlen: 24
77.88.202.0/24 maxlen: 24
77.88.206.0/24 maxlen: 24
77.88.207.0/24 maxlen: 24
77.88.208.0/23 maxlen: 23
77.88.210.0/24 maxlen: 24
77.88.211.0/24 maxlen: 24
77.88.212.0/24 maxlen: 24
77.88.214.0/23 maxlen: 23
77.88.216.0/22 maxlen: 22
77.88.220.0/24 maxlen: 24
77.88.221.0/24 maxlen: 24
77.88.248.0/24 maxlen: 24
77.88.252.0/24 maxlen: 24
77.88.253.0/24 maxlen: 24
77.88.254.0/24 maxlen: 24
77.88.255.0/24 maxlen: 24
77.222.128.0/21 maxlen: 21
77.222.137.0/24 maxlen: 24
77.222.138.0/24 maxlen: 24
77.222.139.0/24 maxlen: 24
77.222.140.0/22 maxlen: 22
77.222.144.0/21 maxlen: 21
77.222.152.0/22 maxlen: 22
77.222.156.0/23 maxlen: 23
77.222.158.0/23 maxlen: 23
80.77.32.0/22 maxlen: 22
80.77.36.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.38.0/24 maxlen: 24
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 21
80.91.160.0/22 maxlen: 22
80.91.164.0/23 maxlen: 23
80.91.166.0/24 maxlen: 24
80.91.167.0/24 maxlen: 24
80.91.168.0/24 maxlen: 24
80.91.169.0/24 maxlen: 24
80.91.170.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.172.0/22 maxlen: 22
80.91.176.0/22 maxlen: 22
80.91.180.0/23 maxlen: 23
80.91.183.0/24 maxlen: 24
80.91.184.0/21 maxlen: 21
80.249.224.0/20 maxlen: 20
85.159.0.0/21 maxlen: 21
88.81.224.0/21 maxlen: 21
88.81.232.0/22 maxlen: 22
88.81.236.0/24 maxlen: 24
88.81.237.0/24 maxlen: 24
88.81.238.0/23 maxlen: 23
88.81.240.0/22 maxlen: 22
88.81.244.0/22 maxlen: 22
88.81.246.0/24 maxlen: 24
88.81.247.0/24 maxlen: 24
88.81.248.0/24 maxlen: 24
88.81.249.0/24 maxlen: 24
88.81.251.0/24 maxlen: 24
88.81.252.0/23 maxlen: 23
88.81.254.0/23 maxlen: 23
91.193.68.0/22 maxlen: 22
91.197.220.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
91.204.92.0/23 maxlen: 23
91.204.94.0/24 maxlen: 24
91.204.95.0/24 maxlen: 24
93.183.192.0/24 maxlen: 24
93.183.193.0/24 maxlen: 24
93.183.194.0/23 maxlen: 23
93.183.196.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.198.0/23 maxlen: 23
93.183.200.0/21 maxlen: 21
93.183.208.0/22 maxlen: 22
93.183.212.0/23 maxlen: 23
93.183.214.0/24 maxlen: 24
93.183.215.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.218.0/23 maxlen: 23
93.183.220.0/22 maxlen: 22
93.183.224.0/24 maxlen: 24
93.183.225.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.228.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
93.183.230.0/23 maxlen: 23
93.183.232.0/22 maxlen: 22
93.183.237.0/24 maxlen: 24
93.183.239.0/24 maxlen: 24
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
94.232.72.0/21 maxlen: 21
109.206.32.0/19 maxlen: 19
176.102.32.0/21 maxlen: 21
176.102.40.0/21 maxlen: 21
176.102.48.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 22
176.102.56.0/21 maxlen: 21
176.112.0.0/19 maxlen: 19
176.241.104.0/21 maxlen: 21
176.241.128.0/23 maxlen: 23
176.241.130.0/23 maxlen: 23
176.241.132.0/22 maxlen: 22
176.241.136.0/21 maxlen: 21
176.241.144.0/20 maxlen: 20
176.241.148.0/22 maxlen: 22
178.213.168.0/21 maxlen: 21
178.213.168.0/22 maxlen: 22
178.213.172.0/23 maxlen: 23
178.213.174.0/24 maxlen: 24
178.213.175.0/24 maxlen: 24
185.8.40.0/22 maxlen: 22
185.8.40.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
185.46.248.0/22 maxlen: 22
188.0.64.0/22 maxlen: 22
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
188.247.96.0/20 maxlen: 20
188.247.112.0/22 maxlen: 22
188.247.116.0/22 maxlen: 22
193.41.48.0/22 maxlen: 22
193.108.48.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.51.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
193.108.129.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
194.29.60.0/22 maxlen: 22
194.146.196.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
194.146.198.0/24 maxlen: 24
195.69.176.0/23 maxlen: 23
195.69.176.0/24 maxlen: 24
195.69.177.0/24 maxlen: 24
195.69.178.0/24 maxlen: 24
195.69.179.0/24 maxlen: 24
195.114.131.0/24 maxlen: 24
195.114.139.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/20 maxlen: 22
195.114.144.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.146.0/24 maxlen: 24
195.114.147.0/24 maxlen: 24
195.114.148.0/24 maxlen: 24
195.114.149.0/24 maxlen: 24
195.114.150.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
213.111.192.0/18 maxlen: 18
217.112.208.0/20 maxlen: 20
2a01:758::/32 maxlen: 48
2a01:758:ffe0::/48 maxlen: 48
2a01:758:ffe1::/48 maxlen: 48
2a01:758:ffe2::/48 maxlen: 48
2a01:758:ffe3::/48 maxlen: 48
2a01:758:ffe4::/48 maxlen: 48
2a01:758:ffe8::/48 maxlen: 48
2a01:758:fff3::/48 maxlen: 48
2a02:70::/32 maxlen: 32
2a02:70::/48 maxlen: 48
2a02:70:1::/48 maxlen: 48
2a02:70:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:1a:9a:42:43:2e:06:45:9b:e6:62:ae:85:1a:4d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jun 27 09:50:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bafe52a3354220320ebc03e286c694d3d197fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:35:48:42:52:f9:f8:f6:be:9d:52:e1:13:
db:6a:72:ba:ad:b1:3b:58:21:ee:c4:b7:aa:5e:82:
21:94:c9:2a:d6:18:b3:5f:ef:31:b3:3e:b0:86:a8:
c6:07:bc:5b:d8:56:2c:cf:c7:ac:12:31:37:ba:21:
1e:6f:23:d2:a8:20:91:ad:c8:43:f7:d5:bc:8a:5e:
59:ec:5f:27:20:36:d8:9a:6e:08:fa:43:d2:c7:46:
b4:98:a5:78:54:94:92:a2:21:38:d5:b8:cb:16:e0:
9c:62:2b:bd:c5:54:05:6d:ea:b9:5b:6c:e5:55:43:
eb:8d:30:dc:82:09:10:b0:bc:a2:35:d2:56:43:80:
19:60:b0:31:91:fc:f8:f0:99:86:18:b6:c3:7b:b4:
71:e4:47:fd:e8:db:9d:a7:85:f6:8e:7e:e7:83:17:
18:8a:b4:3e:70:37:ba:ea:e2:04:6a:75:87:a5:92:
69:b9:96:1f:ce:38:46:35:bb:ab:d8:e7:53:b0:f0:
4b:d8:e0:c5:0f:79:92:40:e5:86:ef:42:ec:5b:6b:
2c:1b:26:53:ab:aa:0f:29:20:ae:45:e3:c2:9b:8b:
e9:e4:44:0c:a2:c0:dd:0d:86:42:f3:4c:49:a7:0f:
43:ca:2a:77:2a:5d:01:fa:e1:35:97:dd:71:81:3d:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:52:A3:35:42:20:32:0E:BC:03:E2:86:C6:94:D3:D1:97:FD:A6
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/uv5SozVCIDIOvAPihsaU09GX_aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.68.0-31.128.95.255
46.164.128.0/19
46.164.164.0/23
46.164.168.0/22
77.88.201.0-77.88.202.255
77.88.206.0-77.88.212.255
77.88.214.0-77.88.221.255
77.88.248.0/24
77.88.252.0/22
77.222.128.0/21
77.222.137.0-77.222.159.255
80.77.32.0/20
80.91.160.0-80.91.181.255
80.91.183.0-80.91.191.255
80.249.224.0/20
85.159.0.0/21
88.81.224.0-88.81.249.255
88.81.251.0-88.81.255.255
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
93.183.192.0-93.183.235.255
93.183.237.0/24
93.183.239.0-93.183.255.255
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/22
188.247.96.0-188.247.119.255
193.41.48.0/22
193.108.48.0/23
193.108.51.0/24
193.108.128.0/23
193.109.164.0/22
194.29.60.0/22
194.146.196.0-194.146.198.255
195.69.176.0/22
195.114.131.0/24
195.114.139.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
217.112.208.0/20
IPv6:
2a01:758::/32
2a02:70::/32
Signature Algorithm: sha256WithRSAEncryption
58:0d:c6:da:7a:68:22:4c:c0:f3:b5:2b:f2:5c:c4:0f:ee:b0:
3f:92:45:96:7b:f2:15:da:e5:2d:40:6f:c3:09:30:06:05:1c:
31:7b:0e:24:45:a8:cf:bd:10:0b:87:45:1d:38:1b:6c:16:e0:
9d:0a:ca:68:1f:c5:92:e1:28:13:ed:78:83:6d:ad:19:f5:6b:
16:15:24:95:c3:f8:d5:ed:94:82:ad:59:78:16:18:f4:09:88:
0a:5c:42:b2:68:ae:9b:70:0b:32:3a:2f:4a:d8:a5:7f:ba:7e:
63:cb:3b:61:c0:b5:ae:ea:33:1f:0f:fa:59:d9:8a:34:0d:c8:
dc:74:09:a9:5e:b2:67:7c:6f:0b:7d:1e:41:98:34:ec:d3:dd:
99:59:38:21:e1:76:b8:39:58:44:44:a0:55:59:85:cb:76:49:
d4:7c:a0:0c:25:5a:66:df:ef:1d:ae:9f:10:20:fe:1f:39:58:
fc:66:d6:d9:b5:5c:8b:cb:67:91:35:f8:28:be:71:66:63:39:
44:d7:31:94:c9:fd:9e:78:1a:d9:4b:64:b0:50:d3:77:bd:f2:
f8:04:f3:9e:8f:ce:ff:65:03:e4:11:18:5c:4c:db:92:d3:e0:
88:e1:7e:e2:91:8d:16:f2:21:a2:ee:05:bf:9c:3b:64:6d:27:
9f:90:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:36 2024 by rpki-client on console-fra.rpki-client.org