Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/meQrjnGl7iYuj8eqCUA3DZqeRjE.roa
File: meQrjnGl7iYuj8eqCUA3DZqeRjE.roa (raw, json)
Hash identifier: yTZBmAPzPt83Y1Nfvon6sbA9t5FZHXKCNj2rndMTztU=
Subject key identifier: 99:E4:2B:8E:71:A5:EE:26:2E:8F:C7:AA:09:40:37:0D:9A:9E:46:31
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018E605A286CE6554B5AE53AEB702FDCFED1
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/meQrjnGl7iYuj8eqCUA3DZqeRjE.roa
Signing time: Thu 21 Mar 2024 09:31:45 +0000
ROA not before: Thu 21 Mar 2024 09:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29314
IP address blocks: 31.11.128.0/17 maxlen: 17
31.11.128.0/24 maxlen: 24
31.11.129.0/24 maxlen: 24
31.11.130.0/24 maxlen: 24
31.11.131.0/24 maxlen: 24
31.11.132.0/22 maxlen: 22
31.11.172.0/24 maxlen: 24
31.11.202.0/24 maxlen: 24
31.11.208.0/22 maxlen: 22
31.11.228.0/24 maxlen: 24
31.22.96.0/21 maxlen: 21
31.22.100.0/23 maxlen: 23
31.135.168.0/21 maxlen: 21
31.135.175.0/24 maxlen: 24
37.8.192.0/18 maxlen: 18
37.8.208.0/24 maxlen: 24
37.8.214.0/24 maxlen: 24
37.8.230.0/24 maxlen: 24
37.8.231.0/24 maxlen: 24
37.77.152.0/21 maxlen: 21
62.122.112.0/21 maxlen: 21
77.222.224.0/21 maxlen: 21
77.222.232.0/21 maxlen: 21
77.222.240.0/20 maxlen: 20
77.222.248.0/22 maxlen: 22
77.222.252.0/22 maxlen: 22
78.31.152.0/21 maxlen: 21
78.31.209.0/24 maxlen: 24
78.88.0.0/17 maxlen: 17
78.88.28.0/22 maxlen: 22
78.88.28.0/24 maxlen: 24
78.88.29.0/24 maxlen: 24
78.88.30.0/24 maxlen: 24
78.88.31.0/24 maxlen: 24
78.88.43.0/24 maxlen: 24
78.88.123.0/24 maxlen: 24
78.88.128.0/17 maxlen: 17
78.88.188.0/22 maxlen: 22
78.88.216.0/22 maxlen: 22
82.139.0.0/18 maxlen: 18
83.143.40.0/21 maxlen: 21
83.143.136.0/21 maxlen: 21
83.243.104.0/21 maxlen: 21
88.156.0.0/18 maxlen: 18
88.156.64.0/18 maxlen: 18
88.156.64.0/24 maxlen: 24
88.156.78.0/24 maxlen: 24
88.156.80.176/28 maxlen: 28
88.156.128.0/18 maxlen: 18
88.156.128.0/21 maxlen: 21
88.156.128.0/23 maxlen: 23
88.156.130.0/23 maxlen: 23
88.156.132.0/23 maxlen: 23
88.156.134.0/23 maxlen: 23
88.156.136.0/21 maxlen: 21
88.156.164.0/22 maxlen: 22
88.156.192.0/18 maxlen: 18
88.156.222.0/24 maxlen: 24
88.156.226.0/23 maxlen: 23
88.156.255.0/24 maxlen: 24
89.151.0.0/18 maxlen: 18
89.151.16.0/20 maxlen: 20
89.151.40.0/21 maxlen: 21
91.192.76.0/22 maxlen: 22
91.192.76.0/24 maxlen: 24
91.192.78.0/24 maxlen: 24
91.230.159.0/24 maxlen: 24
91.230.162.0/23 maxlen: 23
91.230.164.0/22 maxlen: 22
91.231.116.0/23 maxlen: 23
91.238.232.0/22 maxlen: 22
93.105.0.0/17 maxlen: 17
93.105.40.0/24 maxlen: 24
93.105.42.0/24 maxlen: 24
93.105.128.0/17 maxlen: 17
93.105.142.0/24 maxlen: 24
93.105.144.0/22 maxlen: 22
93.105.168.0/21 maxlen: 21
93.105.176.0/23 maxlen: 23
93.105.178.0/23 maxlen: 23
93.105.180.0/24 maxlen: 24
93.105.181.0/24 maxlen: 24
93.105.182.0/24 maxlen: 24
93.105.183.0/24 maxlen: 24
93.105.224.0/21 maxlen: 21
93.105.236.0/24 maxlen: 24
93.105.237.0/24 maxlen: 24
94.231.48.0/20 maxlen: 20
95.160.0.0/17 maxlen: 24
95.160.16.0/22 maxlen: 22
95.160.28.0/22 maxlen: 22
95.160.56.0/22 maxlen: 22
95.160.76.0/22 maxlen: 22
95.160.126.0/23 maxlen: 23
95.160.128.0/17 maxlen: 17
95.160.152.0/24 maxlen: 24
95.160.153.0/24 maxlen: 24
95.160.154.0/24 maxlen: 24
95.160.155.0/24 maxlen: 24
95.160.156.0/24 maxlen: 24
95.160.157.0/24 maxlen: 24
95.160.158.0/24 maxlen: 24
95.160.159.0/24 maxlen: 24
95.160.166.0/24 maxlen: 24
95.160.170.0/24 maxlen: 24
95.160.228.0/22 maxlen: 22
95.160.233.0/24 maxlen: 24
95.160.236.0/22 maxlen: 22
109.107.0.0/19 maxlen: 19
109.107.0.0/21 maxlen: 21
109.107.9.0/24 maxlen: 24
109.197.56.0/21 maxlen: 21
109.197.64.0/21 maxlen: 21
109.241.0.0/18 maxlen: 18
109.241.64.0/18 maxlen: 18
109.241.128.0/18 maxlen: 18
109.241.192.0/18 maxlen: 18
178.235.0.0/17 maxlen: 17
178.235.40.0/24 maxlen: 24
178.235.41.0/24 maxlen: 24
178.235.42.0/24 maxlen: 24
178.235.43.0/24 maxlen: 24
178.235.98.0/24 maxlen: 24
178.235.110.0/24 maxlen: 24
178.235.128.0/17 maxlen: 17
178.235.128.0/24 maxlen: 24
178.235.129.0/24 maxlen: 24
178.235.130.0/24 maxlen: 24
178.235.131.0/24 maxlen: 24
178.235.132.0/23 maxlen: 23
178.235.134.0/24 maxlen: 24
178.235.135.0/24 maxlen: 24
178.235.136.0/23 maxlen: 23
178.235.138.0/23 maxlen: 23
178.235.140.0/24 maxlen: 24
178.235.141.0/24 maxlen: 24
178.235.142.0/23 maxlen: 23
178.235.144.0/23 maxlen: 23
178.235.146.0/24 maxlen: 24
178.235.147.0/24 maxlen: 24
178.235.148.0/22 maxlen: 22
178.235.148.0/23 maxlen: 23
178.235.150.0/23 maxlen: 23
178.235.150.0/24 maxlen: 24
178.235.152.0/21 maxlen: 21
178.235.160.0/19 maxlen: 19
178.235.192.0/18 maxlen: 18
185.51.180.0/22 maxlen: 22
192.166.120.0/23 maxlen: 23
193.201.18.0/23 maxlen: 23
194.54.188.0/22 maxlen: 22
195.26.72.0/22 maxlen: 22
195.28.170.0/23 maxlen: 23
195.191.162.0/23 maxlen: 23
195.225.92.0/22 maxlen: 22
195.242.252.0/22 maxlen: 22
2a00:9f00::/32 maxlen: 32
2a00:9f00::/36 maxlen: 36
2a00:9f00::/48 maxlen: 48
2a00:9f00:1::/48 maxlen: 48
2a00:9f00:a::/48 maxlen: 48
2a00:9f00:c::/48 maxlen: 48
2a00:9f00:10::/48 maxlen: 48
2a00:9f00:aa::/48 maxlen: 48
2a00:9f00:bb::/48 maxlen: 48
2a00:9f00:cc::/48 maxlen: 48
2a00:9f00:1000::/36 maxlen: 36
2a00:9f00:2000::/36 maxlen: 36
2a00:9f00:2007::/48 maxlen: 48
2a00:9f00:3000::/36 maxlen: 36
2a00:9f00:4000::/36 maxlen: 36
2a00:9f00:5000::/36 maxlen: 36
2a00:9f00:6000::/36 maxlen: 36
2a00:9f00:7000::/36 maxlen: 36
2a00:9f00:8000::/36 maxlen: 36
2a00:9f00:9000::/36 maxlen: 36
2a00:9f00:a000::/36 maxlen: 36
2a00:9f00:abba::/48 maxlen: 48
2a00:9f00:b000::/36 maxlen: 36
2a00:9f00:babe::/48 maxlen: 48
2a00:9f00:beaf::/48 maxlen: 48
2a00:9f00:c000::/36 maxlen: 36
2a00:9f00:cafe::/48 maxlen: 48
2a00:9f00:d000::/36 maxlen: 36
2a00:9f00:dead::/48 maxlen: 48
2a00:9f00:e000::/36 maxlen: 36
2a00:9f00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:5a:28:6c:e6:55:4b:5a:e5:3a:eb:70:2f:dc:fe:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Mar 21 09:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e42b8e71a5ee262e8fc7aa0940370d9a9e4631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:b4:c3:87:8c:cf:df:41:8c:40:c1:1f:1f:
15:62:51:eb:12:82:bb:ad:12:4e:4b:0c:79:a0:7e:
ec:4e:21:a0:5f:c9:35:a0:3e:26:e3:fa:41:0e:28:
7a:8b:91:9f:e2:4f:4d:d1:cc:a3:3c:45:e2:21:7a:
4c:4b:5e:f6:41:f5:da:03:b8:a6:f6:b0:e7:c6:93:
b3:6f:89:02:4e:3c:5a:79:8c:f6:2c:98:e4:bd:0b:
8a:db:50:d5:5a:73:39:a2:60:d0:e0:73:c2:73:bd:
56:84:c8:8e:d2:33:df:ff:8a:13:fd:5f:6f:6a:ec:
ea:8e:63:18:51:35:19:7a:2a:d6:4c:7d:a6:d8:32:
53:8b:7e:25:a5:46:37:dc:55:ad:7b:2c:96:12:31:
0f:dd:e1:96:28:3b:bf:9b:b5:35:32:b9:bb:2c:3c:
6e:b5:c1:ec:e5:26:10:48:1e:1b:58:54:1e:66:59:
03:d7:cc:f4:a7:21:c7:1d:98:f0:a3:0e:89:e7:8c:
77:b6:58:29:ee:06:84:42:be:2c:8e:85:b1:21:72:
0d:8c:8b:80:33:3b:b7:96:39:18:fc:93:53:f8:73:
11:89:e0:a9:8e:e6:e7:98:63:71:54:90:79:87:15:
c7:a8:7e:1d:ed:0d:2a:ce:cf:94:a8:8c:cc:9c:3e:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:2B:8E:71:A5:EE:26:2E:8F:C7:AA:09:40:37:0D:9A:9E:46:31
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/meQrjnGl7iYuj8eqCUA3DZqeRjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.128.0/17
31.22.96.0/21
31.135.168.0/21
37.8.192.0/18
37.77.152.0/21
62.122.112.0/21
77.222.224.0/19
78.31.152.0/21
78.31.209.0/24
78.88.0.0/16
82.139.0.0/18
83.143.40.0/21
83.143.136.0/21
83.243.104.0/21
88.156.0.0/16
89.151.0.0/18
91.192.76.0/22
91.230.159.0/24
91.230.162.0-91.230.167.255
91.231.116.0/23
91.238.232.0/22
93.105.0.0/16
94.231.48.0/20
95.160.0.0/16
109.107.0.0/19
109.197.56.0-109.197.71.255
109.241.0.0/16
178.235.0.0/16
185.51.180.0/22
192.166.120.0/23
193.201.18.0/23
194.54.188.0/22
195.26.72.0/22
195.28.170.0/23
195.191.162.0/23
195.225.92.0/22
195.242.252.0/22
IPv6:
2a00:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
5b:00:9a:5c:27:61:91:f5:9e:0b:22:c5:c3:7e:88:1c:a6:f6:
6b:e1:2a:f3:2c:91:4b:36:8c:7e:96:74:90:d7:08:dd:1c:d8:
e0:ff:5f:ba:7d:a6:5c:b8:6f:9f:45:0d:76:d2:e4:0d:7d:ab:
fa:17:01:ed:61:ba:82:c7:73:34:05:cd:67:0b:fd:d9:53:28:
5d:38:27:bb:86:59:b5:d2:1a:09:f5:2d:33:b4:fb:f0:57:e9:
02:28:fb:ca:44:97:51:9b:ad:36:0b:75:d9:a3:d1:38:f3:b2:
2e:be:cb:22:01:71:f2:b7:43:28:9d:b7:66:4f:70:85:28:13:
9b:f7:dd:88:7d:d4:24:df:c8:ca:f1:d5:88:4b:73:9e:ab:81:
0c:68:20:92:6f:db:b6:1f:f8:7c:be:e1:52:fe:1c:ac:39:d3:
5e:99:87:c3:26:90:d6:25:d3:c5:dd:ca:11:c3:75:19:aa:00:
8b:cc:52:59:de:40:f3:a7:73:3f:45:a7:3e:dc:77:ff:ad:f8:
ab:be:21:70:41:fa:a4:21:23:97:15:52:c6:9d:f0:24:d4:75:
cb:64:84:3b:23:4e:9e:2a:79:6d:3b:d2:ce:96:c5:e5:a8:f4:
0a:cf:63:1d:c3:29:2d:7d:93:99:11:68:ec:11:20:5d:c4:4f:
97:3b:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:03 2024 by rpki-client on console-fra.rpki-client.org