Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/br_Om8zDletz1yEFWiyq5OYzj9w.roa
File: br_Om8zDletz1yEFWiyq5OYzj9w.roa (raw, json)
Hash identifier: 6U0g/gMECEK7Gkz1jM/Ltw4mIwAKwscQN+IZ+wQrZN8=
Subject key identifier: 6E:BF:CE:9B:CC:C3:95:EB:73:D7:21:05:5A:2C:AA:E4:E6:33:8F:DC
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018FF3E6E9C91737DA25BEAF431E0A521A6A
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/br_Om8zDletz1yEFWiyq5OYzj9w.roa
Signing time: Fri 07 Jun 2024 18:12:27 +0000
ROA not before: Fri 07 Jun 2024 18:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 92.50.14.0/24 maxlen: 24
92.50.15.0/24 maxlen: 24
92.50.16.0/24 maxlen: 24
92.50.17.0/24 maxlen: 24
92.50.18.0/24 maxlen: 24
92.50.19.0/24 maxlen: 24
92.50.20.0/24 maxlen: 24
92.50.21.0/24 maxlen: 24
92.50.22.0/24 maxlen: 24
92.50.23.0/24 maxlen: 24
92.50.24.0/24 maxlen: 24
92.50.25.0/24 maxlen: 24
92.50.26.0/24 maxlen: 24
92.50.27.0/24 maxlen: 24
92.50.28.0/24 maxlen: 24
92.50.29.0/24 maxlen: 24
92.50.30.0/24 maxlen: 24
92.50.31.0/24 maxlen: 24
92.50.32.0/24 maxlen: 24
92.50.33.0/24 maxlen: 24
92.50.34.0/24 maxlen: 24
92.50.35.0/24 maxlen: 24
92.50.36.0/24 maxlen: 24
92.50.37.0/24 maxlen: 24
92.50.38.0/24 maxlen: 24
92.50.39.0/24 maxlen: 24
92.50.40.0/24 maxlen: 24
92.50.41.0/24 maxlen: 24
92.50.42.0/24 maxlen: 24
92.50.43.0/24 maxlen: 24
92.50.44.0/24 maxlen: 24
92.50.45.0/24 maxlen: 24
92.50.46.0/24 maxlen: 24
92.50.47.0/24 maxlen: 24
92.50.48.0/24 maxlen: 24
92.50.49.0/24 maxlen: 24
92.50.50.0/24 maxlen: 24
92.50.51.0/24 maxlen: 24
92.50.52.0/24 maxlen: 24
92.50.53.0/24 maxlen: 24
92.50.54.0/24 maxlen: 24
92.50.55.0/24 maxlen: 24
92.50.56.0/24 maxlen: 24
92.50.57.0/24 maxlen: 24
92.50.58.0/24 maxlen: 24
92.50.59.0/24 maxlen: 24
92.50.60.0/24 maxlen: 24
92.50.61.0/24 maxlen: 24
92.50.62.0/24 maxlen: 24
92.50.63.0/24 maxlen: 24
147.136.78.0/24 maxlen: 24
147.136.79.0/24 maxlen: 24
147.136.84.0/24 maxlen: 24
147.136.86.0/24 maxlen: 24
147.136.87.0/24 maxlen: 24
168.199.133.0/24 maxlen: 24
168.199.134.0/24 maxlen: 24
168.199.135.0/24 maxlen: 24
168.199.136.0/24 maxlen: 24
168.199.137.0/24 maxlen: 24
168.199.138.0/24 maxlen: 24
168.199.139.0/24 maxlen: 24
168.199.140.0/24 maxlen: 24
168.199.141.0/24 maxlen: 24
168.199.142.0/24 maxlen: 24
168.199.143.0/24 maxlen: 24
168.199.144.0/24 maxlen: 24
168.199.145.0/24 maxlen: 24
168.199.146.0/24 maxlen: 24
168.199.147.0/24 maxlen: 24
168.199.148.0/24 maxlen: 24
168.199.149.0/24 maxlen: 24
168.199.150.0/24 maxlen: 24
168.199.151.0/24 maxlen: 24
168.199.152.0/24 maxlen: 24
168.199.153.0/24 maxlen: 24
168.199.154.0/24 maxlen: 24
168.199.155.0/24 maxlen: 24
168.199.156.0/24 maxlen: 24
168.199.157.0/24 maxlen: 24
168.199.158.0/24 maxlen: 24
168.199.159.0/24 maxlen: 24
168.199.164.0/24 maxlen: 24
168.199.166.0/24 maxlen: 24
168.199.167.0/24 maxlen: 24
168.199.168.0/24 maxlen: 24
168.199.174.0/24 maxlen: 24
168.199.202.0/24 maxlen: 24
168.199.203.0/24 maxlen: 24
168.199.204.0/24 maxlen: 24
168.199.206.0/24 maxlen: 24
168.199.208.0/24 maxlen: 24
168.199.211.0/24 maxlen: 24
168.199.216.0/24 maxlen: 24
168.199.217.0/24 maxlen: 24
168.199.218.0/24 maxlen: 24
168.199.219.0/24 maxlen: 24
168.199.220.0/24 maxlen: 24
168.199.221.0/24 maxlen: 24
168.199.222.0/24 maxlen: 24
168.199.223.0/24 maxlen: 24
168.199.224.0/24 maxlen: 24
168.199.226.0/24 maxlen: 24
168.199.228.0/24 maxlen: 24
168.199.229.0/24 maxlen: 24
168.199.230.0/24 maxlen: 24
168.199.232.0/24 maxlen: 24
168.199.240.0/24 maxlen: 24
168.199.241.0/24 maxlen: 24
168.199.242.0/24 maxlen: 24
168.199.243.0/24 maxlen: 24
168.199.244.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
168.199.246.0/24 maxlen: 24
168.199.247.0/24 maxlen: 24
168.199.248.0/24 maxlen: 24
168.199.249.0/24 maxlen: 24
168.199.250.0/24 maxlen: 24
168.199.251.0/24 maxlen: 24
168.199.252.0/24 maxlen: 24
168.199.253.0/24 maxlen: 24
168.199.254.0/24 maxlen: 24
168.199.255.0/24 maxlen: 24
185.100.58.0/24 maxlen: 24
192.95.85.0/24 maxlen: 24
192.95.86.0/24 maxlen: 24
192.95.91.0/24 maxlen: 24
2001:678:8b4::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f3:e6:e9:c9:17:37:da:25:be:af:43:1e:0a:52:1a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jun 7 18:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ebfce9bccc395eb73d721055a2caae4e6338fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:e1:6c:9e:b3:98:2e:0b:1f:da:ce:74:23:
bd:1b:5d:de:9c:54:1c:02:8e:2f:ef:f2:82:b6:c5:
94:ad:d9:79:f2:bc:43:90:86:a2:2f:c5:ec:f0:0f:
35:f9:90:33:dd:2d:06:23:b0:00:8e:cf:94:ab:b9:
a7:4e:71:cc:cd:83:c8:55:3f:5c:1d:df:02:f3:fe:
a1:b6:0b:a7:a0:f6:f5:1a:7d:4a:8b:f2:14:73:f3:
33:71:66:61:55:0e:c8:f9:11:41:52:c4:aa:28:77:
6a:b7:b0:41:dd:72:d5:af:bd:f9:8f:7e:25:7a:07:
ec:79:d3:10:34:2e:8d:2c:16:8a:bf:58:12:8e:11:
a4:08:da:2a:b3:a0:65:a5:04:71:46:65:65:7b:0d:
52:7b:a2:23:da:70:a2:ad:2d:03:96:95:49:d1:52:
7a:bc:e4:7c:95:0d:26:47:e6:c3:53:d0:e8:28:b1:
88:6d:98:b8:bd:26:9b:cd:03:d4:b8:03:97:df:71:
3d:f2:23:99:29:fd:2e:3a:91:c8:31:d6:23:47:3a:
60:54:f4:df:47:c6:47:92:ec:2d:4c:77:4b:36:17:
6f:86:57:87:16:f9:fe:cc:1a:27:38:45:70:4d:a2:
63:8c:c3:d9:2f:dd:40:3e:72:e3:04:54:1a:e9:b0:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:CE:9B:CC:C3:95:EB:73:D7:21:05:5A:2C:AA:E4:E6:33:8F:DC
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/br_Om8zDletz1yEFWiyq5OYzj9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.14.0-92.50.63.255
147.136.78.0/23
147.136.84.0/24
147.136.86.0/23
168.199.133.0-168.199.159.255
168.199.164.0/24
168.199.166.0-168.199.168.255
168.199.174.0/24
168.199.202.0-168.199.204.255
168.199.206.0/24
168.199.208.0/24
168.199.211.0/24
168.199.216.0-168.199.224.255
168.199.226.0/24
168.199.228.0-168.199.230.255
168.199.232.0/24
168.199.240.0/20
185.100.58.0/24
192.95.85.0-192.95.86.255
192.95.91.0/24
IPv6:
2001:678:8b4::/48
Signature Algorithm: sha256WithRSAEncryption
8b:5a:5f:18:2f:94:f8:1d:a2:5c:01:f9:03:2f:38:a8:0f:ce:
e4:25:a2:81:68:d3:42:74:08:4c:de:5f:2c:e4:72:b1:6a:4d:
59:45:60:a4:c4:d5:12:d2:44:e6:50:6b:1f:41:f8:77:37:40:
42:89:e5:f0:9d:f5:9a:18:05:ce:57:99:b7:8b:a7:fc:5f:95:
5f:4e:9d:9a:fd:40:d5:29:b7:42:e2:81:b9:0b:6a:66:bb:7a:
c3:04:af:19:85:19:36:63:6a:0b:4a:38:7c:5a:99:94:4c:1e:
0a:ac:96:4d:a4:76:e0:2e:e9:7d:bd:b6:b9:a8:8f:83:80:81:
da:39:63:78:56:57:2d:1c:a1:69:7e:eb:ca:cd:4b:6f:23:08:
c3:6e:9d:07:2e:2a:8f:50:f3:53:cb:82:03:c7:e5:f9:d2:e5:
0a:b3:d6:d2:e1:ef:0a:a0:09:45:59:4a:a9:61:60:e8:b4:74:
f7:0c:50:ee:76:1a:78:1b:d5:d5:d1:49:c7:a0:62:ce:24:9b:
1b:94:37:2a:5c:a8:6a:30:05:68:ff:dc:96:c0:21:df:a6:74:
c7:b4:5e:8b:da:8d:95:d5:42:a7:16:07:c8:20:68:11:27:3a:
63:09:fd:41:c8:75:db:cf:48:3d:a1:7d:2c:fa:ea:21:0c:25:
ad:15:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:55:55 2024 by rpki-client on console-ams.rpki-client.org