Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sBdpuXhxA7-vQRrpBRgVcnXbqe0.roa
File: sBdpuXhxA7-vQRrpBRgVcnXbqe0.roa (raw, json)
Hash identifier: AH6aTnzRmCAaLKTDJ5asJEqqY6+zsJilsabxTTgRZJ8=
Subject key identifier: B0:17:69:B9:78:71:03:BF:AF:41:1A:E9:05:18:15:72:75:DB:A9:ED
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143D1DDB2D59802CF2CCB87BE60C36E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sBdpuXhxA7-vQRrpBRgVcnXbqe0.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8851
IP address blocks: 37.98.144.0/21 maxlen: 24
37.98.144.0/22 maxlen: 24
37.252.24.0/21 maxlen: 24
77.107.64.0/18 maxlen: 24
79.99.72.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
81.5.128.0/18 maxlen: 18
81.168.0.0/17 maxlen: 17
82.152.0.0/15 maxlen: 15
82.152.0.0/16 maxlen: 16
82.163.0.0/19 maxlen: 24
85.159.128.0/21 maxlen: 24
89.31.232.0/21 maxlen: 24
89.213.48.0/20 maxlen: 24
89.213.64.0/18 maxlen: 24
89.213.192.0/18 maxlen: 24
109.176.0.0/16 maxlen: 16
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
185.24.84.0/24 maxlen: 24
185.24.86.0/23 maxlen: 23
194.105.64.0/19 maxlen: 24
195.128.138.0/24 maxlen: 24
212.38.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
213.152.32.0/19 maxlen: 19
213.210.0.0/18 maxlen: 24
213.218.208.0/20 maxlen: 24
213.218.224.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
2001:1a90::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2a02:21f8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d1:dd:b2:d5:98:02:cf:2c:cb:87:be:60:c3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b01769b9787103bfaf411ae90518157275dba9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:85:66:4c:55:62:31:f1:1f:e9:67:42:14:
26:9a:84:ff:80:85:2b:4d:b7:00:7a:71:bc:65:dc:
d1:1c:63:b5:89:38:69:a7:40:db:c6:02:ec:0b:1a:
4c:d7:30:87:f0:1f:35:ca:c7:d6:40:19:3c:3a:3e:
03:72:7f:5f:a1:78:48:ac:aa:0e:09:50:87:24:ff:
53:1a:f4:74:ec:cb:fa:42:18:cc:8e:6f:38:f3:de:
a6:18:42:f2:90:dc:27:b2:b2:19:57:e9:12:03:d8:
bc:14:75:97:f7:fa:30:b5:c4:66:6e:6d:00:4e:0c:
85:b2:f6:8d:05:7a:2e:5f:13:44:ca:20:2a:9c:c7:
f8:92:41:d4:15:92:26:e6:92:ae:ce:e2:24:18:65:
b1:b2:aa:a3:af:22:e4:94:65:ef:2f:e3:c2:67:bd:
76:fa:cf:08:31:67:94:95:be:2c:7a:c4:0b:ba:28:
c7:5c:5b:7b:e0:69:21:51:3f:8c:51:ea:f0:8b:c5:
aa:bf:d6:6d:14:d5:cf:1f:ee:4a:3e:e8:b8:31:31:
94:8a:f3:74:87:29:f3:73:b3:40:50:e5:3d:5c:12:
0e:4e:ad:e7:b4:28:a6:12:c2:14:5c:70:d4:98:9e:
53:2b:24:d8:97:74:74:c1:a5:bf:73:3e:f9:84:31:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:69:B9:78:71:03:BF:AF:41:1A:E9:05:18:15:72:75:DB:A9:ED
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sBdpuXhxA7-vQRrpBRgVcnXbqe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
109.176.0.0/16
185.20.32.0/22
185.24.84.0/24
185.24.86.0/23
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
2a:be:99:37:80:74:c2:15:fa:41:63:c8:f2:f5:54:58:7a:1f:
92:d2:0e:12:61:56:e9:f3:7b:83:5d:7f:88:4f:da:70:3e:ee:
b0:b7:77:c0:94:bb:6e:97:7b:98:88:06:6f:89:64:bb:61:e2:
25:fe:97:f9:b9:97:fc:0b:14:7c:4b:7a:3a:4c:b4:e6:1d:f6:
b0:de:00:0d:f7:b5:d0:63:a9:f4:37:6d:75:12:fa:10:6c:f0:
09:6c:07:6b:21:90:db:2d:c3:e5:a0:42:f4:43:0d:b7:d2:11:
00:78:fb:29:51:cf:db:2a:87:66:11:82:a9:f5:e2:88:2d:5b:
0b:dc:5f:db:e0:16:88:33:80:05:23:25:9a:b7:f9:b2:4b:7b:
6f:f5:4c:46:45:5c:d4:0c:1a:5f:a1:70:4e:01:6b:8b:8e:2d:
3f:0c:8f:6c:7f:a4:08:42:f6:73:71:07:08:dd:22:f9:0a:41:
37:b1:b5:ea:66:f9:8e:c0:c2:ff:03:0a:5b:9b:6f:3a:1f:5f:
42:94:a9:1c:42:dc:6c:0c:91:b2:70:f1:83:f8:2e:f9:6c:44:
e1:92:e0:42:2e:a7:6c:51:ad:87:3e:f6:d7:e2:42:dd:c7:23:
2d:42:8b:78:c2:48:7c:fd:e6:03:fc:04:73:c2:02:cc:b3:d7:
f7:c0:ea:85
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAZQhQ9HdstWYAs8sy4e+YMNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDE3NjliOTc4NzEwM2JmYWY0MTFhZTkwNTE4MTU3Mjc1ZGJhOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzCFZkxVYjHxH+lnQhQmmoT/gIUr
TbcAenG8ZdzRHGO1iThpp0DbxgLsCxpM1zCH8B81ysfWQBk8Oj4Dcn9foXhIrKoO
CVCHJP9TGvR07Mv6QhjMjm84896mGELykNwnsrIZV+kSA9i8FHWX9/owtcRmbm0A
TgyFsvaNBXouXxNEyiAqnMf4kkHUFZIm5pKuzuIkGGWxsqqjryLklGXvL+PCZ712
+s8IMWeUlb4sesQLuijHXFt74GkhUT+MUerwi8Wqv9ZtFNXPH+5KPui4MTGUivN0
hynzc7NAUOU9XBIOTq3ntCimEsIUXHDUmJ5TKyTYl3R0waW/cz75hDFz7wIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFLAXabl4cQO/r0Ea6QUYFXJ126ntMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvc0JkcHVYaHhBNy12UVJycEJSZ1ZjblhicWUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DCBsAQCAAEwgakDBAMl
YpADBAMl/BgDBAZNa0ADBANPY0gDBARQ8FADBAZRBYADBAdRqAADAwFSmAMEBVKj
AAMEA1WfgAMEA1kf6DAMAwQEWdUwAwQHWdUAAwQGWdXAAwMAbbADBAK5FCADBAC5
GFQDBAG5GFYDBAXCaUADBADDgIoDBAXUJkADBAXVgoADBAXVmCADBAbV0gAwCwME
BNXa0AMDANXaAwQE2ZCQAwQE2ZFAMBsEAgACMBUDBQAgARqQAwUAKgAMYAMFACoC
IfgwDQYJKoZIhvcNAQELBQADggEBACq+mTeAdMIV+kFjyPL1VFh6H5LSDhJhVunz
e4Ndf4hP2nA+7rC3d8CUu26Xe5iIBm+JZLth4iX+l/m5l/wLFHxLejpMtOYd9rDe
AA33tdBjqfQ3bXUS+hBs8AlsB2shkNstw+WgQvRDDbfSEQB4+ylRz9sqh2YRgqn1
4ogtWwvcX9vgFogzgAUjJZq3+bJLe2/1TEZFXNQMGl+hcE4Ba4uOLT8Mj2x/pAhC
9nNxBwjdIvkKQTextepm+Y7Awv8DClubbzofX0KUqRxC3GwMkbJw8YP4LvlsROGS
4EIup2xRrYc+9tfiQt3HIy1Ci3jCSHz95gP8BHPCAsyz1/fA6oU=
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:42:17 2025 by rpki-client