Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/tuRQnrpa5QoCOVe8aeFEO_84Cjo.roa
File: tuRQnrpa5QoCOVe8aeFEO_84Cjo.roa (raw, json)
Hash identifier: 5TAk9t/pZ66IEIIfIZiM6SH/Qs8Vf++QlnPoXTpcH/w=
Subject key identifier: B6:E4:50:9E:BA:5A:E5:0A:02:39:57:BC:69:E1:44:3B:FF:38:0A:3A
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018D7DF180648FA2DADB6747B6FE08F8D090
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/tuRQnrpa5QoCOVe8aeFEO_84Cjo.roa
Signing time: Tue 06 Feb 2024 10:23:15 +0000
ROA not before: Tue 06 Feb 2024 10:23:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 22
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:f1:80:64:8f:a2:da:db:67:47:b6:fe:08:f8:d0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 6 10:23:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e4509eba5ae50a023957bc69e1443bff380a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:75:92:2b:bd:ad:37:d9:7d:dd:67:3d:94:
45:7f:34:8f:8e:25:c4:50:4d:f8:7b:01:a7:82:21:
38:da:46:13:b5:4e:fb:23:f3:6d:a7:27:26:c3:9b:
0e:38:0b:d3:e6:cb:9b:1f:43:32:3f:35:7b:b2:88:
cc:86:e1:04:f7:b5:3b:e5:c6:6c:f2:80:82:c4:8a:
d3:ef:11:58:9d:c7:3c:b9:58:e8:25:c5:81:d0:b8:
ae:9b:b4:5c:ec:db:3f:77:a6:83:aa:9d:f3:19:ae:
52:f3:2d:f0:26:54:c7:6b:02:8d:12:ab:8b:35:1c:
35:b8:b1:49:cc:f9:91:a4:c9:7e:68:1f:85:41:18:
58:b4:cd:d3:84:e7:01:c9:5d:c9:33:cb:a2:b2:32:
b9:a8:78:58:57:46:a3:59:c2:89:a0:e7:73:77:ee:
44:b5:e0:ab:85:24:ed:13:d8:52:a8:9a:3b:ee:e2:
5e:b3:04:d1:bd:95:bd:f9:82:83:28:06:58:65:55:
a2:ad:ca:d9:bd:6b:c0:1b:c7:34:4d:de:e1:99:89:
35:5c:d8:46:9c:09:af:cb:fa:b7:fe:52:7a:e1:28:
ec:ed:cd:76:5d:d6:fd:22:05:a0:fd:a0:66:83:1c:
ba:e0:19:0e:80:1f:61:b9:b6:26:2e:36:38:3a:de:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:50:9E:BA:5A:E5:0A:02:39:57:BC:69:E1:44:3B:FF:38:0A:3A
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/tuRQnrpa5QoCOVe8aeFEO_84Cjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
98:03:13:56:a0:36:4b:c5:33:5d:2e:20:39:d6:aa:9c:2b:57:
06:5e:49:a9:38:47:b6:04:ea:60:d1:72:03:c3:f8:75:de:0b:
2e:dc:9c:dc:48:48:56:a9:e9:6c:12:24:f3:13:96:f7:90:c4:
a4:38:e7:b7:8b:83:17:8d:57:af:a0:f2:9a:b0:f9:bd:b4:e9:
d6:ba:bf:5b:dd:43:62:57:43:df:c8:49:99:6b:9f:63:26:1a:
54:31:34:34:7c:a8:00:ce:44:0f:2a:b8:22:47:b6:1d:71:86:
c9:ac:54:7f:20:bb:7d:f5:0c:cb:7c:b2:2e:28:c9:7a:6c:30:
ee:a5:6c:3f:ed:f1:69:d0:38:f3:1f:9c:19:1b:7c:60:71:3a:
99:89:88:c5:44:2b:d2:6f:7f:dc:68:8c:41:7a:2b:79:32:ac:
58:9d:f4:2f:a6:5e:69:7b:f6:16:1e:d9:a1:88:d2:ee:9a:9b:
be:55:55:0f:c4:dc:98:03:78:59:5f:73:3a:dd:cc:9a:13:75:
99:0b:0d:8a:40:11:4f:32:dc:ab:b2:4c:01:76:6d:1d:5c:b6:
65:eb:d0:28:57:7f:55:d3:7b:62:e3:fe:9e:cb:9d:a8:35:a8:
a7:7d:b6:92:ff:fc:47:dd:81:78:3d:bd:2d:6a:ba:e6:05:45:
ce:86:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:10:01 2024 by rpki-client on console-fra.rpki-client.org