Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa
File: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (raw, json)
Hash identifier: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=
Subject key identifier: 3C:31:3F:C7:1D:60:CE:63:C0:57:13:99:5E:97:88:26:63:63:A7:EC
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0194221F9133684CEB989CEBF4FF27E8F673
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48582
IP address blocks: 63.142.0.0/24 maxlen: 24
63.142.1.0/24 maxlen: 24
63.142.2.0/24 maxlen: 24
63.142.3.0/24 maxlen: 24
63.142.4.0/24 maxlen: 24
63.142.5.0/24 maxlen: 24
63.142.6.0/23 maxlen: 23
63.142.6.0/24 maxlen: 24
63.142.7.0/24 maxlen: 24
63.142.8.0/24 maxlen: 24
63.142.9.0/24 maxlen: 24
63.142.10.0/24 maxlen: 24
63.142.11.0/24 maxlen: 24
63.142.12.0/24 maxlen: 24
63.142.13.0/24 maxlen: 24
63.142.14.0/23 maxlen: 23
63.142.14.0/24 maxlen: 24
63.142.15.0/24 maxlen: 24
138.43.0.0/24 maxlen: 24
138.43.4.0/24 maxlen: 24
138.43.5.0/24 maxlen: 24
138.43.6.0/24 maxlen: 24
138.43.7.0/24 maxlen: 24
138.43.8.0/24 maxlen: 24
138.43.9.0/24 maxlen: 24
138.43.10.0/24 maxlen: 24
138.43.11.0/24 maxlen: 24
138.43.12.0/24 maxlen: 24
138.43.13.0/24 maxlen: 24
138.43.14.0/24 maxlen: 24
138.43.15.0/24 maxlen: 24
138.43.26.0/24 maxlen: 24
138.43.28.0/22 maxlen: 22
138.43.28.0/24 maxlen: 24
138.43.29.0/24 maxlen: 24
138.43.30.0/24 maxlen: 24
138.43.31.0/24 maxlen: 24
185.170.161.0/24 maxlen: 24
185.170.162.0/24 maxlen: 24
185.170.163.0/24 maxlen: 24
193.118.128.0/23 maxlen: 23
193.118.128.0/24 maxlen: 24
193.118.129.0/24 maxlen: 24
193.118.130.0/24 maxlen: 24
193.118.131.0/24 maxlen: 24
193.118.132.0/23 maxlen: 23
193.118.132.0/24 maxlen: 24
193.118.133.0/24 maxlen: 24
193.118.134.0/23 maxlen: 23
193.118.134.0/24 maxlen: 24
193.118.135.0/24 maxlen: 24
193.118.136.0/24 maxlen: 24
193.118.137.0/24 maxlen: 24
193.118.138.0/23 maxlen: 23
193.118.138.0/24 maxlen: 24
193.118.139.0/24 maxlen: 24
193.118.140.0/24 maxlen: 24
193.118.141.0/24 maxlen: 24
193.118.142.0/24 maxlen: 24
193.118.143.0/24 maxlen: 24
193.118.144.0/22 maxlen: 22
193.118.144.0/24 maxlen: 24
193.118.145.0/24 maxlen: 24
193.118.146.0/24 maxlen: 24
193.118.147.0/24 maxlen: 24
193.118.148.0/24 maxlen: 24
193.118.149.0/24 maxlen: 24
193.118.150.0/23 maxlen: 23
193.118.150.0/24 maxlen: 24
193.118.151.0/24 maxlen: 24
193.118.152.0/23 maxlen: 23
193.118.152.0/24 maxlen: 24
193.118.153.0/24 maxlen: 24
193.118.154.0/24 maxlen: 24
193.118.155.0/24 maxlen: 24
193.118.156.0/24 maxlen: 24
193.118.157.0/24 maxlen: 24
193.118.158.0/24 maxlen: 24
193.118.159.0/24 maxlen: 24
193.118.192.0/24 maxlen: 24
193.118.193.0/24 maxlen: 24
193.118.194.0/24 maxlen: 24
193.118.195.0/24 maxlen: 24
193.118.196.0/24 maxlen: 24
193.118.198.0/24 maxlen: 24
193.118.199.0/24 maxlen: 24
193.118.200.0/22 maxlen: 22
193.118.200.0/24 maxlen: 24
193.118.201.0/24 maxlen: 24
193.118.202.0/24 maxlen: 24
193.118.203.0/24 maxlen: 24
193.118.204.0/23 maxlen: 23
193.118.204.0/24 maxlen: 24
193.118.205.0/24 maxlen: 24
193.118.206.0/24 maxlen: 24
193.118.207.0/24 maxlen: 24
193.118.208.0/24 maxlen: 24
193.118.209.0/24 maxlen: 24
193.118.210.0/24 maxlen: 24
193.118.211.0/24 maxlen: 24
193.118.212.0/24 maxlen: 24
193.118.213.0/24 maxlen: 24
193.118.214.0/23 maxlen: 23
193.118.214.0/24 maxlen: 24
193.118.215.0/24 maxlen: 24
193.118.216.0/22 maxlen: 22
193.118.216.0/24 maxlen: 24
193.118.217.0/24 maxlen: 24
193.118.218.0/24 maxlen: 24
193.118.219.0/24 maxlen: 24
193.118.220.0/24 maxlen: 24
209.213.48.0/20 maxlen: 20
209.213.48.0/22 maxlen: 22
209.213.48.0/24 maxlen: 24
209.213.49.0/24 maxlen: 24
209.213.50.0/24 maxlen: 24
209.213.51.0/24 maxlen: 24
209.213.52.0/22 maxlen: 22
209.213.52.0/24 maxlen: 24
209.213.53.0/24 maxlen: 24
209.213.54.0/24 maxlen: 24
209.213.55.0/24 maxlen: 24
209.213.56.0/22 maxlen: 22
209.213.56.0/24 maxlen: 24
209.213.57.0/24 maxlen: 24
209.213.58.0/24 maxlen: 24
209.213.59.0/24 maxlen: 24
209.213.60.0/22 maxlen: 22
209.213.60.0/24 maxlen: 24
209.213.61.0/24 maxlen: 24
209.213.62.0/24 maxlen: 24
209.213.63.0/24 maxlen: 24
217.147.176.0/23 maxlen: 23
217.147.176.0/24 maxlen: 24
217.147.177.0/24 maxlen: 24
217.147.178.0/23 maxlen: 23
217.147.178.0/24 maxlen: 24
217.147.179.0/24 maxlen: 24
217.147.182.0/23 maxlen: 23
217.147.182.0/24 maxlen: 24
217.147.183.0/24 maxlen: 24
2a0b:2900:7f::/48 maxlen: 48
2a0b:2900:1000::/41 maxlen: 42
2a0b:2900:1080::/41 maxlen: 42
2a0b:2900:1100::/41 maxlen: 41
2a0b:2900:1100::/42 maxlen: 42
2a0b:2900:1140::/42 maxlen: 42
2a0b:2900:1180::/41 maxlen: 41
2a0b:2900:1180::/42 maxlen: 42
2a0b:2900:11c0::/42 maxlen: 42
2a0b:2900:1200::/41 maxlen: 42
2a0b:2900:1280::/41 maxlen: 42
2a0b:2900:12c0::/42 maxlen: 42
2a0b:2900:1f00::/40 maxlen: 40
2a0b:2900:2100::/41 maxlen: 41
2a0b:2900:2100::/42 maxlen: 42
2a0b:2900:2140::/42 maxlen: 42
2a0b:2900:216c::/48 maxlen: 48
2a0b:2900:2180::/41 maxlen: 41
2a0b:2900:2180::/42 maxlen: 42
2a0b:2900:21c0::/42 maxlen: 42
2a0b:2900:2200::/41 maxlen: 42
2a0b:2900:2280::/41 maxlen: 42
2a0b:2900:2300::/41 maxlen: 42
2a0b:2900:2380::/41 maxlen: 42
2a0b:2900:3100::/41 maxlen: 41
2a0b:2900:3100::/42 maxlen: 42
2a0b:2900:3140::/42 maxlen: 42
2a0b:2900:3180::/41 maxlen: 41
2a0b:2900:3180::/42 maxlen: 42
2a0b:2900:31c0::/42 maxlen: 42
2a0b:2900:3200::/41 maxlen: 41
2a0b:2900:3200::/42 maxlen: 42
2a0b:2900:3240::/42 maxlen: 42
2a0b:2900:3280::/41 maxlen: 41
2a0b:2900:3280::/42 maxlen: 42
2a0b:2900:32c0::/42 maxlen: 42
2a0b:2900:4100::/41 maxlen: 41
2a0b:2900:4180::/41 maxlen: 41
2a0b:2900:4200::/41 maxlen: 41
2a0b:2900:4280::/41 maxlen: 41
2a0b:2900:5200::/41 maxlen: 41
2a0b:2900:5234::/47 maxlen: 47
2a0b:2900:5280::/41 maxlen: 41
2a0b:2900:52b4::/47 maxlen: 47
2a0b:2900:6100::/42 maxlen: 42
2a0b:2900:6140::/42 maxlen: 42
2a0b:2900:6180::/42 maxlen: 42
2a0b:2900:61c0::/42 maxlen: 42
2a0b:2900:6200::/41 maxlen: 41
2a0b:2900:6280::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:33:68:4c:eb:98:9c:eb:f4:ff:27:e8:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c313fc71d60ce63c05713995e9788266363a7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:3e:85:5b:d3:87:73:0c:5d:6f:b4:b9:23:
7d:ff:f5:73:8a:d7:87:93:46:34:f1:2c:b3:a5:a8:
6f:15:31:83:65:59:d4:4d:2d:d7:83:25:50:26:a7:
80:5a:80:3f:74:a8:9f:f0:b3:d5:ba:4b:cb:4f:07:
d3:53:93:fb:a3:fd:05:8f:49:1a:ff:a2:57:2c:44:
6d:d3:23:d1:c6:c0:a6:12:16:72:30:13:17:5b:58:
61:26:bb:7f:78:0d:b1:30:f7:de:b5:68:e9:36:df:
35:dd:9e:f1:66:4f:63:35:32:30:4e:c5:4e:f9:80:
a3:be:1f:47:49:94:85:1a:4e:8d:ad:e9:10:47:40:
d1:28:98:7f:70:84:80:e1:c7:b8:48:75:91:fa:83:
f8:b5:b0:46:34:27:68:42:a4:48:52:6b:7e:b8:8e:
0f:79:d4:f3:c9:5b:cf:3d:91:fd:ff:c2:1c:1c:f3:
10:e6:6a:4f:d4:a4:a7:46:6a:04:76:7c:ae:1b:cb:
a8:56:9f:0c:91:07:3a:88:c8:96:09:08:93:43:79:
b8:c7:a1:89:bf:e9:ca:87:b3:ec:e5:e1:51:65:e3:
8c:70:d0:77:44:39:d7:13:29:83:f8:5d:aa:62:f0:
01:2f:db:c9:1d:47:c1:f8:c9:81:8c:e4:b9:f7:14:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:3F:C7:1D:60:CE:63:C0:57:13:99:5E:97:88:26:63:63:A7:EC
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.142.0.0/20
138.43.0.0/24
138.43.4.0-138.43.15.255
138.43.26.0/24
138.43.28.0/22
185.170.161.0-185.170.163.255
193.118.128.0/19
193.118.192.0-193.118.196.255
193.118.198.0-193.118.220.255
209.213.48.0/20
217.147.176.0/22
217.147.182.0/23
IPv6:
2a0b:2900:7f::/48
2a0b:2900:1000::-2a0b:2900:12ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:1f00::/40
2a0b:2900:2100::-2a0b:2900:23ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:3100::-2a0b:2900:32ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:4100::-2a0b:2900:42ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:5200::/40
2a0b:2900:6100::-2a0b:2900:62ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:7f:68:29:d8:9e:55:be:9a:ca:7e:51:cb:85:8a:6e:81:38:
69:6b:8c:af:37:1a:78:7b:47:be:42:1e:31:d8:96:f5:51:e7:
7a:ae:f2:c9:01:16:17:43:2b:f6:c2:59:6a:12:1d:b2:12:53:
29:85:2a:ee:36:ff:5d:42:ce:97:5b:70:8e:db:5f:75:f3:a9:
b9:bd:a5:cc:d1:e6:fa:7f:e8:e8:6b:da:12:3f:1a:cd:b8:1e:
c8:36:30:e4:55:9f:5c:e1:92:c3:b2:2f:a1:b8:51:7c:ca:92:
25:f3:f0:56:d8:7a:7e:96:68:52:c1:fe:11:8e:52:e0:9e:a1:
43:98:06:f8:bc:8e:9b:a9:38:de:8c:22:81:a7:c0:41:a1:8b:
c6:c2:2d:77:fc:f4:b7:89:4f:4e:2b:e3:c6:fa:86:9c:e7:ae:
f2:a7:b7:f1:8b:a1:90:a1:3b:c4:ee:53:0f:36:8f:25:8e:52:
50:6f:2b:4e:b6:58:51:f0:e0:ef:e5:28:c0:ca:73:ca:f4:43:
0c:7f:72:47:cd:b0:d8:62:69:83:9f:8a:6a:fa:4d:ae:70:d1:
7f:24:cb:39:67:3b:05:e6:9a:40:c5:9c:70:93:41:ca:e7:7d:
8c:73:fc:21:3e:57:0d:81:f3:7f:90:1d:af:e8:11:57:97:fb:
d9:88:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:55 2025 by rpki-client