Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/qZLmA4iMZWKshNHs3uKmEIz97m4.roa
File: qZLmA4iMZWKshNHs3uKmEIz97m4.roa (raw, json)
Hash identifier: Rbp8c7aHRhodj2N2DGqczKQq7xzt60K6dzUp04MHp2U=
Subject key identifier: A9:92:E6:03:88:8C:65:62:AC:84:D1:EC:DE:E2:A6:10:8C:FD:EE:6E
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 018F13FBA1528BFFA133E5042FDD1930F8BB
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/qZLmA4iMZWKshNHs3uKmEIz97m4.roa
Signing time: Thu 25 Apr 2024 06:40:08 +0000
ROA not before: Thu 25 Apr 2024 06:40:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.90.7.0/24 maxlen: 24
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:fb:a1:52:8b:ff:a1:33:e5:04:2f:dd:19:30:f8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Apr 25 06:40:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a992e603888c6562ac84d1ecdee2a6108cfdee6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:4a:ca:96:52:05:fd:68:10:bb:d0:74:45:
a5:ce:22:50:03:f7:bb:0f:9b:ec:a9:09:d6:78:90:
a7:b7:c9:e8:ac:04:8d:70:e4:29:75:b0:0a:8d:35:
03:87:d1:65:5b:fa:77:81:71:c6:a7:4e:89:54:82:
d0:e9:f1:65:19:8d:f0:48:e2:ac:ab:97:97:0a:a8:
ab:41:b6:19:20:58:19:5b:7a:af:3c:17:13:a6:e5:
a9:b2:e5:2e:d0:57:7b:a7:ce:32:9c:2a:80:62:cd:
7d:45:eb:f2:91:46:a0:e8:57:2a:38:1e:e6:d8:18:
c2:41:1b:88:6e:b8:79:c7:88:57:2d:81:16:16:4d:
76:9a:ac:1f:31:ba:fd:22:7b:21:16:9f:2a:11:22:
b4:2c:fa:bf:09:e5:68:bc:1f:cc:56:65:0c:f0:4d:
b2:68:6b:cd:db:c7:76:e0:84:42:60:e4:a3:88:f9:
7c:ce:99:97:7a:f5:6b:36:1c:fa:68:bf:40:c8:d8:
5d:0f:13:6f:f6:0b:d4:3b:63:f8:dd:65:3d:56:49:
57:57:39:4c:32:44:73:fe:65:6d:0f:bd:8c:eb:7e:
3b:e8:96:c8:f3:ad:85:dd:5c:5a:99:b3:4f:b8:b5:
7c:0d:e1:e9:cd:d4:01:b8:bb:70:98:d0:2d:6e:5e:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:92:E6:03:88:8C:65:62:AC:84:D1:EC:DE:E2:A6:10:8C:FD:EE:6E
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/qZLmA4iMZWKshNHs3uKmEIz97m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:99:52:bd:4d:2e:c3:2d:0f:01:29:ef:83:0b:6f:f5:fc:15:
f7:10:b8:a0:59:7a:4e:21:d8:90:15:5a:3a:6f:e2:64:77:c2:
32:2d:0d:e7:41:8b:dd:c4:44:a7:ef:09:59:ea:29:ec:c7:f6:
f3:02:90:f1:d2:9b:b8:02:8f:d8:2e:5b:af:e8:3b:4c:9c:22:
36:9b:58:7d:92:d1:9c:4b:6f:0e:0b:e7:8d:fa:ed:db:49:b1:
13:d4:23:9f:ed:f4:38:aa:c3:d8:1c:42:4a:dc:bd:f4:ae:32:
a0:e4:95:a4:f2:6c:9a:cd:f9:16:61:aa:c9:b6:fc:30:b4:af:
d5:02:d9:46:b6:58:5a:8b:53:80:6e:04:31:10:bc:4b:d7:14:
74:e2:57:3c:3c:b0:6e:f5:8f:c2:40:d2:45:32:89:0e:91:d6:
5e:74:db:1d:e2:00:8e:74:85:66:d2:9a:96:9d:ec:81:26:57:
1f:ef:41:58:16:92:38:42:6d:97:0c:d8:77:39:69:f2:94:98:
6f:29:9c:b1:6a:bd:ae:b8:cb:a2:ae:68:56:97:ab:19:d4:4a:
a1:70:b1:6e:df:8b:a5:3f:e6:7f:cc:ce:b9:50:31:10:b3:94:
1f:7b:31:fb:a2:45:0d:6c:1d:55:53:47:11:85:1c:1a:a1:e2:
6d:86:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:28:22 2024 by rpki-client on console-ams.rpki-client.org