Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/EHz9moI3E2YFYPoMntLL7wt-8IU.roa
File: EHz9moI3E2YFYPoMntLL7wt-8IU.roa (raw, json)
Hash identifier: DbbtZlw3A/vbrpegCnHU6jl7EoAtch4fTDY3mpbWKKY=
Subject key identifier: 10:7C:FD:9A:82:37:13:66:05:60:FA:0C:9E:D2:CB:EF:0B:7E:F0:85
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018EC80C98A2774321F3C46F86DE39C793A3
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/EHz9moI3E2YFYPoMntLL7wt-8IU.roa
Signing time: Wed 10 Apr 2024 12:47:32 +0000
ROA not before: Wed 10 Apr 2024 12:47:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:0c:98:a2:77:43:21:f3:c4:6f:86:de:39:c7:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Apr 10 12:47:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=107cfd9a823713660560fa0c9ed2cbef0b7ef085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:cd:fa:5b:89:dc:96:f3:44:44:70:6a:22:
9f:7f:5c:8b:11:c1:db:2f:82:42:8b:40:de:7b:ef:
d6:9f:d3:03:65:8a:58:b3:9e:1e:8d:22:fa:a0:12:
91:3c:b9:e1:59:e0:3c:ab:2a:9c:14:93:c9:1f:87:
6d:bb:7c:17:f4:44:e9:29:c9:46:3e:4d:16:50:b8:
93:99:71:af:a6:6e:84:93:a6:30:33:f9:e0:6f:ab:
2e:6c:62:9f:cf:da:70:76:41:db:f6:aa:7a:2c:41:
49:69:13:cc:77:9a:1c:0a:a5:99:a5:93:52:b3:15:
d1:4a:75:9e:84:16:ed:14:05:a7:41:1b:2a:f1:01:
e6:c3:f8:38:4f:3a:83:54:44:d6:22:8c:91:03:9a:
ef:e0:c8:de:9c:bd:90:19:28:c9:65:24:d4:56:e9:
77:36:51:56:d7:9a:4f:d5:5f:d1:86:81:83:84:14:
f1:0e:c7:8e:6b:10:86:de:24:4e:dc:d6:b0:54:68:
f0:72:5a:05:e3:97:24:15:38:ff:97:9b:03:08:38:
fb:1e:80:08:f2:94:4c:e1:54:24:85:71:a4:e1:34:
5a:1e:09:d1:20:da:72:3c:d4:51:f4:b7:e1:df:75:
00:78:f1:c9:50:0f:93:d1:3a:ac:64:94:a8:6e:ea:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7C:FD:9A:82:37:13:66:05:60:FA:0C:9E:D2:CB:EF:0B:7E:F0:85
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/EHz9moI3E2YFYPoMntLL7wt-8IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a14:2d80::-2a14:2d82:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
84:a2:11:36:c6:b8:b1:d0:ba:80:de:c1:11:29:ac:51:ad:6b:
77:eb:77:81:82:ad:46:0a:db:b6:07:f2:a8:d5:8a:65:a7:f1:
ed:1a:27:df:2c:f8:a6:8d:46:c1:93:24:f2:90:43:e7:56:84:
25:d3:ee:d2:86:c5:89:ca:b6:4e:e2:d9:b8:96:d5:3a:51:f3:
1d:1a:4c:3b:ac:d0:39:f3:a7:ad:a5:d7:8d:07:6b:c0:2d:44:
3b:68:ee:74:43:25:40:9c:f6:1a:ca:3d:ea:2e:52:ca:98:7d:
e9:31:d5:50:38:3d:c4:e0:93:6c:f0:8f:aa:81:b7:1e:6f:93:
f0:d6:17:ca:44:a0:2f:09:07:c7:34:bd:7e:ea:a5:34:6f:7e:
06:8b:cb:98:76:e3:b0:62:b9:dd:8b:68:2f:16:46:92:1d:7f:
c8:0d:e7:7b:5a:bc:8f:50:16:a0:5c:37:7c:1a:df:0a:94:35:
83:d8:3c:f2:1e:90:5d:00:4e:81:07:55:e7:6c:f4:0c:20:44:
aa:3e:d3:ac:47:e0:e4:8a:05:df:42:de:d3:b8:3e:fc:01:42:
fe:90:ce:78:66:b4:cf:91:33:ef:af:42:e1:5a:54:8e:bc:b5:
10:fc:68:a9:05:29:54:1d:96:42:af:1c:8d:ee:f0:c0:8a:ce:
56:53:b2:88
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISAY7IDJiid0Mh88Rvht45x5OjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjQwNDEwMTI0NzMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDdjZmQ5YTgyMzcxMzY2MDU2MGZhMGM5ZWQyY2JlZjBiN2VmMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVfN+luJ3JbzRERwaiKff1yLEcHb
L4JCi0Dee+/Wn9MDZYpYs54ejSL6oBKRPLnhWeA8qyqcFJPJH4dtu3wX9ETpKclG
Pk0WULiTmXGvpm6Ek6YwM/ngb6subGKfz9pwdkHb9qp6LEFJaRPMd5ocCqWZpZNS
sxXRSnWehBbtFAWnQRsq8QHmw/g4TzqDVETWIoyRA5rv4MjenL2QGSjJZSTUVul3
NlFW15pP1V/RhoGDhBTxDseOaxCG3iRO3NawVGjwcloF45ckFTj/l5sDCDj7HoAI
8pRM4VQkhXGk4TRaHgnRINpyPNRR9Lfh33UAePHJUA+T0TqsZJSobupZdQIDAQAB
o4IC8jCCAu4wHQYDVR0OBBYEFBB8/ZqCNxNmBWD6DJ7Sy+8LfvCFMB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvRUh6OW1vSTNFMllGWVBvTW50TEw3d3QtOElVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBgYIKwYBBQUHAQcBAf8EgfYwgfMwgacEAgABMIGgAwQC
Jd18AwQCLUPkAwQCLXiwAwQAPgMMAwQCSnfAMAwDBAJQXMwDBABQXM4DBAJWaEgD
BAFZ3eADBABbwqEwDAMEAFvh2QMEAlvh2AMEAmcjvAMEAmdqAAMEAmdxRAMEArB4
QAMEArB4SAMEArnqOAMEArnqQAMEArnr8AMEArns6AMEArnyVAMEArn6lAMEAMHL
ygMEAcL2cgMEAMOVVzBHBAIAAjBBAwUDKgl8QAMFACoROAUDBQEqETwCMA4DBQcq
FC2AAwUAKhQtggMFACoULoADBQAqFC+AAwUAKhQwgAMFACoUOIAwDQYJKoZIhvcN
AQELBQADggEBAISiETbGuLHQuoDewREprFGta3frd4GCrUYK27YH8qjVimWn8e0a
J98s+KaNRsGTJPKQQ+dWhCXT7tKGxYnKtk7i2biW1TpR8x0aTDus0Dnzp62l140H
a8AtRDto7nRDJUCc9hrKPeouUsqYfekx1VA4PcTgk2zwj6qBtx5vk/DWF8pEoC8J
B8c0vX7qpTRvfgaLy5h247Biud2LaC8WRpIdf8gN53tavI9QFqBcN3wa3wqUNYPY
PPIekF0AToEHVeds9AwgRKo+06xH4OSKBd9C3tO4PvwBQv6QznhmtM+RM++vQuFa
VI68tRD8aKkFKVQdlkKvHI3u8MCKzlZTsog=
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:17:27 2024 by rpki-client on console-fra.rpki-client.org