Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/5vpYGSPyNQJYrkCHpNcjy0691eI.roa
File: 5vpYGSPyNQJYrkCHpNcjy0691eI.roa (raw, json)
Hash identifier: xV31imzVCd9IJTr6Pq2klN7TSaU5+BOuBhJWRVIRMVk=
Subject key identifier: E6:FA:58:19:23:F2:35:02:58:AE:40:87:A4:D7:23:CB:4E:BD:D5:E2
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 018CC801A659CDA62D6E607B9F51A9F5340B
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/5vpYGSPyNQJYrkCHpNcjy0691eI.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12859
IP address blocks: 212.114.97.0/24 maxlen: 24
212.114.96.0/19 maxlen: 24
212.114.98.0/24 maxlen: 24
212.114.96.0/24 maxlen: 24
212.114.100.0/24 maxlen: 24
212.114.101.0/24 maxlen: 24
212.114.99.0/24 maxlen: 24
212.114.104.0/24 maxlen: 24
212.114.105.0/24 maxlen: 24
212.114.102.0/24 maxlen: 24
212.114.103.0/24 maxlen: 24
212.114.107.0/24 maxlen: 24
212.114.108.0/24 maxlen: 24
212.114.106.0/24 maxlen: 24
212.114.111.0/24 maxlen: 24
212.114.112.0/24 maxlen: 24
212.114.109.0/24 maxlen: 24
212.114.110.0/24 maxlen: 24
212.114.114.0/24 maxlen: 24
212.114.115.0/24 maxlen: 24
212.114.113.0/24 maxlen: 24
212.114.118.0/24 maxlen: 24
213.154.226.0/24 maxlen: 24
213.154.225.0/24 maxlen: 24
213.154.224.0/24 maxlen: 24
212.114.116.0/24 maxlen: 24
212.114.117.0/24 maxlen: 24
213.154.224.0/19 maxlen: 24
213.154.228.0/24 maxlen: 24
212.114.121.0/24 maxlen: 24
212.114.119.0/24 maxlen: 24
213.154.229.0/24 maxlen: 24
213.154.230.0/24 maxlen: 24
212.114.122.0/24 maxlen: 24
213.154.233.0/24 maxlen: 24
213.154.232.0/24 maxlen: 24
213.154.231.0/24 maxlen: 24
213.154.227.0/24 maxlen: 24
212.114.120.0/24 maxlen: 24
212.114.125.0/24 maxlen: 24
212.114.123.0/24 maxlen: 24
212.114.124.0/24 maxlen: 24
213.154.237.0/24 maxlen: 24
212.114.126.0/24 maxlen: 24
213.154.236.0/24 maxlen: 24
213.154.234.0/24 maxlen: 24
212.114.127.0/24 maxlen: 24
213.154.235.0/24 maxlen: 24
213.154.240.0/24 maxlen: 24
213.154.238.0/24 maxlen: 24
213.154.239.0/24 maxlen: 24
212.72.233.0/24 maxlen: 24
212.72.232.0/24 maxlen: 24
212.72.232.0/21 maxlen: 24
212.72.234.0/24 maxlen: 24
212.72.237.0/24 maxlen: 24
212.72.238.0/24 maxlen: 24
212.72.235.0/24 maxlen: 24
212.72.236.0/24 maxlen: 24
212.72.240.0/24 maxlen: 24
212.72.239.0/24 maxlen: 24
212.72.240.0/20 maxlen: 24
212.72.241.0/24 maxlen: 24
212.72.244.0/24 maxlen: 24
212.72.245.0/24 maxlen: 24
212.72.242.0/24 maxlen: 24
212.72.243.0/24 maxlen: 24
212.72.246.0/24 maxlen: 24
212.72.247.0/24 maxlen: 24
212.72.248.0/24 maxlen: 24
212.72.251.0/24 maxlen: 24
212.72.252.0/24 maxlen: 24
212.72.249.0/24 maxlen: 24
212.72.250.0/24 maxlen: 24
212.72.253.0/24 maxlen: 24
212.72.254.0/24 maxlen: 24
212.72.255.0/24 maxlen: 24
87.251.39.0/24 maxlen: 24
87.251.40.0/24 maxlen: 24
87.251.43.0/24 maxlen: 24
87.251.41.0/24 maxlen: 24
87.251.42.0/24 maxlen: 24
87.251.44.0/24 maxlen: 24
87.251.46.0/24 maxlen: 24
87.251.47.0/24 maxlen: 24
87.251.45.0/24 maxlen: 24
87.251.50.0/24 maxlen: 24
87.251.48.0/24 maxlen: 24
87.251.49.0/24 maxlen: 24
87.251.51.0/24 maxlen: 24
87.251.53.0/24 maxlen: 24
87.251.54.0/24 maxlen: 24
87.251.52.0/24 maxlen: 24
87.251.57.0/24 maxlen: 24
87.251.55.0/24 maxlen: 24
87.251.56.0/24 maxlen: 24
87.251.58.0/24 maxlen: 24
87.251.60.0/24 maxlen: 24
87.251.61.0/24 maxlen: 24
87.251.59.0/24 maxlen: 24
87.251.63.0/24 maxlen: 24
87.251.62.0/24 maxlen: 24
193.109.122.0/24 maxlen: 24
87.251.32.0/24 maxlen: 24
87.251.32.0/19 maxlen: 24
87.251.33.0/24 maxlen: 24
87.251.36.0/24 maxlen: 24
87.251.34.0/24 maxlen: 24
87.251.35.0/24 maxlen: 24
87.251.37.0/24 maxlen: 24
87.251.38.0/24 maxlen: 24
213.136.0.0/19 maxlen: 24
213.136.0.0/24 maxlen: 24
213.136.1.0/24 maxlen: 24
213.136.4.0/24 maxlen: 24
213.136.2.0/24 maxlen: 24
213.136.3.0/24 maxlen: 24
213.136.5.0/24 maxlen: 24
213.136.7.0/24 maxlen: 24
213.136.8.0/24 maxlen: 24
213.136.6.0/24 maxlen: 24
213.136.11.0/24 maxlen: 24
213.136.9.0/24 maxlen: 24
213.136.10.0/24 maxlen: 24
213.136.12.0/24 maxlen: 24
213.136.14.0/24 maxlen: 24
213.136.15.0/24 maxlen: 24
213.136.13.0/24 maxlen: 24
213.136.16.0/24 maxlen: 24
213.136.17.0/24 maxlen: 24
213.136.23.0/24 maxlen: 24
213.136.24.0/24 maxlen: 24
213.136.18.0/24 maxlen: 24
213.136.19.0/24 maxlen: 24
213.136.21.0/24 maxlen: 24
213.136.22.0/24 maxlen: 24
213.136.20.0/24 maxlen: 24
213.136.25.0/24 maxlen: 24
213.136.26.0/24 maxlen: 24
213.136.28.0/24 maxlen: 24
213.136.29.0/24 maxlen: 24
213.136.27.0/24 maxlen: 24
213.136.30.0/24 maxlen: 24
213.136.31.0/24 maxlen: 24
185.62.16.0/22 maxlen: 24
185.62.16.0/24 maxlen: 24
185.62.17.0/24 maxlen: 24
185.62.19.0/24 maxlen: 24
185.62.18.0/24 maxlen: 24
213.154.243.0/24 maxlen: 24
213.154.244.0/24 maxlen: 24
213.154.241.0/24 maxlen: 24
213.154.242.0/24 maxlen: 24
213.154.246.0/24 maxlen: 24
213.154.245.0/24 maxlen: 24
213.154.247.0/24 maxlen: 24
213.154.250.0/24 maxlen: 24
213.154.251.0/24 maxlen: 24
213.154.248.0/24 maxlen: 24
213.154.249.0/24 maxlen: 24
213.154.253.0/24 maxlen: 24
213.154.252.0/24 maxlen: 24
213.154.255.0/24 maxlen: 24
213.154.254.0/24 maxlen: 24
2001:7b8::/29 maxlen: 48
2001:7bf::/48 maxlen: 48
2001:7be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a6:59:cd:a6:2d:6e:60:7b:9f:51:a9:f5:34:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6fa581923f2350258ae4087a4d723cb4ebdd5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:70:fd:bc:19:38:03:06:b2:04:47:38:cf:
63:62:5c:ac:b6:82:e2:65:ea:89:28:70:86:fe:06:
98:23:60:cc:69:0e:21:99:fa:c7:63:21:df:75:21:
b5:14:90:76:a2:31:c8:4d:b3:66:10:ee:f0:b4:57:
79:c9:3a:05:43:71:d3:3e:cb:9e:e6:ff:e3:69:fa:
74:d5:e4:90:bf:28:19:72:79:42:d0:7b:ba:cc:89:
f1:36:f3:30:1c:63:29:68:7c:4e:b6:db:c6:a0:f0:
89:74:64:6d:2d:ff:6f:80:ab:c9:1b:17:23:fd:d4:
44:41:04:5b:30:65:14:34:10:64:7f:15:ab:e9:f2:
61:db:34:eb:45:da:e2:19:78:92:4f:50:bc:d9:51:
b1:79:27:da:63:bb:20:94:c0:dc:7c:60:85:d5:0c:
c6:aa:73:5f:bf:be:dd:ba:2a:c6:e4:25:2d:33:9e:
9e:c2:ff:27:9f:8a:64:6a:0b:8b:6f:aa:de:00:38:
d4:3b:82:5f:e0:f4:5a:10:18:7e:1a:f1:a1:f7:3e:
ea:ea:58:23:e4:36:3d:eb:ef:08:0a:10:9d:8d:06:
05:60:13:b9:8b:be:16:a2:fa:a4:50:10:5c:e6:29:
14:43:29:ca:9b:a5:d3:4a:b7:7a:20:41:af:94:64:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FA:58:19:23:F2:35:02:58:AE:40:87:A4:D7:23:CB:4E:BD:D5:E2
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/5vpYGSPyNQJYrkCHpNcjy0691eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.32.0/19
185.62.16.0/22
193.109.122.0/24
212.72.232.0-212.72.255.255
212.114.96.0/19
213.136.0.0/19
213.154.224.0/19
IPv6:
2001:7b8::/29
Signature Algorithm: sha256WithRSAEncryption
2a:47:ef:10:9e:34:c8:ac:61:75:e1:06:ad:4e:e3:43:72:19:
df:c6:e7:aa:88:a4:42:ee:0c:25:96:d3:e5:d0:36:ee:1f:08:
31:81:ba:22:7b:cb:23:42:b2:ee:00:37:fa:a3:ce:64:51:87:
f4:58:e8:ec:7d:08:c6:fe:40:a0:a6:4a:07:2f:ab:c9:fc:8a:
c4:ee:5a:a0:ba:d6:f9:15:b0:44:d3:c7:12:7a:f7:74:4f:2a:
96:3c:84:8e:7b:af:44:1f:86:c6:e5:b5:f8:d9:96:94:d2:80:
7d:6b:c4:e4:7b:6e:60:8a:a1:a3:ef:4d:12:de:43:b9:2a:c0:
ae:8d:ce:5a:a4:d4:7b:1a:1f:1e:81:6d:bc:0a:ec:4e:ec:6b:
9c:ac:74:74:e9:45:10:f6:53:c1:de:1c:00:0c:14:2e:b0:bc:
f4:b6:05:a1:7b:23:fe:11:7c:6f:29:4b:fc:60:50:77:ec:cf:
bb:76:5d:20:4e:fe:cd:a5:f8:c0:72:29:e9:37:0b:d8:4f:8e:
8b:85:0a:6e:ac:b3:72:03:cb:7f:56:1f:df:dd:37:42:1b:87:
c2:ea:a9:c1:ad:d5:25:2e:62:7b:0a:b9:c6:ad:a7:89:4a:56:
57:53:8c:e7:f0:04:3c:1b:c7:ff:0f:f3:67:16:70:e0:e9:db:
d3:80:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:19:32 2024 by rpki-client on console-ams.rpki-client.org