Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GLhZ6NglMLKV8Vb1uQ2DHXlxVRM.roa
File: GLhZ6NglMLKV8Vb1uQ2DHXlxVRM.roa (raw, json)
Hash identifier: UoIipK/Vl5/w7W4kji9CNMt02vJLXpeYJxow61duv04=
Subject key identifier: 18:B8:59:E8:D8:25:30:B2:95:F1:56:F5:B9:0D:83:1D:79:71:55:13
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018CC9BB2B172B73BEE5A7EB0A5686BDD7FD
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GLhZ6NglMLKV8Vb1uQ2DHXlxVRM.roa
Signing time: Tue 02 Jan 2024 10:32:15 +0000
ROA not before: Tue 02 Jan 2024 10:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35470
IP address blocks: 213.187.240.0/21 maxlen: 24
89.31.98.0/23 maxlen: 24
89.31.96.0/21 maxlen: 24
81.4.84.0/22 maxlen: 24
178.18.80.0/20 maxlen: 24
31.3.96.0/21 maxlen: 24
85.10.188.0/22 maxlen: 22
141.138.192.0/20 maxlen: 24
193.138.204.0/22 maxlen: 24
141.138.207.0/24 maxlen: 24
185.3.208.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
185.110.172.0/22 maxlen: 24
93.191.128.0/21 maxlen: 24
93.191.134.0/24 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
79.170.88.0/21 maxlen: 24
185.96.4.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
37.230.96.0/21 maxlen: 24
194.60.207.0/24 maxlen: 24
37.34.48.0/21 maxlen: 24
85.222.224.0/21 maxlen: 24
85.222.224.0/22 maxlen: 24
2a02:348:59::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:c8::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:1001::/48 maxlen: 48
2a02:348:37::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:15::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:1e::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:32::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:ac::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:5e6::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:38::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:4c::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348::/32 maxlen: 32
2a02:348:60::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:14::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:3::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
2a02:348:3c::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:2b:17:2b:73:be:e5:a7:eb:0a:56:86:bd:d7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 10:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18b859e8d82530b295f156f5b90d831d79715513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:3f:77:6f:ab:a7:6c:88:5f:67:18:31:3b:
62:06:a1:c0:69:6b:f4:43:8b:1c:30:f1:db:d7:c3:
60:66:53:8d:49:2a:c8:26:b2:88:53:bc:91:97:e5:
86:7b:ea:b7:69:4b:0e:e6:e8:c9:3b:e1:25:69:ba:
7a:84:8f:29:2e:8c:a3:26:56:de:6c:7a:ec:86:f6:
47:87:3a:16:c5:75:23:5c:0d:29:55:2c:87:24:2c:
bc:9c:f6:b8:13:d2:58:58:fb:b6:fb:9d:a7:05:72:
e1:db:27:79:0e:cd:23:86:e0:09:c2:70:30:09:4e:
37:9d:f5:88:8c:f5:a5:1c:e3:d4:cd:29:a7:af:ab:
93:78:cc:37:62:9d:7c:0f:17:08:67:2a:45:1d:3e:
a8:65:86:dd:3f:c1:4f:96:27:6b:24:d9:f2:b6:be:
21:e0:fc:c9:46:63:43:ea:63:96:cc:e8:0f:80:dc:
7b:c6:2e:70:67:fb:91:95:0e:05:3e:ff:ef:07:a9:
ed:ec:32:bf:16:77:6d:b1:75:86:e1:7d:b4:48:29:
44:8f:a1:60:27:18:66:94:71:17:8c:06:fb:2b:e2:
c6:0c:e7:82:17:39:44:ca:8a:d0:4f:2e:db:f6:f2:
f7:2e:11:e1:99:d9:aa:6a:30:6b:c3:d9:82:0b:c2:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B8:59:E8:D8:25:30:B2:95:F1:56:F5:B9:0D:83:1D:79:71:55:13
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GLhZ6NglMLKV8Vb1uQ2DHXlxVRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.96.0/21
37.34.48.0/21
37.230.96.0/21
79.170.88.0/21
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/21
89.31.96.0/21
93.191.128.0/21
141.138.192.0/20
178.18.80.0/20
185.3.208.0/22
185.21.188.0/22
185.96.4.0/22
185.110.172.0/22
185.110.200.0/22
193.138.204.0/22
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
14:76:b0:2d:8b:e5:83:f6:56:7e:ba:51:74:bc:82:00:2b:ee:
24:d6:d2:1d:33:c0:d5:1c:b2:fc:40:c8:fe:b5:bf:23:1b:ec:
17:23:8b:eb:10:a7:ea:dc:cb:8e:6a:cd:c3:0b:f6:ed:19:b7:
d9:27:2e:95:91:c6:d0:3e:c2:e3:db:f0:8d:2f:3e:05:99:cb:
cc:d1:00:f4:58:9c:f6:da:f0:2e:43:c6:33:5b:93:cc:5e:28:
8e:f9:5c:88:c4:0e:5b:40:43:6a:df:cf:ef:41:8a:42:63:96:
b3:68:11:c0:b8:2c:81:83:09:fa:87:13:28:e4:ae:76:10:90:
fb:8c:03:3c:96:6e:a8:23:d4:1b:76:32:c1:e1:51:c6:fe:3c:
bc:11:c2:4b:14:30:84:90:c5:de:6e:ff:60:5c:46:f5:08:c2:
b3:05:93:8f:35:87:23:1e:23:0b:ab:1b:df:39:10:90:0b:a8:
ac:d8:06:58:5b:05:24:28:50:83:45:df:41:be:c9:48:e5:3e:
e2:58:a8:f4:14:9e:9a:9d:1c:df:f3:30:84:0b:d6:4c:d4:b9:
ec:47:60:f6:00:01:a5:2f:43:cd:20:f2:06:23:53:3f:4e:09:
69:60:f5:4b:af:4b:ce:4a:07:57:a0:3e:2b:9c:68:85:2f:90:
20:0c:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 06:11:43 2024 by rpki-client on console-ams.rpki-client.org