Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/v2uJId8PAw3WVyJlQ3QZmwVHqYg.roa
File: v2uJId8PAw3WVyJlQ3QZmwVHqYg.roa (raw, json)
Hash identifier: NGR5pgLDCmi68kp/ltURnzWBJOirmGq2a/lr9NRBgWs=
Subject key identifier: BF:6B:89:21:DF:0F:03:0D:D6:57:22:65:43:74:19:9B:05:47:A9:88
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01909142E4A065874639CA010BB950277237
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/v2uJId8PAw3WVyJlQ3QZmwVHqYg.roa
Signing time: Mon 08 Jul 2024 07:33:18 +0000
ROA not before: Mon 08 Jul 2024 07:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35470
IP address blocks: 31.3.96.0/21 maxlen: 24
37.34.48.0/21 maxlen: 24
37.230.96.0/21 maxlen: 24
79.170.88.0/21 maxlen: 24
81.4.84.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
85.10.185.0/24 maxlen: 24
85.10.188.0/22 maxlen: 22
85.222.224.0/21 maxlen: 24
85.222.224.0/22 maxlen: 24
89.31.96.0/21 maxlen: 24
89.31.98.0/23 maxlen: 24
93.191.128.0/21 maxlen: 24
93.191.134.0/24 maxlen: 24
141.138.192.0/20 maxlen: 24
141.138.207.0/24 maxlen: 24
178.18.80.0/20 maxlen: 24
185.3.208.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.96.4.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
193.138.204.0/22 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
2a02:348::/32 maxlen: 32
2a02:348:3::/48 maxlen: 48
2a02:348:14::/48 maxlen: 48
2a02:348:15::/48 maxlen: 48
2a02:348:1e::/48 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:32::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
2a02:348:37::/48 maxlen: 48
2a02:348:38::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:3c::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:4c::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:59::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:60::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:ac::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
2a02:348:c8::/48 maxlen: 48
2a02:348:5e6::/48 maxlen: 48
2a02:348:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:42:e4:a0:65:87:46:39:ca:01:0b:b9:50:27:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 8 07:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf6b8921df0f030dd65722654374199b0547a988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:c5:05:46:c0:99:91:9c:56:87:22:be:91:
5e:28:30:05:21:b9:de:2b:83:04:7b:1e:ba:7b:da:
57:fa:c6:f6:60:28:a9:66:ef:5e:73:b5:e4:97:97:
94:06:2f:75:fd:16:6a:69:39:a9:ac:52:55:c3:ce:
7f:04:1f:e8:04:75:99:8b:81:80:36:52:d6:9c:e1:
27:b5:98:cf:da:bd:b3:75:e0:74:47:4e:f9:4e:6d:
42:06:04:a9:2f:6b:86:be:92:34:3c:f7:8f:38:78:
0d:48:43:71:34:6d:4b:28:d6:9e:ec:c2:e0:b4:e2:
31:82:05:d5:a7:92:eb:e4:7d:56:99:b0:a1:aa:b3:
1d:c5:b1:c0:4d:5a:03:66:ce:ad:a0:42:d2:30:ee:
eb:30:81:4f:88:9b:94:0d:52:3b:86:cd:bb:0e:a2:
77:70:03:15:c9:05:24:a5:03:5d:12:48:67:0e:72:
65:76:14:c8:af:77:d5:df:17:68:e2:5c:35:4a:59:
20:13:7c:e8:e2:0a:56:01:f1:95:2f:c6:85:b1:8b:
e5:e8:c7:ef:17:29:96:45:8e:55:e9:f0:57:86:0b:
8e:27:cf:23:dc:55:7c:f8:54:a7:f2:28:0a:74:a7:
c0:bf:4b:fd:72:b2:85:f2:a2:f8:32:9f:31:ba:15:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6B:89:21:DF:0F:03:0D:D6:57:22:65:43:74:19:9B:05:47:A9:88
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/v2uJId8PAw3WVyJlQ3QZmwVHqYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.96.0/21
37.34.48.0/21
37.230.96.0/21
79.170.88.0/21
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/21
89.31.96.0/21
93.191.128.0/21
141.138.192.0/20
178.18.80.0/20
185.3.208.0/22
185.21.188.0/22
185.96.4.0/22
185.110.172.0/22
185.110.200.0/22
193.138.204.0/22
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
c9:c1:00:ee:92:e0:87:73:bb:64:76:25:af:bf:9f:a4:0d:27:
bf:c3:72:67:f9:6d:0d:33:cd:68:77:69:94:3a:ec:75:e3:28:
d3:b7:92:17:b7:61:4c:66:42:46:c5:12:ba:5d:83:a6:86:3f:
9f:5b:4d:85:9d:36:38:fe:6f:f7:19:f4:6e:6b:45:d1:d7:dd:
f7:5f:be:6a:02:05:e3:63:0a:a6:a5:69:97:4b:f4:b6:d4:b4:
8a:4b:41:0f:f6:3d:de:6e:b1:fe:6b:b2:ca:68:de:8f:71:38:
73:60:76:1f:29:30:b8:9e:e5:25:d1:f0:56:e0:7b:00:8a:ba:
80:95:a1:de:bc:18:24:81:18:0d:f9:a6:48:0b:b0:5d:59:47:
c0:87:b9:3b:88:c5:70:5e:13:b3:70:31:3a:27:b2:4c:3d:7d:
66:92:ac:14:12:20:25:2c:90:4a:a1:ad:ca:31:b8:a1:d1:d3:
ce:ba:ab:b5:53:fc:c2:78:02:67:60:90:ab:d0:67:2b:cb:ee:
76:02:76:ca:fd:25:23:ae:d7:55:c4:32:55:9f:bc:c2:1a:d3:
22:13:20:61:6e:89:bb:d1:20:c9:ba:84:27:bd:82:98:7b:d5:
c1:4e:d0:06:26:26:07:f6:20:aa:bd:23:b4:1e:ec:0a:41:b3:
a9:ef:ff:95
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAZCRQuSgZYdGOcoBC7lQJ3I3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjQwNzA4MDczMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjZiODkyMWRmMGYwMzBkZDY1NzIyNjU0Mzc0MTk5YjA1NDdhOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8zFBUbAmZGcVocivpFeKDAFIbne
K4MEex66e9pX+sb2YCipZu9ec7Xkl5eUBi91/RZqaTmprFJVw85/BB/oBHWZi4GA
NlLWnOEntZjP2r2zdeB0R075Tm1CBgSpL2uGvpI0PPePOHgNSENxNG1LKNae7MLg
tOIxggXVp5Lr5H1WmbChqrMdxbHATVoDZs6toELSMO7rMIFPiJuUDVI7hs27DqJ3
cAMVyQUkpQNdEkhnDnJldhTIr3fV3xdo4lw1SlkgE3zo4gpWAfGVL8aFsYvl6Mfv
FymWRY5V6fBXhguOJ88j3FV8+FSn8igKdKfAv0v9crKF8qL4Mp8xuhU9iQIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFL9riSHfDwMN1lciZUN0GZsFR6mIMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvdjJ1SklkOFBBdzNXVnlKbFEzUVptd1ZIcVlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTCBpwQCAAEwgaADBAMf
A2ADBAMlIjADBAMl5mADBANPqlgDBAJRBFQDBANTYMgwDAMEAlNg1AMEBVNgwDAM
AwQCU2DsAwQDU2DwAwQCU2D8AwQCVQqwAwQDVQq4AwQDVd7gAwQDWR9gAwQDXb+A
AwQEjYrAAwQEshJQAwQCuQPQAwQCuRW8AwQCuWAEAwQCuW6sAwQCuW7IAwQCwYrM
AwQAwjzPAwQD1bvwMA0EAgACMAcDBQAqAgNIMA0GCSqGSIb3DQEBCwUAA4IBAQDJ
wQDukuCHc7tkdiWvv5+kDSe/w3Jn+W0NM81od2mUOux14yjTt5IXt2FMZkJGxRK6
XYOmhj+fW02FnTY4/m/3GfRua0XR1933X75qAgXjYwqmpWmXS/S21LSKS0EP9j3e
brH+a7LKaN6PcThzYHYfKTC4nuUl0fBW4HsAirqAlaHevBgkgRgN+aZIC7BdWUfA
h7k7iMVwXhOzcDE6J7JMPX1mkqwUEiAlLJBKoa3KMbih0dPOuqu1U/zCeAJnYJCr
0Gcry+52AnbK/SUjrtdVxDJVn7zCGtMiEyBhbom70SDJuoQnvYKYe9XBTtAGJiYH
9iCqvSO0HuwKQbOp7/+V
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:18:02 2024 by rpki-client on console-fra.rpki-client.org