Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/GeLwHxO4EAL1FlWhEtlbUn7-zuM.roa
File: GeLwHxO4EAL1FlWhEtlbUn7-zuM.roa (raw, json)
Hash identifier: 5hqUhRRBeYvm1djZL7h4FzzA1r5q2za5MRbyAs5cSyQ=
Subject key identifier: 19:E2:F0:1F:13:B8:10:02:F5:16:55:A1:12:D9:5B:52:7E:FE:CE:E3
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 018CC9BCF5F41CCA989DE4D946B98FD40413
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/GeLwHxO4EAL1FlWhEtlbUn7-zuM.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44558
IP address blocks: 82.145.233.0/24 maxlen: 24
82.145.232.0/24 maxlen: 24
82.145.231.0/24 maxlen: 24
82.145.230.0/24 maxlen: 24
82.145.229.0/24 maxlen: 24
82.145.228.0/24 maxlen: 24
82.145.227.0/24 maxlen: 24
82.145.239.0/24 maxlen: 24
82.145.238.0/24 maxlen: 24
82.145.237.0/24 maxlen: 24
82.145.236.0/24 maxlen: 24
82.145.235.0/24 maxlen: 24
82.145.234.0/24 maxlen: 24
82.145.240.0/24 maxlen: 24
82.145.246.0/24 maxlen: 24
82.145.245.0/24 maxlen: 24
82.145.244.0/24 maxlen: 24
82.145.243.0/24 maxlen: 24
82.145.242.0/24 maxlen: 24
82.145.241.0/24 maxlen: 24
82.145.253.0/24 maxlen: 24
82.145.252.0/24 maxlen: 24
82.145.251.0/24 maxlen: 24
82.145.250.0/24 maxlen: 24
82.145.249.0/24 maxlen: 24
82.145.248.0/24 maxlen: 24
82.145.247.0/24 maxlen: 24
82.145.255.0/24 maxlen: 24
82.145.254.0/24 maxlen: 24
94.78.82.0/24 maxlen: 24
94.78.81.0/24 maxlen: 24
94.78.80.0/24 maxlen: 24
94.78.79.0/24 maxlen: 24
94.78.85.0/24 maxlen: 24
94.78.84.0/24 maxlen: 24
94.78.83.0/24 maxlen: 24
94.78.89.0/24 maxlen: 24
94.78.88.0/24 maxlen: 24
94.78.87.0/24 maxlen: 24
94.78.86.0/24 maxlen: 24
94.78.91.0/24 maxlen: 24
94.78.90.0/24 maxlen: 24
94.78.96.0/24 maxlen: 24
94.78.95.0/24 maxlen: 24
94.78.94.0/24 maxlen: 24
94.78.93.0/24 maxlen: 24
94.78.92.0/24 maxlen: 24
94.78.98.0/24 maxlen: 24
94.78.97.0/24 maxlen: 24
94.78.103.0/24 maxlen: 24
94.78.102.0/24 maxlen: 24
94.78.101.0/24 maxlen: 24
94.78.100.0/24 maxlen: 24
94.78.99.0/24 maxlen: 24
94.78.105.0/24 maxlen: 24
94.78.104.0/24 maxlen: 24
94.78.110.0/24 maxlen: 24
94.78.109.0/24 maxlen: 24
94.78.108.0/24 maxlen: 24
94.78.107.0/24 maxlen: 24
94.78.106.0/24 maxlen: 24
94.78.112.0/24 maxlen: 24
94.78.111.0/24 maxlen: 24
94.78.117.0/24 maxlen: 24
94.78.116.0/24 maxlen: 24
94.78.115.0/24 maxlen: 24
94.78.114.0/24 maxlen: 24
94.78.113.0/24 maxlen: 24
94.78.118.0/24 maxlen: 24
94.78.124.0/24 maxlen: 24
94.78.123.0/24 maxlen: 24
94.78.122.0/24 maxlen: 24
94.78.121.0/24 maxlen: 24
94.78.120.0/24 maxlen: 24
94.78.119.0/24 maxlen: 24
94.78.125.0/24 maxlen: 24
82.145.224.0/19 maxlen: 19
82.145.225.0/24 maxlen: 24
82.145.224.0/24 maxlen: 24
94.78.127.0/24 maxlen: 24
94.78.126.0/24 maxlen: 24
82.145.226.0/24 maxlen: 24
185.152.88.0/22 maxlen: 22
94.78.64.0/24 maxlen: 24
185.152.88.0/24 maxlen: 24
185.152.91.0/24 maxlen: 24
185.152.89.0/24 maxlen: 24
94.78.67.0/24 maxlen: 24
94.78.68.0/24 maxlen: 24
94.78.66.0/24 maxlen: 24
94.78.65.0/24 maxlen: 24
94.78.71.0/24 maxlen: 24
94.78.70.0/24 maxlen: 24
94.78.69.0/24 maxlen: 24
94.78.64.0/18 maxlen: 18
94.78.75.0/24 maxlen: 24
94.78.74.0/24 maxlen: 24
94.78.73.0/24 maxlen: 24
94.78.72.0/24 maxlen: 24
94.78.78.0/24 maxlen: 24
94.78.77.0/24 maxlen: 24
94.78.76.0/24 maxlen: 24
185.110.242.0/24 maxlen: 24
185.110.241.0/24 maxlen: 24
185.110.243.0/24 maxlen: 24
185.110.240.0/22 maxlen: 22
185.110.240.0/24 maxlen: 24
92.63.0.0/24 maxlen: 24
92.63.4.0/24 maxlen: 24
92.63.3.0/24 maxlen: 24
92.63.2.0/24 maxlen: 24
92.63.1.0/24 maxlen: 24
92.63.0.0/20 maxlen: 20
92.63.7.0/24 maxlen: 24
92.63.6.0/24 maxlen: 24
92.63.5.0/24 maxlen: 24
92.63.11.0/24 maxlen: 24
92.63.10.0/24 maxlen: 24
92.63.9.0/24 maxlen: 24
92.63.8.0/24 maxlen: 24
92.63.14.0/24 maxlen: 24
92.63.13.0/24 maxlen: 24
92.63.12.0/24 maxlen: 24
92.63.15.0/24 maxlen: 24
93.182.64.0/24 maxlen: 24
93.182.64.0/18 maxlen: 18
93.182.71.0/24 maxlen: 24
93.182.70.0/24 maxlen: 24
93.182.69.0/24 maxlen: 24
93.182.68.0/24 maxlen: 24
93.182.67.0/24 maxlen: 24
93.182.66.0/24 maxlen: 24
93.182.65.0/24 maxlen: 24
93.182.78.0/24 maxlen: 24
93.182.77.0/24 maxlen: 24
93.182.76.0/24 maxlen: 24
93.182.75.0/24 maxlen: 24
93.182.74.0/24 maxlen: 24
93.182.73.0/24 maxlen: 24
93.182.72.0/24 maxlen: 24
93.182.85.0/24 maxlen: 24
93.182.84.0/24 maxlen: 24
93.182.83.0/24 maxlen: 24
93.182.82.0/24 maxlen: 24
93.182.81.0/24 maxlen: 24
93.182.80.0/24 maxlen: 24
93.182.79.0/24 maxlen: 24
93.182.91.0/24 maxlen: 24
93.182.90.0/24 maxlen: 24
93.182.89.0/24 maxlen: 24
93.182.88.0/24 maxlen: 24
93.182.87.0/24 maxlen: 24
93.182.86.0/24 maxlen: 24
93.182.92.0/24 maxlen: 24
93.182.98.0/24 maxlen: 24
93.182.97.0/24 maxlen: 24
93.182.96.0/24 maxlen: 24
93.182.95.0/24 maxlen: 24
93.182.94.0/24 maxlen: 24
93.182.93.0/24 maxlen: 24
93.182.99.0/24 maxlen: 24
93.182.105.0/24 maxlen: 24
93.182.104.0/24 maxlen: 24
93.182.103.0/24 maxlen: 24
93.182.102.0/24 maxlen: 24
93.182.101.0/24 maxlen: 24
93.182.100.0/24 maxlen: 24
93.182.112.0/24 maxlen: 24
93.182.111.0/24 maxlen: 24
93.182.110.0/24 maxlen: 24
93.182.109.0/24 maxlen: 24
93.182.108.0/24 maxlen: 24
93.182.107.0/24 maxlen: 24
93.182.108.0/22 maxlen: 22
93.182.106.0/24 maxlen: 24
93.182.113.0/24 maxlen: 24
93.182.118.0/24 maxlen: 24
93.182.117.0/24 maxlen: 24
93.182.116.0/24 maxlen: 24
93.182.115.0/24 maxlen: 24
93.182.114.0/24 maxlen: 24
93.182.120.0/24 maxlen: 24
93.182.119.0/24 maxlen: 24
93.182.125.0/24 maxlen: 24
93.182.124.0/24 maxlen: 24
93.182.123.0/24 maxlen: 24
93.182.122.0/24 maxlen: 24
93.182.121.0/24 maxlen: 24
93.182.127.0/24 maxlen: 24
93.182.126.0/24 maxlen: 24
2a03:81e0::/32 maxlen: 32
2a07:7580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f5:f4:1c:ca:98:9d:e4:d9:46:b9:8f:d4:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19e2f01f13b81002f51655a112d95b527efecee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:4b:0a:91:6c:5a:eb:69:5a:a8:7a:6d:6a:
6b:9a:63:11:6a:1c:1a:26:dc:07:23:4c:0e:e7:01:
ba:12:32:c6:88:db:84:8f:be:17:24:81:36:4e:dc:
00:ea:ba:4b:d4:6c:31:83:8c:28:72:dc:60:9a:cd:
7f:dd:e3:18:7a:74:b9:a4:9b:c6:3c:48:0d:75:87:
40:20:4c:d1:60:63:2e:95:17:72:39:43:51:b8:3d:
e1:52:9c:72:02:74:b1:6f:23:10:cb:2b:dc:8f:a7:
93:f1:f5:fb:c7:55:77:d8:48:ce:fc:1a:8e:b4:05:
1c:43:3a:2b:ba:76:a6:87:9b:90:2e:bd:7b:22:de:
9d:9b:4e:b7:2c:01:bd:0c:b1:ce:1a:28:3f:4a:bf:
ec:9e:bc:d6:95:53:9e:b0:fa:ed:4e:51:cb:41:bb:
ef:ac:89:b8:54:2b:4a:2b:c0:26:2b:bc:63:97:aa:
cd:91:65:b3:50:bc:40:5c:f3:e2:88:9c:34:55:09:
f0:89:26:60:75:94:89:21:f3:03:3d:f5:6a:b3:6e:
e5:9e:8e:0d:22:d1:4e:bc:d7:b7:8f:99:ca:01:f8:
0b:3e:97:9a:31:77:2e:c3:61:88:43:7b:c3:85:91:
f9:e5:00:67:ff:03:d0:0e:00:6a:18:a1:c1:6f:d2:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:F0:1F:13:B8:10:02:F5:16:55:A1:12:D9:5B:52:7E:FE:CE:E3
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/GeLwHxO4EAL1FlWhEtlbUn7-zuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.145.224.0/19
92.63.0.0/20
93.182.64.0/18
94.78.64.0/18
185.110.240.0/22
185.152.88.0/22
IPv6:
2a03:81e0::/32
2a07:7580::/29
Signature Algorithm: sha256WithRSAEncryption
8b:ce:0a:53:6c:58:f3:96:27:54:41:a1:36:43:0b:ab:d3:9b:
23:24:89:f7:36:47:c2:de:a1:7b:99:d9:30:71:b6:f2:dc:98:
40:ee:de:31:99:54:b8:48:4c:e9:81:9a:3a:13:1e:ac:d3:73:
d0:1f:48:ce:a3:9a:93:4a:30:2d:ce:00:a7:19:49:e0:fd:14:
91:f1:df:4e:d4:5f:f5:25:6d:ad:47:d7:f3:9e:86:7c:df:16:
d1:19:03:0b:13:38:56:c9:81:3c:68:18:f8:94:31:c7:48:39:
a6:66:b6:b2:eb:9c:d0:e3:59:14:75:0d:de:b2:3a:1b:da:77:
72:7b:4a:f6:63:09:d8:46:09:19:eb:d9:ca:7f:ab:8e:fa:64:
ec:a9:fc:2a:1f:4f:da:69:6d:ee:f8:21:cb:0c:e0:d9:1e:7e:
b1:ac:32:43:22:45:89:e2:bf:14:c1:37:90:71:be:fe:a5:61:
1d:1f:85:f6:93:25:3f:76:22:fb:79:51:ab:48:1a:b0:fb:67:
45:9f:9f:e0:5c:f1:3f:74:f5:8a:57:33:7a:6c:89:88:a7:52:
00:7c:96:b0:ab:0e:dc:d4:91:4f:ae:d4:4c:cd:79:a2:fe:ec:
b6:80:f6:a2:0c:a2:d1:ad:22:93:ff:b5:3f:42:26:7e:89:5f:
21:bb:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:33:00 2024 by rpki-client on console-ams.rpki-client.org