Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/tmuaHvhAnvCikWKokNa5tHYSdzc.roa
File: tmuaHvhAnvCikWKokNa5tHYSdzc.roa (raw, json)
Hash identifier: pjLWo0wpEzGpIZFPgcSv47yOWZTxlT82m5AHj3pypCg=
Subject key identifier: B6:6B:9A:1E:F8:40:9E:F0:A2:91:62:A8:90:D6:B9:B4:76:12:77:37
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 018FB500D867ABDAB28E7E4965C4BEF73269
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/tmuaHvhAnvCikWKokNa5tHYSdzc.roa
Signing time: Sun 26 May 2024 13:04:42 +0000
ROA not before: Sun 26 May 2024 13:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 5.134.192.0/21 maxlen: 32
31.7.64.0/20 maxlen: 32
31.7.64.0/21 maxlen: 32
31.7.71.0/24 maxlen: 32
31.7.72.0/21 maxlen: 32
31.7.72.0/24 maxlen: 32
31.7.73.0/24 maxlen: 32
31.7.74.0/24 maxlen: 32
31.7.75.0/24 maxlen: 32
31.7.76.0/24 maxlen: 32
31.7.77.0/24 maxlen: 32
31.7.78.0/24 maxlen: 32
31.7.79.0/24 maxlen: 32
31.25.128.0/21 maxlen: 32
37.156.8.0/21 maxlen: 32
37.156.8.0/22 maxlen: 32
37.156.12.0/24 maxlen: 24
37.156.13.0/24 maxlen: 24
37.156.14.0/24 maxlen: 24
37.156.15.0/24 maxlen: 24
37.156.144.0/22 maxlen: 32
37.156.144.0/24 maxlen: 32
37.156.145.0/24 maxlen: 32
37.156.146.0/24 maxlen: 32
37.156.147.0/24 maxlen: 32
46.143.0.0/17 maxlen: 32
46.245.64.0/18 maxlen: 32
46.245.64.0/22 maxlen: 32
46.245.64.0/24 maxlen: 32
46.245.65.0/24 maxlen: 32
46.245.66.0/24 maxlen: 32
46.245.67.0/24 maxlen: 32
46.245.68.0/22 maxlen: 32
46.245.68.0/24 maxlen: 32
46.245.69.0/24 maxlen: 32
46.245.70.0/24 maxlen: 32
46.245.71.0/24 maxlen: 32
46.245.72.0/22 maxlen: 32
46.245.72.0/24 maxlen: 32
46.245.73.0/24 maxlen: 32
46.245.74.0/24 maxlen: 32
46.245.75.0/24 maxlen: 32
46.245.76.0/22 maxlen: 32
46.245.76.0/24 maxlen: 32
46.245.77.0/24 maxlen: 32
46.245.78.0/24 maxlen: 32
46.245.79.0/24 maxlen: 32
46.245.80.0/22 maxlen: 32
46.245.80.0/24 maxlen: 32
46.245.81.0/24 maxlen: 32
46.245.82.0/24 maxlen: 32
46.245.83.0/24 maxlen: 32
46.245.84.0/22 maxlen: 32
46.245.84.0/24 maxlen: 32
46.245.85.0/24 maxlen: 32
46.245.86.0/24 maxlen: 32
46.245.87.0/24 maxlen: 32
46.245.88.0/22 maxlen: 32
46.245.88.0/24 maxlen: 32
46.245.89.0/24 maxlen: 32
46.245.90.0/24 maxlen: 32
46.245.91.0/24 maxlen: 32
46.245.92.0/22 maxlen: 32
46.245.92.0/24 maxlen: 32
46.245.93.0/24 maxlen: 32
46.245.94.0/24 maxlen: 32
46.245.95.0/24 maxlen: 32
46.245.96.0/22 maxlen: 32
46.245.96.0/24 maxlen: 32
46.245.97.0/24 maxlen: 32
46.245.98.0/24 maxlen: 32
46.245.99.0/24 maxlen: 32
46.245.100.0/22 maxlen: 32
46.245.100.0/24 maxlen: 32
46.245.101.0/24 maxlen: 32
46.245.104.0/22 maxlen: 32
46.245.108.0/22 maxlen: 32
46.245.112.0/22 maxlen: 32
46.245.116.0/22 maxlen: 32
46.245.120.0/22 maxlen: 32
46.245.124.0/22 maxlen: 32
77.238.104.0/21 maxlen: 32
77.238.104.0/22 maxlen: 32
77.238.108.0/24 maxlen: 24
77.238.109.0/24 maxlen: 24
77.238.110.0/24 maxlen: 24
77.238.111.0/24 maxlen: 24
77.238.120.0/22 maxlen: 32
78.110.124.0/22 maxlen: 32
78.110.124.0/23 maxlen: 32
78.110.126.0/23 maxlen: 32
79.127.0.0/17 maxlen: 32
85.198.28.0/22 maxlen: 32
85.198.28.0/23 maxlen: 32
85.198.30.0/23 maxlen: 32
89.41.40.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
93.118.180.0/22 maxlen: 32
93.118.180.0/24 maxlen: 24
109.122.224.0/20 maxlen: 32
128.65.176.0/20 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
176.65.255.0/24 maxlen: 32
178.22.120.0/21 maxlen: 32
178.216.248.0/22 maxlen: 32
178.216.248.0/24 maxlen: 32
178.216.249.0/24 maxlen: 32
178.216.250.0/24 maxlen: 32
178.216.251.0/24 maxlen: 32
185.49.84.0/22 maxlen: 32
185.98.112.0/22 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
185.112.32.0/21 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
185.141.168.0/24 maxlen: 32
185.141.169.0/24 maxlen: 32
185.141.170.0/24 maxlen: 32
185.141.171.0/24 maxlen: 32
185.141.212.0/24 maxlen: 32
185.141.213.0/24 maxlen: 32
185.141.214.0/24 maxlen: 32
185.141.215.0/24 maxlen: 32
185.147.160.0/24 maxlen: 32
185.147.161.0/24 maxlen: 32
185.147.162.0/24 maxlen: 32
185.147.163.0/24 maxlen: 32
188.0.240.0/23 maxlen: 32
212.33.192.0/22 maxlen: 32
212.33.196.0/22 maxlen: 32
212.33.200.0/22 maxlen: 32
212.33.204.0/22 maxlen: 32
2a05:1a00::/26 maxlen: 128
2a05:1a10::/29 maxlen: 128
2a06:5484::/30 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b5:00:d8:67:ab:da:b2:8e:7e:49:65:c4:be:f7:32:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: May 26 13:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b66b9a1ef8409ef0a29162a890d6b9b476127737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:d8:99:f0:d9:aa:97:a6:54:f4:4d:56:1e:
29:6e:78:0d:c4:cf:a0:4b:41:53:3c:11:c5:07:76:
87:72:a0:6d:74:f6:1e:66:c1:82:4c:b4:99:62:16:
55:65:1b:49:20:f8:8e:ba:ec:5d:47:98:ca:89:a4:
e9:63:d7:ef:81:38:56:62:66:e4:af:0b:ae:f4:0b:
60:59:9c:0d:75:e0:1f:f9:b7:a7:a6:1a:72:db:ea:
18:46:70:22:8c:87:15:eb:23:d8:76:46:97:d0:bc:
d8:77:97:5a:32:33:7d:2b:8f:5b:e5:3d:f1:a8:5c:
4c:8a:44:6c:1b:f7:c3:d3:08:48:13:3d:27:65:76:
7d:06:d6:e9:fa:b9:84:cd:fa:99:cf:3a:d7:e1:8a:
40:ab:9e:bb:9a:a5:28:a9:4b:53:d9:11:8f:e8:9c:
88:d3:73:8d:26:28:b5:17:d2:07:db:c6:8c:34:fd:
f7:dc:09:d2:91:8e:78:ad:bd:17:14:35:2b:9b:77:
6b:1b:b8:1f:cb:a1:30:88:58:a4:89:1e:2d:bb:8d:
e9:f5:8e:12:0c:6b:08:f7:ce:e8:b6:50:d5:3d:b5:
77:93:02:0d:a1:28:6c:ce:2a:f6:57:af:9a:1a:30:
87:7e:d4:a9:83:62:d9:ba:4e:42:59:b8:c4:af:b7:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:9A:1E:F8:40:9E:F0:A2:91:62:A8:90:D6:B9:B4:76:12:77:37
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/tmuaHvhAnvCikWKokNa5tHYSdzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
31.7.64.0/20
31.25.128.0/21
37.156.8.0/21
37.156.144.0/22
46.143.0.0/17
46.245.64.0/18
77.238.104.0/21
77.238.120.0/22
78.110.124.0/22
79.127.0.0/17
85.198.28.0/22
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
109.122.224.0/20
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
178.216.248.0/22
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.168.0/22
185.141.212.0/22
185.147.160.0/22
188.0.240.0/23
212.33.192.0/20
IPv6:
2a05:1a00::/26
2a06:5484::/30
Signature Algorithm: sha256WithRSAEncryption
23:72:66:92:de:c9:12:f4:46:6c:bb:f2:57:5a:d1:c5:4f:a4:
d4:fc:8a:64:96:a5:90:d4:1d:bb:12:8a:68:7e:7e:b0:a7:f2:
ab:3e:f2:c0:e7:af:84:b8:ae:20:b5:73:f3:a9:cc:90:e0:cb:
f8:f9:b2:29:96:f9:22:ec:64:4a:64:26:f4:ae:8a:c8:96:5b:
32:31:3c:43:e2:5f:ba:93:fb:a2:5c:1e:f6:b1:f2:23:12:3d:
93:e2:5b:dd:6b:5a:20:f6:18:75:55:cf:05:31:d3:cf:9c:97:
62:af:56:13:10:dc:06:39:d1:9a:33:a3:d2:a2:9e:49:9d:3d:
6e:d5:84:11:fa:38:67:16:ad:71:40:92:77:b6:fe:f3:1a:43:
66:c3:71:dc:22:29:cd:f4:18:f3:1e:a3:8a:03:c3:bc:25:34:
28:97:e5:14:18:f0:69:bd:e2:50:e9:53:31:5f:fc:55:2a:87:
67:c5:1b:8f:f6:47:87:d3:63:66:49:26:1a:cb:d1:a4:a4:db:
ca:65:37:fd:fb:a4:ad:9c:91:24:38:32:1d:c5:1d:12:5c:93:
fb:91:b3:45:75:41:e6:cc:06:24:11:52:74:2c:e2:c3:ed:80:
4f:1a:a7:d7:13:fd:78:80:c0:04:2c:2b:95:0b:f7:6c:35:dc:
98:6c:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:52:02 2024 by rpki-client on console-ams.rpki-client.org