Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jD9yDSAJbZ9tkwOvZcVPyEFZEdE.roa
File: jD9yDSAJbZ9tkwOvZcVPyEFZEdE.roa (raw, json)
Hash identifier: +QNmvwYeeWI2bnN0ECiYAdoHieiXoLSjGppTQn3EEuU=
Subject key identifier: 8C:3F:72:0D:20:09:6D:9F:6D:93:03:AF:65:C5:4F:C8:41:59:11:D1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018EA8D5A59A885792FDAFCB6F33AC8B009F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jD9yDSAJbZ9tkwOvZcVPyEFZEdE.roa
Signing time: Thu 04 Apr 2024 11:19:17 +0000
ROA not before: Thu 04 Apr 2024 11:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 2.56.117.0/24 maxlen: 24
2.56.118.0/23 maxlen: 24
2.56.120.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
5.180.24.0/24 maxlen: 24
5.180.30.0/24 maxlen: 24
5.180.45.0/24 maxlen: 24
5.180.55.0/24 maxlen: 24
5.253.40.0/23 maxlen: 24
5.253.43.0/24 maxlen: 24
45.9.12.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.128.0/22 maxlen: 24
45.15.140.0/23 maxlen: 24
45.15.142.0/24 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.178.0/23 maxlen: 24
45.15.184.0/22 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/23 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.148.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/21 maxlen: 24
45.86.64.0/23 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/22 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/23 maxlen: 24
45.86.76.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.181.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/23 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/21 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.164.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.192.0/23 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.48.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.56.0/23 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.74.0/24 maxlen: 24
85.208.109.0/24 maxlen: 24
85.208.110.0/24 maxlen: 24
85.209.153.0/24 maxlen: 24
85.209.154.0/24 maxlen: 24
85.209.195.0/24 maxlen: 24
88.218.93.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.230.0/23 maxlen: 24
92.118.232.0/23 maxlen: 24
92.118.234.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
139.28.233.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
141.98.160.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
171.22.109.0/24 maxlen: 24
171.22.110.0/23 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.136.0/23 maxlen: 24
171.22.138.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.106.98.0/23 maxlen: 24
185.153.180.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/23 maxlen: 24
185.166.152.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:d5:a5:9a:88:57:92:fd:af:cb:6f:33:ac:8b:00:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 4 11:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c3f720d20096d9f6d9303af65c54fc8415911d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:f1:4e:f3:6a:79:05:cb:ac:27:6c:26:55:
96:cd:3e:3b:97:df:dd:3d:b7:15:c1:9a:58:7a:94:
20:28:98:a3:33:fd:8b:16:47:d8:3a:1a:ee:ad:1d:
2d:a8:01:96:83:52:10:d3:61:72:db:84:ff:dc:c7:
aa:58:7a:26:8c:f6:c8:45:11:0f:84:cf:38:a8:8f:
b4:c3:97:77:ad:5d:0c:c1:4c:88:79:7f:2c:19:8e:
9f:bd:75:04:57:b4:43:05:98:fd:0b:bd:7b:45:f6:
36:f7:67:50:55:42:f8:3d:fd:eb:58:d2:84:28:7a:
c2:1e:98:84:92:98:56:09:48:ab:cf:a7:85:88:14:
70:74:0b:33:ba:83:84:b0:23:92:dd:3c:54:ff:bb:
ee:d4:e4:e7:21:20:1d:e9:ca:1d:ea:de:19:c8:8d:
0d:68:23:a3:2b:62:be:a9:10:57:03:b2:74:90:16:
9e:26:80:c2:52:24:a9:f4:a3:d4:e2:8b:aa:77:25:
a3:98:9e:04:75:4c:0d:12:b1:0c:3f:90:1f:6a:f5:
64:e9:d8:f4:0d:93:75:6d:79:96:e7:38:0b:88:33:
ab:af:ed:7c:d2:46:c5:3b:cd:a2:69:24:63:af:a6:
03:d4:5c:62:31:6d:5d:38:5f:44:e9:1f:7b:3b:a0:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:72:0D:20:09:6D:9F:6D:93:03:AF:65:C5:4F:C8:41:59:11:D1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jD9yDSAJbZ9tkwOvZcVPyEFZEdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0-2.56.127.255
2.56.172.0-2.56.179.255
5.180.24.0/24
5.180.30.0/24
5.180.45.0/24
5.180.55.0/24
5.253.40.0/23
5.253.43.0/24
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.125.0-45.15.131.255
45.15.140.0-45.15.142.255
45.15.144.0/22
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.178.0/23
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.72.255
45.86.74.0-45.86.79.255
45.88.160.0/22
45.88.168.0/22
45.88.176.0/22
45.88.181.0-45.88.183.255
45.89.96.0/24
45.89.98.0/24
45.89.105.0-45.89.111.255
45.89.196.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
45.128.48.0-45.128.58.255
45.128.72.0/22
85.208.109.0-85.208.110.255
85.209.153.0-85.209.154.255
85.209.195.0/24
88.218.93.0/24
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
139.28.233.0-139.28.235.255
141.98.160.0/21
171.22.109.0-171.22.138.255
185.106.97.0-185.106.99.255
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.203.4.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:f5:04:08:d9:da:23:57:f4:c7:25:b6:3e:8a:40:75:ed:2c:
5e:f9:cd:25:83:00:e7:2d:9c:84:e7:0e:33:97:dc:7a:f8:67:
ef:ec:57:e8:66:43:77:a5:e7:f4:c4:8d:f5:27:10:a8:44:8b:
4a:29:9c:c0:4d:2b:2e:c7:94:b2:1b:84:c5:4b:c0:3c:31:3e:
45:6e:c6:c7:06:3f:8b:ff:19:59:ae:8e:9e:fb:da:11:0d:cb:
46:cb:72:00:bb:98:db:70:e8:ee:f7:f0:a7:0d:65:4d:83:68:
36:ee:8a:a1:4e:c0:8b:4b:67:a4:fe:c3:d0:a0:c4:d1:f5:3c:
a0:94:e9:ff:1c:6f:5c:09:6b:18:da:33:c6:f8:43:1f:ee:b5:
14:d8:05:66:ad:38:c9:92:78:d7:04:76:94:a7:63:a8:91:ff:
53:51:a2:26:3e:cf:4c:63:fd:94:dc:a4:88:d4:53:5b:bb:c0:
20:7b:b9:53:b9:8d:57:2b:84:d8:75:ba:bd:85:70:3a:13:b3:
46:d1:85:75:23:15:54:2c:68:d4:0f:c8:1e:46:0d:d4:3a:18:
4a:c6:f5:8a:4b:5f:02:22:5a:fc:33:b2:07:82:01:cb:e2:5c:
27:3a:fc:76:5c:51:44:8b:03:26:10:09:e5:ff:fd:c5:6f:30:
c5:19:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:14:01 2024 by rpki-client on console-fra.rpki-client.org