Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Tmvk8jmC3-qusc-MCQNKIfyudRM.roa
File: Tmvk8jmC3-qusc-MCQNKIfyudRM.roa (raw, json)
Hash identifier: m4IM5NAcJuocN0zxsTcTeakRMLK0ALxq71HIVfn86AY=
Subject key identifier: 4E:6B:E4:F2:39:82:DF:EA:AE:B1:CF:8C:09:03:4A:21:FC:AE:75:13
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 018E70167AAA488C91AFB325F7C4CE79672B
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Tmvk8jmC3-qusc-MCQNKIfyudRM.roa
Signing time: Sun 24 Mar 2024 10:51:45 +0000
ROA not before: Sun 24 Mar 2024 10:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/22 maxlen: 22
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:84::/48 maxlen: 48
2a04:7f80:85::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:16:7a:aa:48:8c:91:af:b3:25:f7:c4:ce:79:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Mar 24 10:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6be4f23982dfeaaeb1cf8c09034a21fcae7513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:93:b2:40:0a:48:87:b3:2e:de:ba:77:62:
66:15:a6:1c:4c:12:1b:7c:b6:41:6c:08:68:10:1a:
cb:dc:87:69:79:ba:4c:17:ed:c3:28:08:b3:fb:0c:
03:ff:ac:fb:8b:8e:f9:0e:55:5a:18:71:81:75:c4:
2e:41:31:3c:2a:64:62:d9:3d:05:dd:9c:e4:77:8b:
40:69:35:8d:ee:22:16:6d:8b:a6:da:48:e2:42:75:
f5:9a:e9:0a:c7:a0:60:f9:7d:db:72:bc:f7:6d:71:
2e:48:17:4e:41:38:c4:62:a9:16:1b:51:8c:20:a1:
e3:cb:e3:80:dd:6a:3b:3b:19:f0:d0:52:3b:44:47:
3f:2a:fe:89:b5:cf:bc:0b:e1:3c:b8:61:03:56:82:
d8:77:30:fc:88:e3:da:0a:4c:2a:ec:1f:8a:74:19:
b7:65:75:70:c8:b4:27:4a:dc:b1:ba:67:a6:90:8b:
5e:54:c7:cb:13:72:99:0f:21:10:38:01:7e:c9:c6:
27:76:92:e6:25:4b:42:55:b8:6e:fd:17:d6:05:80:
e5:04:3b:3a:5c:02:26:ce:22:ba:06:84:0c:1f:14:
85:e8:e8:a3:30:59:8b:cb:7f:e7:95:e7:0c:12:e9:
eb:b0:21:dd:6c:1f:b5:58:5f:63:ac:bc:f7:f7:5d:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:E4:F2:39:82:DF:EA:AE:B1:CF:8C:09:03:4A:21:FC:AE:75:13
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Tmvk8jmC3-qusc-MCQNKIfyudRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
86:f0:26:4a:ab:d1:29:d9:06:f0:5f:cf:ab:f4:31:41:3a:e4:
c9:b8:fd:73:7c:69:fb:e4:1b:8d:47:44:0c:ff:8b:a0:37:47:
d7:0e:48:8b:d3:25:f0:23:59:88:8f:86:59:44:d3:72:9a:57:
18:eb:29:3b:5f:1b:04:55:ca:6e:31:6c:82:e1:0c:df:6b:4f:
c9:0b:df:43:4b:31:a6:b2:aa:71:16:d0:18:89:f5:ba:57:31:
70:9e:0e:83:cd:dc:d4:64:4a:29:58:58:4b:2d:97:09:af:b9:
52:92:97:28:e7:aa:58:05:f2:e5:4e:9f:dc:0b:ea:d0:ec:55:
41:49:90:3f:ef:87:51:e8:80:a1:f0:d0:b9:9d:a4:03:bc:2e:
be:4e:af:33:55:86:87:df:cd:c2:1b:ca:1c:52:d4:b5:65:f5:
17:ac:1d:9b:44:db:7e:64:87:bf:22:c4:5d:a1:50:e4:9a:c1:
78:a0:9d:76:40:df:58:e0:43:52:11:a9:79:24:d6:b7:00:b9:
55:ba:29:4f:1f:b7:ee:da:66:f4:ef:36:50:f6:5f:67:56:8b:
69:0a:8a:9e:76:37:45:b7:cb:4c:81:32:6d:23:2f:34:08:da:
f3:5c:30:a3:f1:2c:70:b8:16:9f:e6:13:5b:33:31:60:98:7a:
ef:d3:6e:eb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAY5wFnqqSIyRr7Ml98TOeWcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjQwMzI0MTA1MTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTZiZTRmMjM5ODJkZmVhYWViMWNmOGMwOTAzNGEyMWZjYWU3NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke2TskAKSIezLt66d2JmFaYcTBIb
fLZBbAhoEBrL3IdpebpMF+3DKAiz+wwD/6z7i475DlVaGHGBdcQuQTE8KmRi2T0F
3Zzkd4tAaTWN7iIWbYum2kjiQnX1mukKx6Bg+X3bcrz3bXEuSBdOQTjEYqkWG1GM
IKHjy+OA3Wo7Oxnw0FI7REc/Kv6Jtc+8C+E8uGEDVoLYdzD8iOPaCkwq7B+KdBm3
ZXVwyLQnStyxumemkIteVMfLE3KZDyEQOAF+ycYndpLmJUtCVbhu/RfWBYDlBDs6
XAImziK6BoQMHxSF6OijMFmLy3/nlecMEunrsCHdbB+1WF9jrLz3911+LQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFE5r5PI5gt/qrrHPjAkDSiH8rnUTMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvVG12azhqbUMzLXF1c2MtTUNRTktJZnl1ZFJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDHwswAwQF
JbogAwQEUEygAwQCZxEAAwQCZxd8AwQCZ8dYAwQCZ+FIAwQCufdYAwQF1EZgMA0E
AgACMAcDBQMqBH+AMA0GCSqGSIb3DQEBCwUAA4IBAQCG8CZKq9Ep2QbwX8+r9DFB
OuTJuP1zfGn75BuNR0QM/4ugN0fXDkiL0yXwI1mIj4ZZRNNymlcY6yk7XxsEVcpu
MWyC4Qzfa0/JC99DSzGmsqpxFtAYifW6VzFwng6DzdzUZEopWFhLLZcJr7lSkpco
56pYBfLlTp/cC+rQ7FVBSZA/74dR6ICh8NC5naQDvC6+Tq8zVYaH383CG8ocUtS1
ZfUXrB2bRNt+ZIe/IsRdoVDkmsF4oJ12QN9Y4ENSEal5JNa3ALlVuilPH7fu2mb0
7zZQ9l9nVotpCoqedjdFt8tMgTJtIy80CNrzXDCj8SxwuBaf5hNbMzFgmHrv027r
-----END CERTIFICATE-----
Generated at Fri May 17 09:48:01 2024 by rpki-client on console-ams.rpki-client.org