Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/2Sogz2f-Y-Q89kALOaFwXGpENls.roa
File: 2Sogz2f-Y-Q89kALOaFwXGpENls.roa (raw, json)
Hash identifier: xWX/sBmx7Cmqhctcmi5B9YqU1V0kQKRLbrhmA5MXJ0s=
Subject key identifier: D9:2A:20:CF:67:FE:63:E4:3C:F6:40:0B:39:A1:70:5C:6A:44:36:5B
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019426D979871E1DD3FCCD46AB7B8300E6C4
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/2Sogz2f-Y-Q89kALOaFwXGpENls.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49063
IP address blocks: 85.193.72.0/24 maxlen: 24
85.193.73.0/24 maxlen: 24
85.193.74.0/24 maxlen: 24
85.193.75.0/24 maxlen: 24
87.251.90.0/23 maxlen: 23
87.251.91.0/24 maxlen: 24
91.107.64.0/21 maxlen: 21
91.107.64.0/24 maxlen: 24
91.107.65.0/24 maxlen: 24
91.107.66.0/24 maxlen: 24
91.107.67.0/24 maxlen: 24
91.107.68.0/24 maxlen: 24
91.107.69.0/24 maxlen: 24
91.107.70.0/24 maxlen: 24
91.107.71.0/24 maxlen: 24
92.242.32.0/21 maxlen: 21
92.242.32.0/24 maxlen: 24
92.242.33.0/24 maxlen: 24
92.242.34.0/24 maxlen: 24
92.242.35.0/24 maxlen: 24
92.242.36.0/24 maxlen: 24
92.242.37.0/24 maxlen: 24
92.242.38.0/24 maxlen: 24
92.242.39.0/24 maxlen: 24
92.242.41.0/24 maxlen: 24
92.242.42.0/24 maxlen: 24
92.242.43.0/24 maxlen: 24
92.242.46.0/24 maxlen: 24
92.242.47.0/24 maxlen: 24
95.131.24.0/21 maxlen: 21
95.131.24.0/24 maxlen: 24
95.131.25.0/24 maxlen: 24
95.131.26.0/24 maxlen: 24
95.131.29.0/24 maxlen: 24
95.131.30.0/24 maxlen: 24
95.131.31.0/24 maxlen: 24
95.181.192.0/22 maxlen: 22
95.181.193.0/24 maxlen: 24
95.181.194.0/24 maxlen: 24
95.181.195.0/24 maxlen: 24
95.181.196.0/23 maxlen: 23
95.181.196.0/24 maxlen: 24
95.181.197.0/24 maxlen: 24
95.181.199.0/24 maxlen: 24
95.181.200.0/21 maxlen: 21
95.181.200.0/24 maxlen: 24
95.181.201.0/24 maxlen: 24
95.181.203.0/24 maxlen: 24
95.181.204.0/24 maxlen: 24
95.181.205.0/24 maxlen: 24
130.193.64.0/21 maxlen: 21
130.193.64.0/24 maxlen: 24
130.193.65.0/24 maxlen: 24
130.193.66.0/24 maxlen: 24
130.193.67.0/24 maxlen: 24
130.193.68.0/24 maxlen: 24
130.193.70.0/24 maxlen: 24
130.193.71.0/24 maxlen: 24
176.107.160.0/24 maxlen: 24
176.107.161.0/24 maxlen: 24
176.107.162.0/24 maxlen: 24
176.107.163.0/24 maxlen: 24
176.107.164.0/24 maxlen: 24
176.107.165.0/24 maxlen: 24
176.107.166.0/24 maxlen: 24
176.107.167.0/24 maxlen: 24
178.20.232.0/21 maxlen: 21
178.20.232.0/24 maxlen: 24
178.20.233.0/24 maxlen: 24
178.20.234.0/24 maxlen: 24
178.20.235.0/24 maxlen: 24
178.20.236.0/24 maxlen: 24
178.20.237.0/24 maxlen: 24
178.20.238.0/24 maxlen: 24
178.20.239.0/24 maxlen: 24
178.57.72.0/21 maxlen: 21
178.57.72.0/24 maxlen: 24
178.57.73.0/24 maxlen: 24
178.57.74.0/24 maxlen: 24
178.57.75.0/24 maxlen: 24
178.57.76.0/24 maxlen: 24
178.57.77.0/24 maxlen: 24
178.57.78.0/24 maxlen: 24
178.57.79.0/24 maxlen: 24
185.3.140.0/22 maxlen: 22
185.3.140.0/24 maxlen: 24
185.3.141.0/24 maxlen: 24
185.3.142.0/24 maxlen: 24
185.3.143.0/24 maxlen: 24
185.98.80.0/22 maxlen: 22
185.98.80.0/24 maxlen: 24
185.98.81.0/24 maxlen: 24
185.98.82.0/24 maxlen: 24
185.98.83.0/24 maxlen: 24
185.98.84.0/23 maxlen: 23
185.98.84.0/24 maxlen: 24
185.98.85.0/24 maxlen: 24
185.99.8.0/21 maxlen: 21
185.99.8.0/22 maxlen: 22
185.99.8.0/24 maxlen: 24
185.99.9.0/24 maxlen: 24
185.99.10.0/24 maxlen: 24
185.99.11.0/24 maxlen: 24
185.99.13.0/24 maxlen: 24
185.99.14.0/24 maxlen: 24
185.99.140.0/23 maxlen: 23
185.99.140.0/24 maxlen: 24
185.127.148.0/22 maxlen: 22
185.127.148.0/24 maxlen: 24
185.127.149.0/24 maxlen: 24
185.127.150.0/24 maxlen: 24
185.127.151.0/24 maxlen: 24
185.148.80.0/24 maxlen: 24
185.148.81.0/24 maxlen: 24
185.148.82.0/24 maxlen: 24
185.148.83.0/24 maxlen: 24
185.195.169.0/24 maxlen: 24
185.232.104.0/22 maxlen: 22
185.232.104.0/24 maxlen: 24
185.232.105.0/24 maxlen: 24
185.232.106.0/24 maxlen: 24
185.232.107.0/24 maxlen: 24
185.242.120.0/24 maxlen: 24
185.247.186.0/24 maxlen: 24
193.23.144.0/22 maxlen: 22
193.23.144.0/24 maxlen: 24
193.23.145.0/24 maxlen: 24
193.23.146.0/24 maxlen: 24
193.23.147.0/24 maxlen: 24
195.14.100.0/24 maxlen: 24
195.14.101.0/24 maxlen: 24
2a01:ba80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:79:87:1e:1d:d3:fc:cd:46:ab:7b:83:00:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d92a20cf67fe63e43cf6400b39a1705c6a44365b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:14:b9:8a:ff:3a:44:89:d3:34:69:f1:e1:
10:f9:1a:b8:fb:bb:e0:77:4d:f1:6e:77:4e:f2:81:
0d:20:b2:75:fd:71:6e:8b:dd:b6:f6:1a:2f:c5:61:
58:4a:32:88:93:41:ec:2d:7d:63:1b:33:89:e4:c5:
80:e3:d4:e7:23:50:f3:4e:5e:b0:25:02:34:18:92:
db:0f:e2:6b:21:27:56:4d:82:68:a9:cc:d8:29:d0:
a2:3b:fd:9f:a6:66:d1:3c:9d:be:a8:4d:d4:2c:a4:
f3:4a:cb:0a:32:c9:f1:3d:40:24:95:f7:53:01:03:
e2:42:e9:f9:f3:c5:8b:a4:ee:98:a4:d3:c5:1d:07:
85:a6:47:e7:dc:88:dc:47:d2:25:d9:30:82:9d:81:
3b:8f:88:4a:7e:45:f6:68:0f:d3:06:ab:d1:78:1e:
63:fb:df:e1:ee:f3:a0:cf:7e:87:03:e8:15:80:3a:
ba:3c:4c:db:32:72:1f:24:22:a7:c6:62:bf:49:09:
76:86:60:e9:8e:03:f5:85:2c:d2:fe:7c:dc:6a:df:
be:3c:4e:e0:32:8e:5c:81:ec:94:0b:cc:18:2d:b4:
9c:c0:4f:2a:5f:42:3f:f5:07:2d:d5:6a:52:fb:ea:
49:24:12:c4:0f:f9:11:54:b0:d7:af:61:bd:27:e1:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:20:CF:67:FE:63:E4:3C:F6:40:0B:39:A1:70:5C:6A:44:36:5B
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/2Sogz2f-Y-Q89kALOaFwXGpENls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.72.0/22
87.251.90.0/23
91.107.64.0/21
92.242.32.0/21
92.242.41.0-92.242.43.255
92.242.46.0/23
95.131.24.0/21
95.181.192.0-95.181.197.255
95.181.199.0-95.181.207.255
130.193.64.0/21
176.107.160.0/21
178.20.232.0/21
178.57.72.0/21
185.3.140.0/22
185.98.80.0-185.98.85.255
185.99.8.0/21
185.99.140.0/23
185.127.148.0/22
185.148.80.0/22
185.195.169.0/24
185.232.104.0/22
185.242.120.0/24
185.247.186.0/24
193.23.144.0/22
195.14.100.0/23
IPv6:
2a01:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
ae:fa:bc:45:d0:64:6c:bf:10:27:ab:6d:ae:2a:12:06:e5:70:
c9:c0:f8:8e:85:47:35:46:fc:8f:5d:18:53:90:c3:7e:88:8f:
9a:b3:f4:be:ee:5b:50:05:75:b8:09:90:58:6b:15:63:b3:2c:
86:bf:12:61:78:a5:a1:7f:b2:47:2e:57:2b:8a:78:d3:ac:67:
ed:cb:41:1c:23:e7:22:dc:d0:77:18:38:8b:36:fc:f8:7f:18:
31:ef:f5:0d:99:1d:58:ea:fc:c6:62:f5:f6:21:50:96:c0:e9:
74:df:15:04:27:26:eb:27:dc:1c:d1:99:b1:01:38:cb:f1:c9:
65:ef:d4:40:9d:b4:14:c3:55:7c:ae:c1:63:8d:b6:6b:56:21:
71:77:2f:7d:ca:ea:ab:c1:00:9d:f4:2e:7d:ae:0e:f3:e9:e3:
01:c7:5c:a3:5e:ae:e5:ec:d0:b7:f5:22:4f:c5:96:ab:f2:99:
d4:6e:6b:85:41:89:bc:15:14:84:5b:fd:b6:30:31:10:2b:6e:
36:3a:84:91:9e:6e:c7:aa:1c:27:d5:fd:49:7a:5a:49:ce:47:
e3:8a:50:62:8a:00:db:4b:83:3a:74:d4:43:ec:53:88:8b:4f:
1d:a4:65:ad:30:91:90:2b:ea:6e:f8:3b:64:4b:21:bf:25:2a:
fd:8e:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:43 2025 by rpki-client