Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/M_GO1wJVWLv6YWE3ZHQDrzhZMFA.roa
File: M_GO1wJVWLv6YWE3ZHQDrzhZMFA.roa (raw, json)
Hash identifier: yV1MxvhZAQSm9orY4AWLCqqh4ipQYyfM75LxVWT8xZk=
Subject key identifier: 33:F1:8E:D7:02:55:58:BB:FA:61:61:37:64:74:03:AF:38:59:30:50
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01932C9AE9898E894641B9BB12EA44BE62D1
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/M_GO1wJVWLv6YWE3ZHQDrzhZMFA.roa
Signing time: Thu 14 Nov 2024 21:36:10 +0000
ROA not before: Thu 14 Nov 2024 21:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:9a:e9:89:8e:89:46:41:b9:bb:12:ea:44:be:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Nov 14 21:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33f18ed7025558bbfa616137647403af38593050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:65:ab:2b:dc:db:7b:c6:d0:99:a1:ce:cf:
39:0e:28:d4:57:32:73:88:79:88:c2:5f:4f:d4:2b:
09:bc:b6:a9:ae:b9:73:30:c0:82:8e:80:2f:11:b1:
85:2b:00:00:38:ac:90:a4:69:7d:1a:a5:c7:f6:6b:
a2:01:aa:8c:b1:01:75:69:27:68:16:48:06:05:14:
41:73:98:37:bd:e4:5e:8c:4d:f9:74:f4:19:6c:b5:
81:67:e2:49:6f:61:81:e1:13:00:13:6f:f0:21:74:
89:10:26:1c:1b:e5:af:52:b2:ba:8c:6e:2d:b2:82:
ed:6d:a5:01:92:7d:8f:73:42:04:bd:d1:99:4c:ad:
3d:43:e8:e3:ce:e8:1c:0a:3e:6e:bf:0a:20:ff:99:
6d:34:20:44:5e:28:3b:4f:8b:3a:e6:76:7d:1c:7b:
43:59:e3:5a:cb:63:4b:a8:e3:91:48:71:43:6f:f1:
3b:bd:42:38:c0:a7:6a:40:a4:40:6c:4b:b6:03:44:
1a:b8:33:a1:16:48:53:f5:37:77:59:96:84:53:74:
73:1c:a7:31:7a:20:c0:c3:a9:d0:09:1d:75:bf:2f:
e5:29:b9:5f:84:43:1d:74:1c:65:e5:eb:4d:45:25:
48:77:89:ef:27:91:45:89:d7:dd:90:b3:cf:5e:ef:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:8E:D7:02:55:58:BB:FA:61:61:37:64:74:03:AF:38:59:30:50
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/M_GO1wJVWLv6YWE3ZHQDrzhZMFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
66:af:70:ed:59:d2:e0:d3:78:e3:cf:c1:81:fa:f6:e0:71:ef:
19:61:d1:ad:37:7e:b2:ba:63:e9:85:77:2d:92:c4:44:6c:ee:
c6:e0:eb:ec:ba:f7:b8:d6:27:eb:87:1d:e7:0f:98:55:5f:50:
56:52:46:0c:76:7b:50:74:84:de:01:0a:52:69:74:03:c3:b2:
2f:27:49:b0:e5:c3:4e:58:16:b3:1e:d9:d4:3d:6a:01:59:86:
ea:7b:5f:2a:28:39:6a:dd:29:48:fc:03:3d:00:e0:d3:36:b9:
93:28:a0:71:c5:61:ca:a9:f2:22:8a:f4:e4:9c:41:5b:4c:f1:
09:2b:b7:0f:38:5a:91:8f:93:a1:77:59:f3:50:c8:e4:58:07:
e7:5b:8d:a8:b1:17:98:af:6a:40:f3:f0:0e:7f:94:97:2a:cd:
2b:b2:c2:e2:6b:98:68:ab:d1:cc:a5:65:87:de:7b:95:4a:93:
ec:00:61:62:b6:54:d6:d2:26:84:7d:5e:da:5a:7d:1d:14:d2:
49:b7:11:8b:c9:66:1a:12:25:d3:d6:b4:48:07:43:3e:3b:85:
9c:b2:70:b1:f9:e0:df:7f:32:02:86:89:c5:4b:81:10:aa:07:
9a:a9:99:21:7f:88:80:4b:5d:83:f9:b6:df:8a:2b:10:4b:60:
bd:2c:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:36 2024 by rpki-client on console-ams.rpki-client.org