Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VMbgZm09hdBft0sCsyFP83A1KIs.roa
File: VMbgZm09hdBft0sCsyFP83A1KIs.roa (raw, json)
Hash identifier: AM1fXW8n83hCbkTKL97fcCftppJfPeYY95vCD0LMCp4=
Subject key identifier: 54:C6:E0:66:6D:3D:85:D0:5F:B7:4B:02:B3:21:4F:F3:70:35:28:8B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192052AE1873500818D641A9E20236172C4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VMbgZm09hdBft0sCsyFP83A1KIs.roa
Signing time: Wed 18 Sep 2024 12:45:49 +0000
ROA not before: Wed 18 Sep 2024 12:45:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/24 maxlen: 24
45.143.55.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/24 maxlen: 24
84.247.27.0/24 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/24 maxlen: 24
89.39.165.0/24 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/24 maxlen: 24
94.103.251.0/24 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:2a:e1:87:35:00:81:8d:64:1a:9e:20:23:61:72:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 18 12:45:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54c6e0666d3d85d05fb74b02b3214ff37035288b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:eb:a8:a4:c7:60:d2:05:d1:34:7b:0a:1d:
1f:51:85:7c:1b:b3:16:cd:8a:66:4a:0a:1b:55:c4:
82:5d:7b:42:3a:21:82:c2:47:90:10:0c:77:e0:4d:
d8:a1:95:6c:55:89:33:40:72:6d:a7:a1:12:67:8f:
d7:4b:3f:d6:60:8c:c8:94:ed:94:c6:c9:0d:58:51:
6c:af:a2:52:66:93:18:1a:55:e3:1e:31:74:2d:77:
08:49:be:1b:26:80:0a:e3:0c:30:69:8d:cf:cd:56:
61:0b:c8:87:9a:70:35:da:a5:f2:7c:3c:2b:af:8d:
1f:6f:0c:01:af:40:01:96:7e:d5:87:a8:c1:ab:b4:
8a:1d:87:75:9a:70:5e:5a:94:cf:8e:05:ff:ed:93:
7e:15:46:7f:87:31:f2:b7:e8:7b:bb:e5:4c:67:6f:
da:aa:de:fa:81:a1:e4:43:cc:cd:a3:4d:c4:07:eb:
90:fe:3d:be:19:29:00:a8:95:56:a4:19:ea:43:28:
2b:b1:47:70:b1:c0:02:9e:7e:f9:7c:35:7a:fd:ac:
f6:3b:d9:0d:ed:39:1d:3d:59:20:fe:2a:87:95:fe:
ad:33:8e:ae:e3:a0:24:05:14:5d:a2:da:a3:c4:0b:
e6:c9:be:31:41:af:7d:47:88:e6:d5:50:7d:b0:24:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C6:E0:66:6D:3D:85:D0:5F:B7:4B:02:B3:21:4F:F3:70:35:28:8B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VMbgZm09hdBft0sCsyFP83A1KIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.150.0/24
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/24
45.143.55.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/24
84.247.27.0/24
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0/24
89.39.165.0/24
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/24
94.103.251.0/24
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0/23
185.192.18.0/23
185.205.188.0/24
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/24
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
4c:28:45:1f:08:af:21:94:a0:de:5c:2d:9f:23:45:d1:93:27:
2e:7e:b8:c5:4a:c5:3c:c1:2b:47:fa:8d:ce:80:6a:9c:82:15:
9a:0a:a1:39:fc:11:73:05:b1:d5:53:13:1a:db:c2:73:29:bf:
16:d2:f5:0d:38:e4:f4:de:07:ad:5b:d8:ab:89:36:87:68:d9:
96:f8:60:5d:6d:5c:ea:f0:3f:78:4a:0e:4e:71:ad:cd:a9:40:
c0:85:db:03:5c:3d:01:7b:a0:9f:e8:4a:e4:c1:1d:77:87:d0:
4e:a7:f3:a1:4e:d0:fc:74:b3:6b:77:5b:40:51:40:87:37:ad:
23:de:f0:41:70:2f:e9:92:93:95:47:35:e2:63:80:1b:4d:fb:
8c:18:46:35:8d:0d:82:43:b0:59:c0:8f:52:2b:87:8d:2f:c4:
6e:47:d8:b2:d0:cf:3b:f1:d2:10:d3:d4:71:fc:bb:60:f4:2b:
49:22:1d:fb:ba:57:a5:47:43:ac:47:7e:86:a0:c8:6d:d0:87:
54:36:c2:d3:1c:d1:39:d8:57:87:6d:a2:f5:95:2e:50:f1:f8:
5f:08:e8:42:2c:55:1a:f7:24:ed:55:c9:16:c5:e5:85:a3:10:
c4:d2:f0:3e:b6:27:29:23:8d:4b:f9:43:ec:67:84:99:02:c7:
1d:b7:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:02:22 2024 by rpki-client on console-ams.rpki-client.org