Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/ksnyP7JLf382Ok1-GJ6NZTcXjmw.roa
File: ksnyP7JLf382Ok1-GJ6NZTcXjmw.roa (raw, json)
Hash identifier: pEDYi+wadLcfHGr18UHspIHeECPUT1VM3eaar9hi2EQ=
Subject key identifier: 92:C9:F2:3F:B2:4B:7F:7F:36:3A:4D:7E:18:9E:8D:65:37:17:8E:6C
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 019147105C5CD2DB952D537FD2D222F30840
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/ksnyP7JLf382Ok1-GJ6NZTcXjmw.roa
Signing time: Mon 12 Aug 2024 14:48:59 +0000
ROA not before: Mon 12 Aug 2024 14:48:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210079
IP address blocks: 5.35.100.0/24 maxlen: 24
5.35.101.0/24 maxlen: 24
5.35.102.0/24 maxlen: 24
37.143.8.0/23 maxlen: 23
37.143.10.0/23 maxlen: 23
37.143.12.0/23 maxlen: 23
37.143.14.0/23 maxlen: 23
46.254.16.0/23 maxlen: 23
46.254.18.0/23 maxlen: 23
46.254.20.0/23 maxlen: 23
46.254.22.0/24 maxlen: 24
46.254.23.0/24 maxlen: 24
91.201.40.0/22 maxlen: 22
91.218.228.0/23 maxlen: 23
91.218.230.0/23 maxlen: 23
95.181.224.0/24 maxlen: 24
95.181.225.0/24 maxlen: 24
95.181.226.0/24 maxlen: 24
95.181.227.0/24 maxlen: 24
95.181.228.0/24 maxlen: 24
95.181.229.0/24 maxlen: 24
95.181.230.0/24 maxlen: 24
95.181.231.0/24 maxlen: 24
95.183.8.0/23 maxlen: 23
95.183.10.0/24 maxlen: 24
95.183.11.0/24 maxlen: 24
95.183.12.0/24 maxlen: 24
95.183.13.0/24 maxlen: 24
95.183.14.0/24 maxlen: 24
95.183.15.0/24 maxlen: 24
178.57.216.0/23 maxlen: 23
178.57.218.0/23 maxlen: 23
178.57.220.0/23 maxlen: 23
178.57.220.0/24 maxlen: 24
178.57.221.0/24 maxlen: 24
178.57.222.0/23 maxlen: 23
178.217.100.0/24 maxlen: 24
178.217.101.0/24 maxlen: 24
185.11.246.0/23 maxlen: 23
185.12.92.0/22 maxlen: 22
185.12.92.0/24 maxlen: 24
185.12.93.0/24 maxlen: 24
185.12.94.0/24 maxlen: 24
185.12.95.0/24 maxlen: 24
185.22.232.0/23 maxlen: 23
185.22.234.0/23 maxlen: 23
185.87.192.0/24 maxlen: 24
185.87.193.0/24 maxlen: 24
185.87.194.0/24 maxlen: 24
185.87.195.0/24 maxlen: 24
185.87.196.0/24 maxlen: 24
185.87.197.0/24 maxlen: 24
185.87.198.0/24 maxlen: 24
185.87.199.0/24 maxlen: 24
185.221.152.0/22 maxlen: 22
185.221.154.0/24 maxlen: 24
185.221.155.0/24 maxlen: 24
212.8.247.0/24 maxlen: 24
217.144.96.0/24 maxlen: 24
217.144.97.0/24 maxlen: 24
217.144.98.0/24 maxlen: 24
217.144.99.0/24 maxlen: 24
217.144.100.0/24 maxlen: 24
217.144.101.0/24 maxlen: 24
217.144.103.0/24 maxlen: 24
2a03:80c0::/48 maxlen: 48
2a03:80c0:1::/48 maxlen: 48
2a03:c980:db::/48 maxlen: 48
2a03:c980:e5::/48 maxlen: 48
2a03:c980:5fb5::/48 maxlen: 48
2a03:c980:5fb7::/48 maxlen: 48
2a03:c980:b239::/48 maxlen: 48
2a03:c980:b916::/48 maxlen: 48
2a03:c980:b957::/48 maxlen: 48
2a03:c980:beef::/48 maxlen: 48
2a03:c980:d990::/48 maxlen: 48
2a03:c980:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:47:10:5c:5c:d2:db:95:2d:53:7f:d2:d2:22:f3:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Aug 12 14:48:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92c9f23fb24b7f7f363a4d7e189e8d6537178e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:fe:07:07:4e:fd:b6:ab:19:53:68:c1:af:
55:2d:22:f9:79:9d:6a:52:f2:d5:7c:fb:2e:fb:a3:
df:f0:12:08:7e:da:9c:d8:77:19:a9:1f:d8:80:ed:
cd:9e:4e:f6:cf:8a:88:19:bc:ad:cb:d0:d7:f4:4b:
19:bc:53:e5:3e:ed:b1:53:da:89:00:53:aa:a9:d3:
8f:51:4c:eb:5d:1e:de:7b:1a:dc:5a:42:fd:3a:78:
8c:a1:d3:45:d6:1b:a1:34:b0:19:ab:42:ce:42:34:
51:8a:b3:3b:63:73:ec:ac:85:18:80:64:21:8a:48:
60:ab:69:a5:ca:12:38:e6:30:3f:7d:bd:c8:39:f1:
94:8c:28:df:ae:ff:e8:ef:53:5b:18:23:f5:1a:bb:
0b:dc:42:36:5f:aa:d9:b7:0f:82:d0:1b:fa:e6:14:
78:3e:bb:01:8e:b4:8b:b9:0b:a0:c2:42:b2:1b:60:
c2:a0:97:60:ff:36:e9:c1:27:1a:d6:d6:1e:36:e4:
66:7e:e7:b6:8f:7a:79:6e:2a:d0:7f:51:08:e2:b2:
d7:f7:57:dc:03:1c:cc:86:00:7b:21:45:7e:cd:78:
e9:d6:f7:7c:ef:44:db:38:71:7e:13:54:17:45:06:
14:aa:68:6d:84:2e:b8:f7:f6:4a:91:27:fa:b0:99:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C9:F2:3F:B2:4B:7F:7F:36:3A:4D:7E:18:9E:8D:65:37:17:8E:6C
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/ksnyP7JLf382Ok1-GJ6NZTcXjmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.100.0-5.35.102.255
37.143.8.0/21
46.254.16.0/21
91.201.40.0/22
91.218.228.0/22
95.181.224.0/21
95.183.8.0/21
178.57.216.0/21
178.217.100.0/23
185.11.246.0/23
185.12.92.0/22
185.22.232.0/22
185.87.192.0/21
185.221.152.0/22
212.8.247.0/24
217.144.96.0-217.144.101.255
217.144.103.0/24
IPv6:
2a03:80c0::/47
2a03:c980:db::/48
2a03:c980:e5::/48
2a03:c980:5fb5::/48
2a03:c980:5fb7::/48
2a03:c980:b239::/48
2a03:c980:b916::/48
2a03:c980:b957::/48
2a03:c980:beef::/48
2a03:c980:d990::/48
2a03:c980:dead::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a9:83:68:07:65:c8:95:fd:fb:45:61:1b:88:2b:84:7f:1c:
04:5a:f0:44:a9:68:15:f9:a9:b3:1e:d5:23:87:69:2b:a2:6d:
42:22:71:b5:e8:ed:7c:26:b9:42:65:24:b8:32:03:e9:46:ad:
25:20:71:2d:7b:50:72:f8:f3:05:2b:86:17:6e:2b:9d:0e:52:
6b:62:70:8b:6b:af:61:ea:34:21:cb:b4:a1:5e:b6:29:28:92:
87:e1:4a:b8:49:14:8e:df:fc:0d:c5:a5:59:17:ba:8a:21:18:
9c:96:cc:2a:f5:fc:5a:e3:98:ab:3d:5b:ed:5c:3d:98:59:f4:
6e:90:16:bd:b4:1f:c9:d6:96:6f:08:b6:ff:44:4c:5b:4c:6b:
bc:f7:7f:02:6d:de:d4:a5:3d:0a:19:4e:39:b3:dc:bd:b0:d8:
aa:fb:0d:34:d3:f5:cb:a7:9c:81:87:00:2b:99:c8:6a:e6:6b:
a0:26:e8:4a:3b:8a:a0:7d:93:61:b2:c1:ce:1c:38:a4:1c:eb:
8a:dc:48:4e:4c:81:ca:14:24:fd:b6:1e:e1:f3:cd:89:78:4d:
38:f8:e1:84:10:c5:82:7a:b1:8c:fa:85:4f:e2:35:f8:ac:cc:
93:49:b2:f6:48:93:d6:b7:71:08:bb:07:03:52:49:54:de:7d:
f6:f8:1f:b6
-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgISAZFHEFxc0tuVLVN/0tIi8whAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3
NGFkODkwHhcNMjQwODEyMTQ0ODU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmM5ZjIzZmIyNGI3ZjdmMzYzYTRkN2UxODllOGQ2NTM3MTc4ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ7+BwdO/barGVNowa9VLSL5eZ1q
UvLVfPsu+6Pf8BIIftqc2HcZqR/YgO3Nnk72z4qIGbyty9DX9EsZvFPlPu2xU9qJ
AFOqqdOPUUzrXR7eexrcWkL9OniModNF1huhNLAZq0LOQjRRirM7Y3PsrIUYgGQh
ikhgq2mlyhI45jA/fb3IOfGUjCjfrv/o71NbGCP1GrsL3EI2X6rZtw+C0Bv65hR4
PrsBjrSLuQugwkKyG2DCoJdg/zbpwSca1tYeNuRmfue2j3p5birQf1EI4rLX91fc
AxzMhgB7IUV+zXjp1vd870TbOHF+E1QXRQYUqmhthC649/ZKkSf6sJmOmwIDAQAB
o4IC5zCCAuMwHQYDVR0OBBYEFJLJ8j+yS39/NjpNfhiejWU3F45sMB8GA1UdIwQY
MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt
NGMyMWE1MDVmMzQ2LzEva3NueVA3SkxmMzgyT2sxLUdKNk5aVGNYam13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2
LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH8BggrBgEFBQcBBwEB/wSB7DCB6TB8BAIAATB2MAwDBAIF
I2QDBAAFI2YDBAMljwgDBAMu/hADBAJbySgDBAJb2uQDBANfteADBANftwgDBAOy
OdgDBAGy2WQDBAG5C/YDBAK5DFwDBAK5FugDBAO5V8ADBAK53ZgDBADUCPcwDAME
BdmQYAMEAdmQZAMEANmQZzBpBAIAAjBjAwcBKgOAwAAAAwcAKgPJgADbAwcAKgPJ
gADlAwcAKgPJgF+1AwcAKgPJgF+3AwcAKgPJgLI5AwcAKgPJgLkWAwcAKgPJgLlX
AwcAKgPJgL7vAwcAKgPJgNmQAwcAKgPJgN6tMA0GCSqGSIb3DQEBCwUAA4IBAQCu
qYNoB2XIlf37RWEbiCuEfxwEWvBEqWgV+amzHtUjh2krom1CInG16O18JrlCZSS4
MgPpRq0lIHEte1By+PMFK4YXbiudDlJrYnCLa69h6jQhy7ShXrYpKJKH4Uq4SRSO
3/wNxaVZF7qKIRiclswq9fxa45irPVvtXD2YWfRukBa9tB/J1pZvCLb/RExbTGu8
938Cbd7UpT0KGU45s9y9sNiq+w000/XLp5yBhwArmchq5mugJuhKO4qgfZNhssHO
HDikHOuK3EhOTIHKFCT9th7h882JeE04+OGEEMWCerGM+oVP4jX4rMyTSbL2SJPW
t3EIuwcDUklU3n32+B+2
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:08:01 2024 by rpki-client on console-fra.rpki-client.org