Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/mD6XLwWcnGls81lNEhUR-Nrvyq4.roa
File: mD6XLwWcnGls81lNEhUR-Nrvyq4.roa (raw, json)
Hash identifier: 0oWe0OxYutBDRk5TYTarE5W5YsrdKpi6dxbdx7u8nV8=
Subject key identifier: 98:3E:97:2F:05:9C:9C:69:6C:F3:59:4D:12:15:11:F8:DA:EF:CA:AE
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 01901B8F4CEEC2F5FD16942DA5BDF133A191
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/mD6XLwWcnGls81lNEhUR-Nrvyq4.roa
Signing time: Sat 15 Jun 2024 11:01:34 +0000
ROA not before: Sat 15 Jun 2024 11:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210079
IP address blocks: 5.35.100.0/24 maxlen: 24
5.35.101.0/24 maxlen: 24
5.35.102.0/24 maxlen: 24
37.143.8.0/23 maxlen: 23
37.143.10.0/23 maxlen: 23
37.143.12.0/23 maxlen: 23
37.143.14.0/23 maxlen: 23
46.254.16.0/23 maxlen: 23
46.254.18.0/23 maxlen: 23
46.254.20.0/23 maxlen: 23
46.254.22.0/24 maxlen: 24
46.254.23.0/24 maxlen: 24
91.201.40.0/22 maxlen: 22
91.218.228.0/23 maxlen: 23
91.218.230.0/23 maxlen: 23
95.181.224.0/24 maxlen: 24
95.181.225.0/24 maxlen: 24
95.181.226.0/24 maxlen: 24
95.181.227.0/24 maxlen: 24
95.181.228.0/24 maxlen: 24
95.181.229.0/24 maxlen: 24
95.181.230.0/24 maxlen: 24
95.181.231.0/24 maxlen: 24
95.183.8.0/23 maxlen: 23
95.183.10.0/24 maxlen: 24
95.183.11.0/24 maxlen: 24
95.183.12.0/24 maxlen: 24
95.183.13.0/24 maxlen: 24
95.183.14.0/24 maxlen: 24
95.183.15.0/24 maxlen: 24
178.57.216.0/23 maxlen: 23
178.57.218.0/23 maxlen: 23
178.57.220.0/23 maxlen: 23
178.57.222.0/23 maxlen: 23
178.217.100.0/24 maxlen: 24
178.217.101.0/24 maxlen: 24
185.11.246.0/23 maxlen: 23
185.12.92.0/22 maxlen: 22
185.12.92.0/24 maxlen: 24
185.12.93.0/24 maxlen: 24
185.12.94.0/24 maxlen: 24
185.12.95.0/24 maxlen: 24
185.22.232.0/23 maxlen: 23
185.22.234.0/23 maxlen: 23
185.87.192.0/24 maxlen: 24
185.87.193.0/24 maxlen: 24
185.87.194.0/24 maxlen: 24
185.87.195.0/24 maxlen: 24
185.87.196.0/24 maxlen: 24
185.87.197.0/24 maxlen: 24
185.87.198.0/24 maxlen: 24
185.87.199.0/24 maxlen: 24
185.221.152.0/22 maxlen: 22
185.221.154.0/24 maxlen: 24
185.221.155.0/24 maxlen: 24
212.8.247.0/24 maxlen: 24
217.144.96.0/24 maxlen: 24
217.144.97.0/24 maxlen: 24
217.144.98.0/24 maxlen: 24
217.144.99.0/24 maxlen: 24
217.144.100.0/24 maxlen: 24
217.144.101.0/24 maxlen: 24
217.144.103.0/24 maxlen: 24
2a03:80c0::/48 maxlen: 48
2a03:80c0:1::/48 maxlen: 48
2a03:c980:db::/48 maxlen: 48
2a03:c980:e5::/48 maxlen: 48
2a03:c980:5fb5::/48 maxlen: 48
2a03:c980:5fb7::/48 maxlen: 48
2a03:c980:b239::/48 maxlen: 48
2a03:c980:b916::/48 maxlen: 48
2a03:c980:b957::/48 maxlen: 48
2a03:c980:beef::/48 maxlen: 48
2a03:c980:d990::/48 maxlen: 48
2a03:c980:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:8f:4c:ee:c2:f5:fd:16:94:2d:a5:bd:f1:33:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Jun 15 11:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=983e972f059c9c696cf3594d121511f8daefcaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:22:24:88:08:04:2d:92:c5:ba:cf:84:13:
95:04:bc:ac:6d:7a:a8:e4:28:7a:f7:23:06:4e:9c:
32:75:5c:49:da:3e:a9:53:81:91:ba:18:cd:2a:d0:
21:80:fa:a2:99:09:a4:ab:5d:ea:94:b8:90:7c:16:
b0:cc:89:08:39:5f:bf:63:c4:fa:16:65:bb:bc:67:
a4:2a:d6:cf:8d:30:2e:d5:22:d8:1f:ab:30:87:3a:
d0:be:a3:b3:16:a9:43:74:82:35:72:5f:d9:88:63:
ac:52:f5:cd:72:96:7d:ee:b3:ba:74:39:95:06:42:
14:03:e9:2c:1a:dc:35:a8:6c:34:71:7d:94:b9:fe:
19:d7:45:32:65:25:86:02:49:37:f0:b5:45:8c:49:
93:89:25:1c:3d:12:67:7e:a7:e3:29:f5:87:d2:49:
24:53:50:ad:12:28:a8:d9:55:55:7b:69:37:72:59:
3f:91:78:d7:82:0e:dc:8e:5d:ce:62:dc:1e:0e:e8:
9d:1e:cb:f0:d5:a0:c5:47:63:de:c9:22:34:f5:62:
de:59:ed:d0:da:3b:d0:19:1b:e1:79:12:a6:19:77:
7b:6a:9b:51:d9:ad:62:24:64:ce:3f:d6:60:05:b0:
1e:3e:de:06:57:7b:a6:cd:8e:82:2a:98:e1:97:45:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:97:2F:05:9C:9C:69:6C:F3:59:4D:12:15:11:F8:DA:EF:CA:AE
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/mD6XLwWcnGls81lNEhUR-Nrvyq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.100.0-5.35.102.255
37.143.8.0/21
46.254.16.0/21
91.201.40.0/22
91.218.228.0/22
95.181.224.0/21
95.183.8.0/21
178.57.216.0/21
178.217.100.0/23
185.11.246.0/23
185.12.92.0/22
185.22.232.0/22
185.87.192.0/21
185.221.152.0/22
212.8.247.0/24
217.144.96.0-217.144.101.255
217.144.103.0/24
IPv6:
2a03:80c0::/47
2a03:c980:db::/48
2a03:c980:e5::/48
2a03:c980:5fb5::/48
2a03:c980:5fb7::/48
2a03:c980:b239::/48
2a03:c980:b916::/48
2a03:c980:b957::/48
2a03:c980:beef::/48
2a03:c980:d990::/48
2a03:c980:dead::/48
Signature Algorithm: sha256WithRSAEncryption
a7:bd:60:a0:35:2c:61:bc:22:27:62:bd:96:1a:aa:0a:c8:ce:
3a:30:1b:73:f3:be:1f:3b:28:b9:52:8a:56:33:cf:94:6d:55:
23:16:ce:b0:9f:c7:ac:41:b4:fe:f6:f0:a9:38:76:7a:ad:76:
04:59:5d:b5:3b:16:67:1e:fb:0b:1a:9b:61:9c:15:01:cf:71:
29:0a:40:15:fb:34:a5:73:33:dc:96:e6:46:c9:2a:00:24:9f:
23:64:1a:aa:cc:2a:09:14:9d:22:b9:a4:44:0f:73:7c:d6:ec:
82:e5:d8:f6:9d:6f:2b:95:71:0a:59:48:0d:17:b3:56:82:d0:
55:8e:fb:0e:93:99:21:64:7f:1b:b6:fd:29:7d:a1:54:0d:47:
a1:ae:0c:5c:85:25:2e:cd:0b:a0:2b:2e:61:f9:57:14:d9:a5:
c7:2f:2b:a1:fb:9f:14:99:f8:ef:84:ef:50:86:8f:39:21:8b:
0a:e2:22:85:98:3a:3e:93:23:1b:23:a4:c6:f9:8e:c1:6d:ea:
07:ef:8b:4c:e5:01:87:63:46:e0:71:64:32:f7:bf:3d:59:1b:
a1:47:d0:b0:26:51:67:5b:ca:42:d7:6b:93:b1:ea:24:1f:f0:
51:78:86:63:31:a5:cd:c1:5c:2c:1a:50:8e:8e:0d:eb:35:cb:
bd:82:0d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:52:21 2024 by rpki-client on console-ams.rpki-client.org