Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ZDEmjno7uOTfiAv7_68GZgkoqrA.roa
File: ZDEmjno7uOTfiAv7_68GZgkoqrA.roa (raw, json)
Hash identifier: Dc99xh82wPj1JNnh9bGlwE6dSb0ViqV6zPFh46lsqJs=
Subject key identifier: 64:31:26:8E:7A:3B:B8:E4:DF:88:0B:FB:FF:AF:06:66:09:28:AA:B0
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 01900600BC11FBFB97945947CCDE474D42C4
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ZDEmjno7uOTfiAv7_68GZgkoqrA.roa
Signing time: Tue 11 Jun 2024 06:33:49 +0000
ROA not before: Tue 11 Jun 2024 06:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 66.81.160.0/21 maxlen: 21
66.81.168.0/21 maxlen: 21
66.81.176.0/21 maxlen: 21
66.81.184.0/21 maxlen: 21
67.218.224.0/21 maxlen: 21
67.218.232.0/21 maxlen: 21
67.218.240.0/21 maxlen: 21
67.218.248.0/21 maxlen: 21
78.30.0.0/21 maxlen: 21
78.30.8.0/21 maxlen: 21
78.30.16.0/21 maxlen: 21
78.30.24.0/21 maxlen: 21
78.30.32.0/20 maxlen: 20
78.30.48.0/20 maxlen: 20
81.0.0.0/20 maxlen: 20
81.0.16.0/20 maxlen: 20
82.213.192.0/20 maxlen: 20
82.213.208.0/20 maxlen: 20
82.213.224.0/19 maxlen: 19
83.138.40.0/21 maxlen: 21
84.39.176.0/21 maxlen: 21
85.31.128.0/22 maxlen: 22
85.31.132.0/22 maxlen: 22
85.235.68.0/22 maxlen: 22
85.239.128.0/22 maxlen: 22
85.239.132.0/22 maxlen: 22
89.35.62.0/23 maxlen: 23
89.39.52.0/24 maxlen: 24
91.106.16.0/21 maxlen: 21
91.194.62.0/23 maxlen: 23
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.115.152.0/24 maxlen: 24
93.115.202.0/24 maxlen: 24
93.115.242.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
93.177.120.0/22 maxlen: 23
94.73.32.0/19 maxlen: 19
119.12.224.0/22 maxlen: 22
119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/22 maxlen: 22
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.236.0/22 maxlen: 22
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/22 maxlen: 22
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.248.0/22 maxlen: 22
119.12.248.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.252.0/23 maxlen: 23
119.12.254.0/23 maxlen: 23
137.59.58.0/24 maxlen: 24
170.253.0.0/20 maxlen: 20
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
178.218.194.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
185.79.20.0/22 maxlen: 22
185.145.64.0/22 maxlen: 22
185.146.56.0/22 maxlen: 22
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
185.176.4.0/22 maxlen: 22
185.197.240.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
185.197.242.0/23 maxlen: 23
185.227.212.0/23 maxlen: 23
185.227.214.0/23 maxlen: 23
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
185.252.12.0/22 maxlen: 22
188.65.88.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
188.212.23.0/24 maxlen: 24
193.53.160.0/22 maxlen: 22
193.177.208.0/22 maxlen: 22
195.160.224.0/22 maxlen: 22
206.204.128.0/23 maxlen: 23
206.204.130.0/23 maxlen: 23
206.204.132.0/23 maxlen: 23
206.204.134.0/24 maxlen: 24
206.204.136.0/23 maxlen: 23
206.204.150.0/23 maxlen: 23
206.204.156.0/22 maxlen: 22
207.188.128.0/21 maxlen: 21
207.188.130.0/24 maxlen: 24
207.188.136.0/21 maxlen: 21
207.188.144.0/21 maxlen: 21
207.188.152.0/21 maxlen: 21
207.188.160.0/21 maxlen: 21
207.188.168.0/21 maxlen: 21
207.188.176.0/21 maxlen: 21
207.188.184.0/21 maxlen: 21
212.14.96.0/19 maxlen: 23
212.230.136.0/24 maxlen: 24
212.230.156.0/24 maxlen: 24
212.231.112.0/21 maxlen: 21
212.231.120.0/22 maxlen: 22
212.231.124.0/22 maxlen: 22
213.94.0.0/18 maxlen: 23
213.177.192.0/19 maxlen: 21
217.113.240.0/20 maxlen: 22
2a00:d100::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:1000::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:2000::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:3000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:4000::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d100:7000::/37 maxlen: 37
2a00:d100:7800::/37 maxlen: 37
2a00:d100:8000::/37 maxlen: 37
2a00:d100:8800::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d102:3000::/37 maxlen: 37
2a00:d102:3800::/37 maxlen: 37
2a00:d102:4000::/37 maxlen: 37
2a00:d102:4800::/37 maxlen: 37
2a00:d102:5000::/37 maxlen: 37
2a00:d102:5800::/37 maxlen: 37
2a00:d103::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
2a01:8480:2001::/48 maxlen: 48
2a01:8480:2002::/48 maxlen: 48
2a01:8480:2003::/48 maxlen: 48
2a01:8480:2004::/48 maxlen: 48
2a01:8480:2008::/47 maxlen: 47
2a01:8480:200a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:00:bc:11:fb:fb:97:94:59:47:cc:de:47:4d:42:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jun 11 06:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6431268e7a3bb8e4df880bfbffaf06660928aab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:25:74:1c:62:8c:d9:82:1f:dc:bc:93:ae:
a4:11:a3:9a:9f:56:db:2c:4e:4d:ad:d5:27:c1:8e:
a6:26:3b:36:6e:65:84:64:9f:13:cd:f9:f6:b9:3f:
9f:4d:be:76:a1:d7:d4:52:ca:33:30:74:58:40:25:
9c:76:a5:8d:82:4d:44:67:9b:04:80:64:35:ee:1a:
6c:90:15:3c:3d:7f:a5:fc:72:95:26:07:3c:4c:4f:
5e:be:33:20:e1:26:cd:f2:ff:17:7f:5a:4b:0c:f7:
b7:49:72:60:d0:d6:5d:1b:b6:a0:1f:0a:40:c7:b1:
47:c6:50:e4:18:c1:a2:01:40:5d:63:77:0f:f8:7b:
32:f3:2b:41:bb:a9:9b:6f:85:bd:7d:d1:c3:a9:2f:
9c:e3:85:be:b0:59:78:43:53:01:6e:dd:4f:0c:d4:
06:48:d4:23:c2:83:0d:d5:6f:bb:63:3a:2e:20:0f:
67:7a:e0:7e:e9:5e:ac:47:7e:51:b9:90:f2:36:32:
ca:23:1a:e9:dd:8f:97:b0:b2:ae:e7:a7:55:db:64:
c7:ff:63:6f:b3:89:45:d8:8a:c7:d3:df:dd:b3:fb:
ee:a8:82:91:8b:ea:a3:fc:7b:5a:73:27:a5:10:c7:
43:79:45:d9:5c:72:3b:04:64:a2:e5:d8:91:ab:84:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:26:8E:7A:3B:B8:E4:DF:88:0B:FB:FF:AF:06:66:09:28:AA:B0
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ZDEmjno7uOTfiAv7_68GZgkoqrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.81.160.0/19
67.218.224.0/19
78.30.0.0/18
81.0.0.0/19
82.213.192.0/18
83.138.40.0/21
84.39.176.0/21
85.31.128.0/21
85.235.68.0/22
85.239.128.0/21
89.35.62.0/23
89.39.52.0/24
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0/19
137.59.58.0/24
170.253.0.0/18
178.218.194.0/24
181.41.128.0/21
185.79.20.0/22
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.176.4.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.65.88.0/21
188.208.219.0/24
188.212.23.0/24
193.53.160.0/22
193.177.208.0/22
195.160.224.0/22
206.204.128.0-206.204.134.255
206.204.136.0/23
206.204.150.0/23
206.204.156.0/22
207.188.128.0/18
212.14.96.0/19
212.230.136.0/24
212.230.156.0/24
212.231.112.0/20
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:8fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:37ff:ffff:ffff:ffff:ffff:ffff
2a00:d101:4000::/36
2a00:d102::-2a00:d102:5fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
8c:3f:81:e6:71:02:59:db:4c:4a:11:1c:1d:8b:4b:61:79:8a:
c4:dd:c1:39:38:81:2e:77:31:ba:5e:6f:0e:aa:c3:1b:40:ea:
d8:f0:60:fe:21:1b:8b:9d:8b:98:1c:a6:95:48:d0:87:5c:72:
e3:fe:8e:23:5d:a6:92:ee:78:2b:38:30:d4:3f:71:08:b8:94:
a3:ca:3e:20:0b:89:94:b8:10:9b:05:da:df:c8:ae:7c:7a:dc:
6b:a4:fb:ce:d6:18:82:f4:d9:08:70:fe:49:03:72:72:b3:7d:
e8:6c:79:14:4e:5c:ae:d0:d4:1f:d5:c4:21:6f:e3:25:1f:2e:
e2:eb:bd:a0:88:61:6a:84:42:33:96:26:df:12:39:db:4e:b9:
0c:50:cf:bf:24:c8:b0:7c:7b:15:15:b9:88:4b:61:34:e0:d6:
79:b4:a7:a5:9f:36:e1:0c:d4:c4:98:30:53:f3:53:25:8f:c8:
3d:c5:70:e3:74:4b:d7:a0:e9:4c:2a:46:c7:20:df:3e:cf:0f:
11:9b:fe:6b:06:c9:2a:4e:a4:d5:ef:11:97:d3:ae:24:2e:e1:
ab:4e:ff:e4:bf:eb:ca:e6:1c:4b:33:ae:cc:d1:05:ee:7d:fd:
41:d5:c6:b1:fd:b8:e6:cd:c0:e4:75:7d:c7:7f:fe:fe:ce:49:
4b:f4:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:03:24 2024 by rpki-client on console-ams.rpki-client.org