Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OjpeN_q96ANHZ1voduxivr6todA.roa
File: OjpeN_q96ANHZ1voduxivr6todA.roa (raw, json)
Hash identifier: YJ53pSRI7GnnB8a/4TYN3UIrd9qqz+hLFGRVUuq3c8o=
Subject key identifier: 3A:3A:5E:37:FA:BD:E8:03:47:67:5B:E8:76:EC:62:BE:BE:AD:A1:D0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018DA17C1C67CBFB366C7ECE2E3A26763417
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OjpeN_q96ANHZ1voduxivr6todA.roa
Signing time: Tue 13 Feb 2024 08:01:21 +0000
ROA not before: Tue 13 Feb 2024 08:01:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31195
IP address blocks: 31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.235.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.190.0/24 maxlen: 24
37.28.191.0/24 maxlen: 24
37.29.43.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.224.0/23 maxlen: 23
83.169.226.0/24 maxlen: 24
83.169.227.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.230.0/24 maxlen: 24
85.26.240.0/22 maxlen: 22
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.74.0/24 maxlen: 24
178.178.75.0/24 maxlen: 24
178.178.76.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
2a03:d006::/40 maxlen: 40
2a03:d006:100::/40 maxlen: 40
2a03:d006:200::/40 maxlen: 40
2a03:d006:300::/40 maxlen: 40
2a03:d006:400::/40 maxlen: 40
2a03:d006:500::/40 maxlen: 40
2a03:d006:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:7c:1c:67:cb:fb:36:6c:7e:ce:2e:3a:26:76:34:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Feb 13 08:01:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a3a5e37fabde80347675be876ec62bebeada1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:d9:49:bc:25:cc:04:d3:fa:46:ac:67:9d:
3f:80:3a:b9:1e:5f:cf:27:bc:a8:6f:75:db:be:d0:
08:bf:04:d7:b9:8d:9a:f8:a6:78:4c:c9:c0:dd:f8:
c8:7e:6c:7d:96:a3:e9:7e:b7:3d:c0:8d:60:be:9f:
15:de:b0:b1:a2:0b:07:eb:b8:c6:e2:12:44:b1:f1:
f1:62:bf:5c:9e:a9:95:cf:5d:1c:e8:5e:d1:8f:b9:
82:a0:38:10:23:29:02:f3:03:69:e3:cc:bc:f8:c6:
6c:ac:5b:4b:40:89:ed:89:d2:c1:0a:2a:7a:61:23:
66:21:73:d0:9a:f1:c3:42:77:11:3f:eb:e5:06:2e:
3e:f0:18:f1:5a:00:a9:29:92:79:c4:d7:12:e3:0e:
2d:de:31:9e:fd:eb:f8:28:94:28:fa:62:73:ec:74:
77:ef:40:94:7d:1d:5c:45:d2:05:d3:50:c6:99:36:
7f:c1:3c:81:e9:30:9c:26:dd:5e:4a:79:82:24:1b:
8d:e7:a9:55:2d:f4:62:12:dc:0b:c9:14:14:9a:61:
37:07:03:28:88:36:bb:e0:db:14:3b:df:32:be:20:
2b:d3:d7:94:71:94:ad:80:b0:23:94:df:53:46:ea:
83:d6:aa:de:98:28:32:de:59:9b:77:6e:73:a0:b9:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:5E:37:FA:BD:E8:03:47:67:5B:E8:76:EC:62:BE:BE:AD:A1:D0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OjpeN_q96ANHZ1voduxivr6todA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.76.255
188.170.228.0-188.170.237.255
188.170.239.0/24
IPv6:
2a03:d006::-2a03:d006:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:96:a9:62:e4:cb:d7:3d:37:f0:ac:8d:7c:7a:83:12:a9:60:
34:78:76:59:ca:f0:fe:a6:d2:07:07:d5:ff:38:ed:6e:3d:07:
82:28:21:8c:ba:66:fb:d2:87:6c:09:be:fe:83:d4:0e:d3:6b:
dc:24:34:77:b5:5c:76:de:9b:f7:f8:62:7c:95:20:92:1c:cf:
b4:46:50:88:a5:74:2a:b8:5a:75:fb:d3:87:1b:e2:46:2e:ab:
39:d7:65:d4:6c:fb:c3:96:5f:bc:aa:bb:e9:9e:0c:69:48:47:
42:55:43:57:11:25:ea:bc:3d:c8:5d:a7:48:06:fa:0d:64:66:
ff:49:88:3a:4d:06:4e:0f:b8:c9:38:df:0e:a4:14:ac:d8:a4:
7d:3d:cd:77:1e:9f:67:04:fd:45:40:52:f0:04:8f:23:13:07:
a7:f0:79:f6:44:87:18:0d:b6:9b:83:4b:79:80:4e:80:a4:b6:
2e:ea:e6:0a:87:6f:1b:b2:48:76:60:2c:23:e0:58:6f:d2:8d:
6c:60:e8:75:d4:58:3f:e7:0f:47:bf:56:f4:40:0c:d0:68:81:
d2:7a:2c:20:bc:5c:8b:8c:a0:16:19:bb:8a:bd:b8:b2:27:91:
57:b1:00:1b:c9:bd:d7:7d:12:cd:ea:b8:fe:a6:97:fe:ee:d6:
7e:fd:05:30
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAY2hfBxny/s2bH7OLjomdjQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMjEzMDgwMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTNhNWUzN2ZhYmRlODAzNDc2NzViZTg3NmVjNjJiZWJlYWRhMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFzZSbwlzATT+kasZ50/gDq5Hl/P
J7yob3XbvtAIvwTXuY2a+KZ4TMnA3fjIfmx9lqPpfrc9wI1gvp8V3rCxogsH67jG
4hJEsfHxYr9cnqmVz10c6F7Rj7mCoDgQIykC8wNp48y8+MZsrFtLQIntidLBCip6
YSNmIXPQmvHDQncRP+vlBi4+8BjxWgCpKZJ5xNcS4w4t3jGe/ev4KJQo+mJz7HR3
70CUfR1cRdIF01DGmTZ/wTyB6TCcJt1eSnmCJBuN56lVLfRiEtwLyRQUmmE3BwMo
iDa74NsUO98yviAr09eUcZStgLAjlN9TRuqD1qremCgy3lmbd25zoLm3AQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFDo6Xjf6vegDR2db6HbsYr6+raHQMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvT2pwZU5fcTk2QU5IWjF2b2R1eGl2cjZ0b2RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBrQQCAAEwgaYDBAIf
rYQDBAAfrY8wDAMEAB+t4QMEAB+t4jAMAwQCH63kAwQBH63oMAwDBAAfresDBAQf
reADBAIlHLwDBAAlHSsDBAMlHVgDBAJOGXwDBAJTlTQwDAMEBVOp4AMEAFOp5gME
A1Ua8DAMAwQAsrDpAwQCsrDoMAwDBAayskADBACyskQwDAMEAbKyRgMEALKyTDAM
AwQCvKrkAwQBvKrsAwQAvKrvMBcEAgACMBEwDwMFASoD0AYDBgAqA9AGBjANBgkq
hkiG9w0BAQsFAAOCAQEAqZapYuTL1z038KyNfHqDEqlgNHh2Wcrw/qbSBwfV/zjt
bj0HgighjLpm+9KHbAm+/oPUDtNr3CQ0d7Vcdt6b9/hifJUgkhzPtEZQiKV0Krha
dfvThxviRi6rOddl1Gz7w5ZfvKq76Z4MaUhHQlVDVxEl6rw9yF2nSAb6DWRm/0mI
Ok0GTg+4yTjfDqQUrNikfT3Ndx6fZwT9RUBS8ASPIxMHp/B59kSHGA22m4NLeYBO
gKS2LurmCodvG7JIdmAsI+BYb9KNbGDoddRYP+cPR79W9EAM0GiB0nosILxci4yg
Fhm7ir24sieRV7EAG8m9130Szeq4/qaX/u7Wfv0FMA==
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:42:27 2024 by rpki-client on console-fra.rpki-client.org