Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Xye5_EOiaCZP2CpeBr_Ub-ss2bY.roa
File: Xye5_EOiaCZP2CpeBr_Ub-ss2bY.roa (raw, json)
Hash identifier: 4vUskcztMX7wz/g2TBZWUWX9aKuuGpFz8/pf6Hep5ns=
Subject key identifier: 5F:27:B9:FC:43:A2:68:26:4F:D8:2A:5E:06:BF:D4:6F:EB:2C:D9:B6
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 018E6172503ADE22EB516EB0C79E1D066784
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Xye5_EOiaCZP2CpeBr_Ub-ss2bY.roa
Signing time: Thu 21 Mar 2024 14:37:45 +0000
ROA not before: Thu 21 Mar 2024 14:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29687
IP address blocks: 77.71.0.0/20 maxlen: 20
77.71.0.0/22 maxlen: 22
77.71.0.0/23 maxlen: 23
77.71.0.0/24 maxlen: 24
77.71.1.0/24 maxlen: 24
77.71.2.0/23 maxlen: 23
77.71.2.0/24 maxlen: 24
77.71.3.0/24 maxlen: 24
77.71.4.0/22 maxlen: 22
77.71.4.0/23 maxlen: 23
77.71.4.0/24 maxlen: 24
77.71.5.0/24 maxlen: 24
77.71.6.0/23 maxlen: 23
77.71.6.0/24 maxlen: 24
77.71.7.0/24 maxlen: 24
77.71.8.0/22 maxlen: 22
77.71.8.0/23 maxlen: 23
77.71.8.0/24 maxlen: 24
77.71.9.0/24 maxlen: 24
77.71.10.0/23 maxlen: 23
77.71.10.0/24 maxlen: 24
77.71.11.0/24 maxlen: 24
77.71.12.0/22 maxlen: 22
77.71.12.0/23 maxlen: 23
77.71.12.0/24 maxlen: 24
77.71.13.0/24 maxlen: 24
77.71.14.0/23 maxlen: 23
77.71.14.0/24 maxlen: 24
77.71.15.0/24 maxlen: 24
77.71.16.0/20 maxlen: 20
77.71.16.0/21 maxlen: 21
77.71.16.0/22 maxlen: 22
77.71.16.0/23 maxlen: 23
77.71.18.0/23 maxlen: 23
77.71.20.0/22 maxlen: 22
77.71.20.0/23 maxlen: 23
77.71.22.0/23 maxlen: 23
77.71.24.0/21 maxlen: 21
77.71.24.0/22 maxlen: 22
77.71.24.0/23 maxlen: 23
77.71.26.0/23 maxlen: 23
77.71.28.0/22 maxlen: 22
77.71.28.0/23 maxlen: 23
77.71.30.0/23 maxlen: 23
77.71.32.0/20 maxlen: 20
77.71.32.0/21 maxlen: 21
77.71.32.0/22 maxlen: 22
77.71.32.0/24 maxlen: 24
77.71.33.0/24 maxlen: 24
77.71.34.0/24 maxlen: 24
77.71.35.0/24 maxlen: 24
77.71.36.0/22 maxlen: 22
77.71.36.0/24 maxlen: 24
77.71.37.0/24 maxlen: 24
77.71.38.0/24 maxlen: 24
77.71.39.0/24 maxlen: 24
77.71.40.0/21 maxlen: 21
77.71.40.0/22 maxlen: 22
77.71.40.0/24 maxlen: 24
77.71.41.0/24 maxlen: 24
77.71.42.0/24 maxlen: 24
77.71.43.0/24 maxlen: 24
77.71.44.0/22 maxlen: 22
77.71.44.0/24 maxlen: 24
77.71.45.0/24 maxlen: 24
77.71.46.0/24 maxlen: 24
77.71.47.0/24 maxlen: 24
77.71.48.0/21 maxlen: 21
77.71.48.0/22 maxlen: 22
77.71.48.0/24 maxlen: 24
77.71.49.0/24 maxlen: 24
77.71.50.0/24 maxlen: 24
77.71.51.0/24 maxlen: 24
77.71.52.0/22 maxlen: 22
77.71.52.0/24 maxlen: 24
77.71.53.0/24 maxlen: 24
77.71.54.0/24 maxlen: 24
77.71.55.0/24 maxlen: 24
77.71.56.0/21 maxlen: 21
77.71.56.0/22 maxlen: 22
77.71.56.0/24 maxlen: 24
77.71.57.0/24 maxlen: 24
77.71.58.0/24 maxlen: 24
77.71.59.0/24 maxlen: 24
77.71.60.0/22 maxlen: 22
77.71.60.0/24 maxlen: 24
77.71.61.0/24 maxlen: 24
77.71.62.0/24 maxlen: 24
77.71.63.0/24 maxlen: 24
77.71.64.0/21 maxlen: 21
77.71.64.0/22 maxlen: 22
77.71.64.0/24 maxlen: 24
77.71.65.0/24 maxlen: 24
77.71.66.0/24 maxlen: 24
77.71.67.0/24 maxlen: 24
77.71.68.0/22 maxlen: 22
77.71.68.0/24 maxlen: 24
77.71.69.0/24 maxlen: 24
77.71.70.0/24 maxlen: 24
77.71.71.0/24 maxlen: 24
77.71.72.0/22 maxlen: 22
77.71.72.0/23 maxlen: 23
77.71.72.0/24 maxlen: 24
77.71.73.0/24 maxlen: 24
77.71.74.0/23 maxlen: 23
77.71.74.0/24 maxlen: 24
77.71.75.0/24 maxlen: 24
77.71.76.0/22 maxlen: 22
77.71.76.0/23 maxlen: 23
77.71.76.0/24 maxlen: 24
77.71.77.0/24 maxlen: 24
77.71.78.0/23 maxlen: 23
77.71.78.0/24 maxlen: 24
77.71.79.0/24 maxlen: 24
77.71.80.0/22 maxlen: 22
77.71.80.0/23 maxlen: 23
77.71.82.0/23 maxlen: 23
77.71.82.0/24 maxlen: 24
77.71.83.0/24 maxlen: 24
77.71.84.0/22 maxlen: 22
77.71.84.0/23 maxlen: 23
77.71.84.0/24 maxlen: 24
77.71.85.0/24 maxlen: 24
77.71.86.0/23 maxlen: 23
77.71.86.0/24 maxlen: 24
77.71.87.0/24 maxlen: 24
77.71.88.0/21 maxlen: 21
77.71.88.0/22 maxlen: 22
77.71.88.0/23 maxlen: 23
77.71.90.0/23 maxlen: 23
77.71.92.0/22 maxlen: 22
77.71.92.0/23 maxlen: 23
77.71.94.0/24 maxlen: 24
77.71.95.0/24 maxlen: 24
77.71.97.0/24 maxlen: 24
77.71.98.0/23 maxlen: 23
77.71.98.0/24 maxlen: 24
77.71.99.0/24 maxlen: 24
77.71.100.0/22 maxlen: 22
77.71.100.0/23 maxlen: 23
77.71.100.0/24 maxlen: 24
77.71.101.0/24 maxlen: 24
77.71.102.0/23 maxlen: 23
77.71.102.0/24 maxlen: 24
77.71.103.0/24 maxlen: 24
77.71.104.0/21 maxlen: 21
77.71.104.0/22 maxlen: 22
77.71.104.0/23 maxlen: 23
77.71.104.0/24 maxlen: 24
77.71.105.0/24 maxlen: 24
77.71.106.0/23 maxlen: 23
77.71.106.0/24 maxlen: 24
77.71.107.0/24 maxlen: 24
77.71.108.0/22 maxlen: 22
77.71.108.0/23 maxlen: 23
77.71.108.0/24 maxlen: 24
77.71.109.0/24 maxlen: 24
77.71.110.0/23 maxlen: 23
77.71.110.0/24 maxlen: 24
77.71.111.0/24 maxlen: 24
77.71.116.0/23 maxlen: 23
77.71.116.0/24 maxlen: 24
77.71.117.0/24 maxlen: 24
77.71.118.0/23 maxlen: 23
77.71.118.0/24 maxlen: 24
77.71.119.0/24 maxlen: 24
77.71.120.0/23 maxlen: 23
77.71.120.0/24 maxlen: 24
77.71.121.0/24 maxlen: 24
77.71.122.0/23 maxlen: 23
77.71.122.0/24 maxlen: 24
77.71.123.0/24 maxlen: 24
77.71.124.0/23 maxlen: 23
77.71.124.0/24 maxlen: 24
77.71.125.0/24 maxlen: 24
77.71.126.0/23 maxlen: 23
77.71.126.0/24 maxlen: 24
77.71.127.0/24 maxlen: 24
185.186.136.0/22 maxlen: 22
185.186.136.0/23 maxlen: 23
185.186.136.0/24 maxlen: 24
185.186.137.0/24 maxlen: 24
185.186.138.0/23 maxlen: 23
185.186.138.0/24 maxlen: 24
185.186.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:72:50:3a:de:22:eb:51:6e:b0:c7:9e:1d:06:67:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Mar 21 14:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f27b9fc43a268264fd82a5e06bfd46feb2cd9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:11:4b:1b:a1:40:fd:70:f1:04:b5:d2:5b:
b7:48:2f:c3:8e:de:e0:c2:08:c0:75:bb:1d:d1:fa:
5d:89:aa:b7:b8:c1:cf:21:ca:09:ee:73:e6:29:8b:
87:a7:0e:d5:f0:78:c4:46:80:c7:0a:78:f8:9e:32:
e2:1d:72:99:f2:8e:00:47:11:78:6b:4a:f6:48:d2:
73:5f:78:95:10:04:1a:5f:72:05:74:ad:e9:52:0d:
f5:df:ec:ec:87:62:7a:85:53:1c:ca:24:5a:78:61:
72:8f:af:5f:0a:a3:55:6b:ad:9e:6b:a0:4b:74:27:
e3:75:da:2a:fc:cd:98:27:a8:14:39:88:72:b8:93:
0d:66:9b:bd:42:c3:f2:61:e8:57:58:4d:c6:03:66:
1f:e7:2e:f6:58:c4:0d:d4:5f:a3:18:0f:fe:cc:49:
0d:c5:61:f5:eb:82:db:76:df:74:73:6e:e4:cc:ed:
56:ba:bf:ad:dc:36:8f:5f:53:9c:24:cd:77:7e:90:
7f:8a:27:04:23:f8:ad:d2:f9:24:82:ed:bd:6c:a5:
4f:5c:49:cc:d3:1d:f9:f9:00:ff:8e:61:45:59:6d:
d5:58:cb:e0:72:7e:8e:cf:4f:7a:f2:45:a7:71:b3:
b7:12:db:4d:72:9c:39:b6:2d:32:1f:38:a4:fb:52:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:27:B9:FC:43:A2:68:26:4F:D8:2A:5E:06:BF:D4:6F:EB:2C:D9:B6
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Xye5_EOiaCZP2CpeBr_Ub-ss2bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.0.0-77.71.95.255
77.71.97.0-77.71.111.255
77.71.116.0-77.71.127.255
185.186.136.0/22
Signature Algorithm: sha256WithRSAEncryption
61:d7:3c:48:9a:45:b2:f4:09:9e:2b:98:83:90:31:7a:67:5d:
1c:6a:cb:dc:c0:11:61:d0:9d:03:bf:d4:1d:18:a0:6c:41:4f:
40:9c:6a:5d:5c:d0:79:79:30:01:12:f9:93:a4:0d:70:1e:c1:
81:06:56:1e:ce:6f:2a:fa:76:f5:da:10:fa:c5:e0:d9:55:e0:
ac:40:ca:53:ef:34:d4:7f:59:ad:3b:0d:4d:f7:fb:10:90:1a:
92:88:3a:b0:bf:50:b1:79:ce:f5:3b:0b:bb:07:8f:31:eb:e0:
d6:25:bf:70:8d:1f:08:7a:6a:7c:70:3c:49:c0:f3:5c:b8:29:
d2:93:2f:b8:8a:96:03:8f:ac:33:aa:a2:50:dd:bf:4c:b0:6d:
2b:8e:c6:d8:35:09:7b:0a:49:c7:46:76:22:f5:8f:6a:cc:7f:
3e:d2:a9:f4:e5:66:89:4a:d4:54:f2:00:7c:28:6e:36:0c:88:
88:71:57:76:63:ac:08:eb:bf:51:15:4a:78:04:1a:26:29:a1:
5d:56:2a:12:fa:ab:58:6f:7e:bf:65:26:fa:46:da:ea:6f:04:
e0:87:2f:f8:e0:e6:13:89:79:43:77:39:5a:d6:19:78:98:21:
0e:51:b6:0e:d0:3f:54:7d:8f:6a:6f:4c:41:aa:13:33:64:93:
55:dc:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:54:42 2024 by rpki-client on console-fra.rpki-client.org