Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wVsnXr4UjwdV2qZ9c8UJydJunzI.roa
File: wVsnXr4UjwdV2qZ9c8UJydJunzI.roa (raw, json)
Hash identifier: ky96ZblMi4GxZRALwW38yLo8Dz/uStyGG38UqrDRg/w=
Subject key identifier: C1:5B:27:5E:BE:14:8F:07:55:DA:A6:7D:73:C5:09:C9:D2:6E:9F:32
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01924E0081AF7999871BB334581969E4645E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wVsnXr4UjwdV2qZ9c8UJydJunzI.roa
Signing time: Wed 02 Oct 2024 16:11:48 +0000
ROA not before: Wed 02 Oct 2024 16:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.81.152.0/22 maxlen: 24
45.90.238.0/24 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:00:81:af:79:99:87:1b:b3:34:58:19:69:e4:64:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 2 16:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c15b275ebe148f0755daa67d73c509c9d26e9f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:4b:24:c0:15:89:5d:a1:51:7e:d0:e3:64:
a3:a2:0c:b2:dc:ed:4e:b1:96:9e:d9:6a:ae:53:7a:
e5:63:62:39:38:0e:ad:cd:da:22:85:5d:ed:77:95:
53:2a:7f:42:2c:f1:8d:86:bf:19:6d:97:2b:d9:ec:
93:fb:56:bb:98:19:36:f6:e7:b2:5f:09:34:07:a4:
09:ad:98:55:fb:e0:c8:94:c3:09:df:3f:47:69:a6:
4f:43:7e:09:f9:c6:49:42:e9:3b:61:24:21:7b:4a:
6d:39:ea:b9:1b:e3:4b:13:8c:f6:61:ad:60:cc:7b:
24:2f:91:56:70:c8:b2:b8:fa:3f:30:04:f5:1b:3c:
c4:a6:d3:85:1a:8d:61:5d:0a:f0:66:6a:d3:80:d5:
64:e2:dd:9d:c7:c5:4b:1c:42:da:b1:09:58:3a:7a:
8e:97:e2:e5:4f:53:06:f9:c0:c3:ce:69:b7:af:b3:
9e:27:04:9c:50:ec:80:35:8a:90:6c:39:cf:98:01:
9d:33:b6:1f:a2:1d:eb:18:f8:71:a4:3e:ac:8b:b4:
dc:a2:0d:09:01:ec:93:bd:78:ac:00:48:2a:ac:b8:
a5:1b:17:91:42:63:c5:78:b9:a4:34:7f:de:77:4e:
33:11:c4:9b:92:76:02:2a:9c:fb:e8:43:31:01:8a:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:27:5E:BE:14:8F:07:55:DA:A6:7D:73:C5:09:C9:D2:6E:9F:32
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wVsnXr4UjwdV2qZ9c8UJydJunzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.81.152.0/22
45.90.238.0/24
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.35.0/24
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
85:57:15:8f:5e:7e:15:31:35:a1:03:8a:37:8b:5d:7d:87:87:
2f:9c:0e:f0:a6:a8:69:72:35:4d:de:43:73:75:b1:6c:ec:3e:
bb:1d:af:f7:c9:5f:9b:64:61:7a:3e:65:28:f3:2f:93:87:af:
86:94:d6:c3:89:ec:f6:ba:26:9d:98:22:98:29:ce:07:07:13:
1f:15:59:8c:3f:55:14:8e:a4:83:a1:8b:3b:ea:58:d6:8a:26:
a6:17:8f:51:e8:8c:60:0f:1d:c7:12:51:02:f2:5e:52:5d:27:
0b:68:b9:24:71:9e:0b:89:12:39:05:33:09:eb:98:bf:c7:2f:
52:42:f3:84:c1:a8:e9:f4:39:e6:45:9a:c9:a2:d5:00:31:33:
8d:15:a5:1c:1b:0f:a7:81:d3:b5:70:ad:0b:44:41:5f:5b:b5:
c1:f4:35:49:1d:7f:56:6e:aa:3b:5c:53:49:01:ec:d1:77:6a:
b2:87:5d:3f:e5:13:d3:ae:a3:cc:2b:ea:c1:bd:52:6c:c8:97:
a5:3e:68:89:7b:75:37:a3:31:38:4d:7f:af:9a:a7:9f:53:f8:
f4:5c:0e:43:ab:9d:82:90:88:4a:e6:94:77:f2:0b:0a:2b:79:
b4:39:5f:f8:58:84:d8:1b:0c:d6:cb:8b:6e:b8:8e:7a:ba:e1:
6d:f0:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:05:35 2024 by rpki-client on console-fra.rpki-client.org