Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/58cB_X50v8ynym-th3yG33AYFvQ.roa
File: 58cB_X50v8ynym-th3yG33AYFvQ.roa (raw, json)
Hash identifier: 5Fo22lS4X4jhmCFQNpvjFApqZukFdwhcRMLgJ90xQtQ=
Subject key identifier: E7:C7:01:FD:7E:74:BF:CC:A7:CA:6F:AD:87:7C:86:DF:70:18:16:F4
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0190540ECD2BC4BA9ECAC8470FD4487B52BC
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/58cB_X50v8ynym-th3yG33AYFvQ.roa
Signing time: Wed 26 Jun 2024 10:19:34 +0000
ROA not before: Wed 26 Jun 2024 10:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:0e:cd:2b:c4:ba:9e:ca:c8:47:0f:d4:48:7b:52:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jun 26 10:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7c701fd7e74bfcca7ca6fad877c86df701816f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:44:f5:dd:7e:44:38:02:2f:88:18:9a:86:
17:98:0f:43:d1:74:3a:df:cc:28:32:9c:c2:78:07:
dc:ec:c5:c6:fd:31:79:07:67:b0:cf:39:ce:5a:79:
d4:3a:2d:02:21:13:ec:d0:cc:ab:79:2b:d5:81:8b:
ee:cd:ac:2f:8f:c8:a1:d4:82:af:fb:28:b4:8b:53:
40:89:71:2e:e7:86:83:6f:1f:fa:35:78:ff:98:24:
a3:73:ea:31:62:81:e5:ce:0e:1f:47:3b:f3:e0:ce:
e0:f6:f1:1d:38:61:1b:8a:96:af:eb:04:26:94:42:
bf:a5:eb:3f:d9:2d:f2:53:35:7d:ca:62:5b:77:f9:
74:08:35:48:7c:d9:cf:13:28:a6:ff:85:db:93:ed:
ac:13:ef:c3:9e:42:ab:95:ff:88:33:17:de:27:a7:
9e:31:25:de:2f:e0:7c:44:db:bc:3a:b7:c2:5c:1d:
ab:6b:18:a8:48:a1:a0:f2:66:dc:5d:34:64:18:3d:
4f:e4:a2:6d:e0:ba:b8:b5:48:04:c0:c9:d0:10:47:
95:a5:f5:e9:5b:9f:83:fa:14:e3:b5:6a:5d:41:d3:
c1:53:06:2f:50:94:d1:5f:6d:1b:bf:44:7c:c4:93:
d7:a9:9b:51:6e:ce:c4:bc:7c:54:bf:93:99:37:d1:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:01:FD:7E:74:BF:CC:A7:CA:6F:AD:87:7C:86:DF:70:18:16:F4
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/58cB_X50v8ynym-th3yG33AYFvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
23:29:d0:b4:5c:8e:68:89:1a:62:bd:fe:f4:0a:a1:bb:af:c3:
0f:6d:aa:cf:8b:53:5d:8f:39:06:63:f9:3b:9d:c5:a8:9a:de:
75:51:f2:2f:35:a6:1d:84:25:64:dd:e4:ac:b5:55:7b:63:43:
a1:a6:0d:1b:62:3e:24:5d:8a:1b:d3:72:9b:e4:f9:ad:b8:c1:
52:09:5a:1e:f7:90:6c:49:21:6a:48:91:91:d3:34:17:f3:62:
8a:52:23:9e:22:59:a0:6d:41:d1:3c:48:ff:ed:1c:cd:57:85:
a9:ff:71:d2:f4:eb:75:1e:95:02:52:28:34:15:7d:90:e9:6e:
10:1b:93:e5:1b:fb:4a:95:cd:d5:0b:8d:c5:34:37:6c:a6:9b:
fc:9f:73:12:67:b4:b3:f5:e9:6a:d9:db:cb:d9:63:ea:65:75:
41:b2:78:7d:95:bf:51:61:a3:a4:17:71:9b:66:65:cc:f2:c4:
6e:a9:e2:74:0f:1d:b6:f5:af:a2:66:d6:66:51:0a:31:d9:6a:
c1:af:69:98:d2:99:a3:d5:49:84:b2:04:1a:b5:78:66:fa:55:
ef:0e:6e:73:69:7b:df:0b:c5:cc:90:e9:52:58:23:c4:f2:cd:
b7:8f:74:3c:09:52:bf:5c:71:14:f7:5e:98:9b:30:22:95:e0:
cb:c1:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:13:30 2024 by rpki-client on console-ams.rpki-client.org