Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/h4ZFfVQMa9gZ7oJOd9k6jbUcqBc.roa
File: h4ZFfVQMa9gZ7oJOd9k6jbUcqBc.roa (raw, json)
Hash identifier: HiyIDpU8RjPZav31NGag1jtx+/jQ5iXWkXfrHVEc2Bs=
Subject key identifier: 87:86:45:7D:54:0C:6B:D8:19:EE:82:4E:77:D9:3A:8D:B5:1C:A8:17
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 018F0B6CC4BD94A0930435D3EF316E0F63F9
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/h4ZFfVQMa9gZ7oJOd9k6jbUcqBc.roa
Signing time: Tue 23 Apr 2024 14:47:08 +0000
ROA not before: Tue 23 Apr 2024 14:47:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.110.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.212.0/22 maxlen: 22
185.23.214.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:6c:c4:bd:94:a0:93:04:35:d3:ef:31:6e:0f:63:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Apr 23 14:47:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8786457d540c6bd819ee824e77d93a8db51ca817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:b8:1d:79:fb:00:91:59:32:82:1d:05:a4:
89:19:12:0f:62:03:df:90:f9:3a:9c:a9:f7:7a:d6:
46:48:aa:1c:58:85:6e:14:a5:ef:23:e0:49:5e:25:
6e:f3:e7:8d:1b:1b:a1:62:53:ac:8d:6e:01:6d:84:
11:95:48:e6:8a:22:ef:3f:63:e3:f2:c7:b6:18:8e:
3f:e6:44:3d:8e:31:77:cc:9c:4e:c5:26:7f:72:e5:
c1:a3:6f:c8:29:4b:d6:80:bb:dc:6e:b1:3d:bf:10:
54:84:b7:8b:b6:d4:d1:cc:19:d1:d1:a4:49:5e:3e:
38:f4:9a:af:6a:34:a8:08:d4:2b:69:bf:fc:e3:83:
04:b7:98:6d:c6:b7:ab:42:43:5a:7c:20:bd:4a:dd:
f8:4b:ad:5c:54:a1:ac:82:59:89:e5:0b:72:22:88:
64:db:20:e2:59:b5:05:25:80:34:3c:3a:77:16:63:
52:bc:92:a0:ca:62:20:6a:01:fc:15:63:2e:00:f6:
c0:f0:c5:bb:10:0d:5b:db:17:1f:b3:31:a8:63:37:
c3:9a:f9:9c:d7:d3:6a:65:38:1e:ac:13:89:9f:ca:
05:17:e7:37:bb:76:05:76:6d:d1:4a:06:01:4b:48:
a4:4c:b9:91:4d:6e:ce:81:77:c2:1b:30:40:52:a8:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:86:45:7D:54:0C:6B:D8:19:EE:82:4E:77:D9:3A:8D:B5:1C:A8:17
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/h4ZFfVQMa9gZ7oJOd9k6jbUcqBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.210.0/24
45.133.250.0/24
109.202.98.0-109.202.104.255
109.202.106.0-109.202.111.255
109.232.224.0/23
109.232.227.0-109.232.231.255
134.19.176.0/20
185.23.212.0/22
188.95.49.0/24
188.95.51.0-188.95.53.255
213.152.160.0-213.152.174.255
213.152.176.0/23
213.152.180.0/23
213.152.183.0-213.152.191.255
IPv6:
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5afe::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
18:0b:89:e6:a4:b3:b6:b3:7c:d4:40:e3:f9:e8:7f:9f:ce:ea:
5c:19:4b:c9:28:35:ee:93:25:81:87:0f:98:d5:c8:7a:81:65:
81:32:33:af:ef:29:08:64:76:69:26:15:f3:ca:00:81:33:e0:
27:6b:ca:51:6a:46:cc:09:32:d4:b8:b2:55:22:db:18:24:a9:
6f:d0:d6:8a:70:2d:d9:f8:c6:99:39:be:52:67:16:b0:26:5d:
54:97:f7:6d:dc:8d:0b:ba:5f:ad:68:30:ce:06:36:3e:86:1b:
4c:1b:24:1d:69:46:74:b8:54:ad:da:85:3d:b6:24:7f:76:b1:
45:48:89:27:c7:3e:49:ca:fa:45:1b:f1:af:bb:2b:b1:54:c4:
51:60:e6:bc:ae:80:58:21:00:f4:10:3c:8d:e7:54:27:95:3d:
df:29:7d:fb:94:14:07:cf:07:e9:32:2a:2a:1e:ab:21:88:3c:
61:d6:62:ff:e4:4e:da:73:ae:84:4e:b2:5c:83:0e:4a:af:d8:
16:ce:fe:01:b9:b7:d3:80:e0:86:85:0b:2d:5f:0f:26:54:0f:
63:70:53:a9:55:03:45:1a:cb:bb:c4:50:21:55:9f:1e:c1:2a:
10:c5:54:7a:a9:62:5f:c2:40:40:32:3b:88:08:d6:d9:fa:de:
2f:53:0b:5f
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAY8LbMS9lKCTBDXT7zFuD2P5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3
M2E0MTMwHhcNMjQwNDIzMTQ0NzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Nzg2NDU3ZDU0MGM2YmQ4MTllZTgyNGU3N2Q5M2E4ZGI1MWNhODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyG4HXn7AJFZMoIdBaSJGRIPYgPf
kPk6nKn3etZGSKocWIVuFKXvI+BJXiVu8+eNGxuhYlOsjW4BbYQRlUjmiiLvP2Pj
8se2GI4/5kQ9jjF3zJxOxSZ/cuXBo2/IKUvWgLvcbrE9vxBUhLeLttTRzBnR0aRJ
Xj449JqvajSoCNQrab/844MEt5htxrerQkNafCC9St34S61cVKGsglmJ5QtyIohk
2yDiWbUFJYA0PDp3FmNSvJKgymIgagH8FWMuAPbA8MW7EA1b2xcfszGoYzfDmvmc
19NqZTgerBOJn8oFF+c3u3YFdm3RSgYBS0ikTLmRTW7OgXfCGzBAUqjCAwIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFIeGRX1UDGvYGe6CTnfZOo21HKgXMB8GA1UdIwQY
MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt
M2JmMDRhMmE5M2Q4LzEvaDRaRmZWUU1hOWdaN29KT2Q5azZqYlVjcUJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4
LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwgYsEAgABMIGEAwQA
JXvSAwQALYX6MAwDBAFtymIDBABtymgwDAMEAW3KagMEBG3KYAMEAW3o4DAMAwQA
bejjAwQDbejgAwQEhhOwAwQCuRfUAwQAvF8xMAwDBAC8XzMDBAG8XzQwDAMEBdWY
oAMEANWYrgMEAdWYsAMEAdWYtDAMAwQA1Zi3AwQG1ZiAMGAEAgACMFoDBwAqABZ4
EzcDBwAqABZ4JHADBwAqABZ4PMADBwAqABZ4Wv4DBwAqABZ4sAsDBwAqABZ4uroD
BwAqABZ42noDBwAqABZ43qEDBwAqABZ476UDBwAqABZ4+hEwDQYJKoZIhvcNAQEL
BQADggEBABgLieaks7azfNRA4/nof5/O6lwZS8koNe6TJYGHD5jVyHqBZYEyM6/v
KQhkdmkmFfPKAIEz4CdrylFqRswJMtS4slUi2xgkqW/Q1opwLdn4xpk5vlJnFrAm
XVSX923cjQu6X61oMM4GNj6GG0wbJB1pRnS4VK3ahT22JH92sUVIiSfHPknK+kUb
8a+7K7FUxFFg5ryugFghAPQQPI3nVCeVPd8pffuUFAfPB+kyKioeqyGIPGHWYv/k
TtpzroROslyDDkqv2BbO/gG5t9OA4IaFCy1fDyZUD2NwU6lVA0Uay7vEUCFVnx7B
KhDFVHqpYl/CQEAyO4gI1tn63i9TC18=
-----END CERTIFICATE-----
Generated at Wed May 8 14:08:16 2024 by rpki-client on console-fra.rpki-client.org