Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa
File: bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa (raw, json)
Hash identifier: vARwTHDByRNch/FCMqW59p/LzP0CiF5frUcfc8ikvnw=
Subject key identifier: 6E:67:D3:07:B4:0F:DA:C4:08:0E:99:D8:10:4B:AA:94:DE:1F:B6:63
Certificate issuer: /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial: 0194214421975373CF0A0F8090E060C22651
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205275
IP address blocks: 85.204.19.0/24 maxlen: 24
86.104.13.0/24 maxlen: 24
86.105.214.0/24 maxlen: 24
86.106.30.0/24 maxlen: 24
86.107.23.0/24 maxlen: 24
86.107.169.0/24 maxlen: 24
89.33.24.0/24 maxlen: 24
89.33.25.0/24 maxlen: 24
89.33.26.0/24 maxlen: 24
89.33.27.0/24 maxlen: 24
89.33.44.0/24 maxlen: 24
89.34.92.0/24 maxlen: 24
89.37.212.0/24 maxlen: 24
89.37.213.0/24 maxlen: 24
89.37.214.0/24 maxlen: 24
89.37.215.0/24 maxlen: 24
89.39.83.0/24 maxlen: 24
89.39.246.0/24 maxlen: 24
89.40.72.0/24 maxlen: 24
89.41.36.0/24 maxlen: 24
89.41.37.0/24 maxlen: 24
89.41.38.0/24 maxlen: 24
89.41.39.0/24 maxlen: 24
89.42.216.0/24 maxlen: 24
89.42.217.0/24 maxlen: 24
89.42.218.0/24 maxlen: 24
89.42.219.0/24 maxlen: 24
89.42.220.0/24 maxlen: 24
89.42.221.0/24 maxlen: 24
89.42.222.0/24 maxlen: 24
89.42.223.0/24 maxlen: 24
89.44.137.0/24 maxlen: 24
89.45.15.0/24 maxlen: 24
89.45.83.0/24 maxlen: 24
89.47.53.0/24 maxlen: 24
89.47.240.0/24 maxlen: 24
89.47.241.0/24 maxlen: 24
89.47.242.0/24 maxlen: 24
89.47.243.0/24 maxlen: 24
93.115.53.0/24 maxlen: 24
185.162.64.0/24 maxlen: 24
185.162.65.0/24 maxlen: 24
185.162.66.0/24 maxlen: 24
185.162.67.0/24 maxlen: 24
188.209.214.0/24 maxlen: 24
188.213.205.0/24 maxlen: 24
188.214.210.0/24 maxlen: 24
188.214.211.0/24 maxlen: 24
188.214.215.0/24 maxlen: 24
188.215.2.0/24 maxlen: 24
188.240.20.0/24 maxlen: 24
188.240.21.0/24 maxlen: 24
188.240.22.0/24 maxlen: 24
188.240.23.0/24 maxlen: 24
188.241.142.0/24 maxlen: 24
188.241.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:21:97:53:73:cf:0a:0f:80:90:e0:60:c2:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e67d307b40fdac4080e99d8104baa94de1fb663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:df:c7:c7:b9:b5:aa:87:1a:a8:83:c6:a5:
f4:76:98:a3:e2:a1:e5:dd:b4:03:d0:2f:f9:52:ff:
37:36:b6:c3:e6:10:8a:57:4c:8a:6c:4d:ae:39:26:
d3:5e:35:f0:58:99:9c:b4:a0:1e:ad:26:59:6d:77:
08:a8:0d:01:80:d0:00:cc:d4:1b:8c:d2:a4:b5:6a:
4a:1e:99:4d:29:27:38:28:36:6d:c2:4a:3e:45:5d:
54:0f:ae:1c:b0:91:a0:01:b9:84:02:77:ab:d7:7e:
8e:5d:0b:0f:60:7d:ab:b7:1f:3c:fb:c9:71:26:a3:
6a:03:42:9a:e9:00:a3:e5:ce:7e:42:ff:20:96:d0:
f3:3d:aa:65:34:bf:fa:1f:26:45:86:18:ad:d0:9e:
09:dc:4b:49:f4:b4:59:3f:bb:98:3d:f6:0b:fd:19:
52:3a:ef:cf:b4:99:bd:89:20:62:e7:c0:e2:8d:38:
12:b5:2b:12:06:e4:91:e8:ab:b0:62:f8:75:bd:6c:
24:5d:b7:bc:0f:25:16:9a:2c:09:16:96:87:a3:8f:
c2:0d:b4:29:cb:2a:97:d8:11:12:8b:ba:07:2b:b6:
85:dc:d4:4b:bf:4d:c7:64:36:6c:82:c7:d9:05:44:
01:4c:f2:bb:7a:38:d4:6b:ce:44:d5:45:a5:e1:9f:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:67:D3:07:B4:0F:DA:C4:08:0E:99:D8:10:4B:AA:94:DE:1F:B6:63
X509v3 Authority Key Identifier:
keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.19.0/24
86.104.13.0/24
86.105.214.0/24
86.106.30.0/24
86.107.23.0/24
86.107.169.0/24
89.33.24.0/22
89.33.44.0/24
89.34.92.0/24
89.37.212.0/22
89.39.83.0/24
89.39.246.0/24
89.40.72.0/24
89.41.36.0/22
89.42.216.0/21
89.44.137.0/24
89.45.15.0/24
89.45.83.0/24
89.47.53.0/24
89.47.240.0/22
93.115.53.0/24
185.162.64.0/22
188.209.214.0/24
188.213.205.0/24
188.214.210.0/23
188.214.215.0/24
188.215.2.0/24
188.240.20.0/22
188.241.142.0/24
188.241.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ac:d1:3d:22:4c:f4:82:5a:5a:09:6d:e2:ea:f5:95:26:0b:
46:ef:64:35:72:cc:c9:07:24:e9:68:54:1e:80:32:dc:97:41:
2c:d1:ee:ac:f3:69:82:e4:cb:f4:79:d1:23:de:2d:4b:68:42:
d3:71:db:5b:c2:51:31:32:95:d6:c7:3d:4a:3d:f8:d8:95:ee:
20:99:c0:a0:c0:80:c1:3c:2c:60:ff:0d:7c:b7:db:da:cf:71:
f3:50:56:c3:b4:d7:e0:6c:a6:f9:63:41:44:d0:bd:d0:aa:22:
ac:b5:0f:5d:71:01:ba:27:2d:cd:fe:3f:13:fa:f1:2e:fe:eb:
e2:5c:2a:f2:10:f5:20:4d:f5:ca:cf:d3:f0:bf:8d:7b:1c:76:
56:2e:4e:f0:c4:43:79:85:75:19:f4:7c:9e:e1:54:11:8c:d2:
5e:e1:be:2e:23:45:cf:01:5f:fa:b6:81:2d:44:03:3a:67:54:
96:68:b3:38:d9:00:db:d3:f6:70:6a:a1:82:e2:48:a8:5d:36:
f7:e6:cd:a4:e1:25:c7:8c:a4:b7:7c:82:70:4d:14:5b:37:f4:
5a:6c:d1:37:96:11:93:d6:d5:0c:99:bb:9f:eb:56:a2:66:e5:
5e:49:8a:4b:f1:3e:8d:8c:37:9d:26:a3:57:a7:b8:e0:e7:59:
0a:79:c9:49
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQhRCGXU3PPCg+AkOBgwiZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzM0NjFlOWQyYmRhZmNjMjlhZDkxODlmYjBhY2YxZjMz
OTYwYTkwHhcNMjUwMTAxMDk0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTY3ZDMwN2I0MGZkYWM0MDgwZTk5ZDgxMDRiYWE5NGRlMWZiNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFLfx8e5taqHGqiDxqX0dpij4qHl
3bQD0C/5Uv83NrbD5hCKV0yKbE2uOSbTXjXwWJmctKAerSZZbXcIqA0BgNAAzNQb
jNKktWpKHplNKSc4KDZtwko+RV1UD64csJGgAbmEAner136OXQsPYH2rtx88+8lx
JqNqA0Ka6QCj5c5+Qv8gltDzPaplNL/6HyZFhhit0J4J3EtJ9LRZP7uYPfYL/RlS
Ou/PtJm9iSBi58DijTgStSsSBuSR6KuwYvh1vWwkXbe8DyUWmiwJFpaHo4/CDbQp
yyqX2BESi7oHK7aF3NRLv03HZDZsgsfZBUQBTPK7ejjUa85E1UWl4Z/xWwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFG5n0we0D9rECA6Z2BBLqpTeH7ZjMB8GA1UdIwQY
MBaAFOgzRh6dK9r8wprZGJ+wrPHzOWCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMt
YWVmZThkMTc4ZTZhLzEvYm1mVEI3UVAyc1FJRHBuWUVFdXFsTjRmdG1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMtYWVmZThkMTc4ZTZh
LzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBABV
zBMDBABWaA0DBABWadYDBABWah4DBABWaxcDBABWa6kDBAJZIRgDBABZISwDBABZ
IlwDBAJZJdQDBABZJ1MDBABZJ/YDBABZKEgDBAJZKSQDBANZKtgDBABZLIkDBABZ
LQ8DBABZLVMDBABZLzUDBAJZL/ADBABdczUDBAK5okADBAC80dYDBAC81c0DBAG8
1tIDBAC81tcDBAC81wIDBAK88BQDBAC88Y4DBAC88ZgwDQYJKoZIhvcNAQELBQAD
ggEBACqs0T0iTPSCWloJbeLq9ZUmC0bvZDVyzMkHJOloVB6AMtyXQSzR7qzzaYLk
y/R50SPeLUtoQtNx21vCUTEyldbHPUo9+NiV7iCZwKDAgME8LGD/DXy329rPcfNQ
VsO01+BspvljQUTQvdCqIqy1D11xAbonLc3+PxP68S7+6+JcKvIQ9SBN9crP0/C/
jXscdlYuTvDEQ3mFdRn0fJ7hVBGM0l7hvi4jRc8BX/q2gS1EAzpnVJZoszjZANvT
9nBqoYLiSKhdNvfmzaThJceMpLd8gnBNFFs39Fps0TeWEZPW1QyZu5/rVqJm5V5J
ikvxPo2MN50mo1enuODnWQp5yUk=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:33 2025 by rpki-client