Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/MylO8aNYZfKzJiIMjUYUJbfp080.roa
File: MylO8aNYZfKzJiIMjUYUJbfp080.roa (raw, json)
Hash identifier: q+Yr5hjRF9C1DhhK8csxsGVR1U7U0fR3djwtL7QvWL8=
Subject key identifier: 33:29:4E:F1:A3:58:65:F2:B3:26:22:0C:8D:46:14:25:B7:E9:D3:CD
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019247291A0C0404632E5E9ACCF980BB3BB9
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/MylO8aNYZfKzJiIMjUYUJbfp080.roa
Signing time: Tue 01 Oct 2024 08:18:48 +0000
ROA not before: Tue 01 Oct 2024 08:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
80.255.192.0/19 maxlen: 19
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.12.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
82.16.0.0/15 maxlen: 15
82.18.0.0/15 maxlen: 15
82.20.0.0/16 maxlen: 16
82.20.0.0/17 maxlen: 17
82.20.128.0/17 maxlen: 17
82.28.0.0/16 maxlen: 16
82.28.0.0/17 maxlen: 17
82.28.128.0/17 maxlen: 17
82.30.0.0/15 maxlen: 15
82.30.0.0/16 maxlen: 16
82.31.0.0/16 maxlen: 16
82.32.0.0/12 maxlen: 12
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
82.38.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
82.40.0.0/16 maxlen: 16
82.41.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
82.46.0.0/15 maxlen: 15
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:29:1a:0c:04:04:63:2e:5e:9a:cc:f9:80:bb:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Oct 1 08:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33294ef1a35865f2b326220c8d461425b7e9d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:e2:f5:27:a9:9c:05:65:ba:f2:d2:58:9c:
81:ed:60:98:cd:12:e5:35:79:21:3b:71:cc:3f:db:
ce:e4:09:79:3f:ed:db:ab:ea:c3:6c:19:57:90:4d:
04:eb:a5:50:50:e4:f4:f9:d8:44:7f:af:3c:a7:0c:
ee:e2:d3:ae:90:40:b3:a0:c3:d5:d8:f4:7e:ce:6c:
a8:ea:f4:ce:76:c8:6d:a0:be:a1:25:74:bb:53:b7:
1f:23:cc:1c:49:d2:76:23:7b:a2:96:6e:34:f3:d3:
ee:c9:f9:f0:dd:4e:82:d5:25:5f:98:90:c4:56:2c:
f9:f3:a4:ee:f6:6d:cb:9b:66:94:87:e6:d8:71:0b:
01:0f:78:47:ba:69:dc:59:34:c3:de:49:57:87:92:
25:9c:f8:ff:c7:66:fa:f6:af:a8:48:2c:ca:c5:6f:
0f:93:d5:64:9a:09:bf:e8:4d:99:19:d5:bb:79:e8:
84:c6:c2:af:f9:5a:49:a3:15:4f:77:05:34:96:32:
db:78:d1:56:0e:ad:6f:ab:25:1a:b2:79:b0:ea:e4:
80:e6:3f:fe:79:97:88:6f:a6:db:08:f7:f7:15:a6:
cb:53:e6:cb:1b:32:fd:dc:1c:59:69:67:72:78:dd:
b9:ea:30:f2:26:7e:aa:e6:db:a9:ff:0a:1c:e7:fe:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:29:4E:F1:A3:58:65:F2:B3:26:22:0C:8D:46:14:25:B7:E9:D3:CD
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/MylO8aNYZfKzJiIMjUYUJbfp080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
80.255.192.0/19
81.96.0.0/12
82.0.0.0-82.20.255.255
82.28.0.0/16
82.30.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
dc:d3:8f:19:ba:1b:e7:08:33:e1:36:9c:c0:65:85:8d:7b:a6:
0a:55:99:8a:42:72:8d:35:57:c4:3f:49:ac:bf:e1:f9:54:96:
99:27:31:ea:13:96:35:2a:84:b3:12:3e:e3:7d:e7:b0:69:a7:
f7:5f:2f:57:e9:47:f0:49:ba:65:3a:69:6e:89:52:1e:14:ff:
b1:23:80:71:cd:cb:ef:ed:70:fd:e3:ba:de:cb:d1:8c:ba:9e:
ee:68:f2:d5:d5:2b:ce:47:61:32:b0:ab:c3:8d:0f:cb:0d:0b:
cd:e4:fa:e3:96:9c:84:41:78:bb:e3:77:f1:b3:a6:09:4a:a2:
47:ba:b0:eb:cc:1c:b2:5d:26:f7:e9:2a:a2:61:d4:54:c9:8e:
8e:03:32:58:7c:f0:60:33:9e:d0:07:ba:bd:26:af:cb:f5:15:
9e:c1:d5:a4:24:01:00:1b:bb:dc:0b:5e:9c:d4:54:a3:a7:c1:
65:bb:dd:4b:62:16:da:3c:ea:00:2e:58:68:9a:4b:b6:4d:b7:
37:4e:0a:50:f3:ec:e0:46:4e:65:29:56:9c:88:cd:ea:49:3f:
76:35:76:19:aa:33:6d:ba:2c:b2:4a:28:49:4b:1a:4b:0e:55:
5a:77:13:3d:b1:db:c7:39:1e:5e:64:d5:08:9a:82:dc:c4:ee:
ad:7e:4a:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:31:03 2024 by rpki-client on console-fra.rpki-client.org