Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/dKE-BsujfHGsgV3nDv3SJfNo7nI.roa
File: dKE-BsujfHGsgV3nDv3SJfNo7nI.roa (raw, json)
Hash identifier: j5TR5zzU+cGdaDI51gfABZtPYqzPEsJqoFOuQ+h3cLE=
Subject key identifier: 74:A1:3E:06:CB:A3:7C:71:AC:81:5D:E7:0E:FD:D2:25:F3:68:EE:72
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 018CC79339FA2AF8E41171A8C91A02659886
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/dKE-BsujfHGsgV3nDv3SJfNo7nI.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 86.6.0.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
86.20.0.0/16 maxlen: 16
82.20.0.0/14 maxlen: 14
80.235.192.0/18 maxlen: 18
77.101.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.0.0/16 maxlen: 16
80.235.128.0/18 maxlen: 18
80.235.128.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
80.194.0.0/15 maxlen: 15
92.234.128.0/17 maxlen: 17
82.32.0.0/16 maxlen: 16
82.32.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
81.100.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
82.32.0.0/12 maxlen: 12
86.5.128.0/17 maxlen: 17
193.39.64.0/24 maxlen: 24
82.46.0.0/15 maxlen: 15
82.45.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
193.193.96.0/19 maxlen: 19
193.193.96.0/20 maxlen: 20
193.193.112.0/20 maxlen: 20
82.44.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
81.98.0.0/15 maxlen: 15
77.98.0.0/15 maxlen: 15
80.192.0.0/15 maxlen: 15
80.192.0.0/14 maxlen: 14
86.4.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
82.4.0.0/14 maxlen: 14
92.233.0.0/16 maxlen: 16
86.16.0.0/13 maxlen: 13
82.16.0.0/13 maxlen: 13
217.137.128.0/17 maxlen: 17
82.43.0.0/16 maxlen: 16
86.16.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
77.97.0.0/16 maxlen: 16
92.232.0.0/16 maxlen: 16
92.232.0.0/15 maxlen: 15
194.117.146.0/24 maxlen: 24
62.30.0.0/16 maxlen: 16
62.30.0.0/15 maxlen: 15
77.96.0.0/13 maxlen: 13
86.2.0.0/15 maxlen: 15
77.96.0.0/17 maxlen: 17
77.96.0.0/16 maxlen: 16
81.96.0.0/15 maxlen: 15
81.96.0.0/14 maxlen: 14
81.96.0.0/12 maxlen: 12
77.96.128.0/17 maxlen: 17
217.137.0.0/17 maxlen: 17
81.110.0.0/15 maxlen: 15
217.137.0.0/16 maxlen: 16
82.28.0.0/14 maxlen: 14
86.0.0.0/11 maxlen: 11
82.0.0.0/11 maxlen: 11
86.1.0.0/16 maxlen: 16
82.42.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
80.0.0.0/13 maxlen: 17
86.0.0.0/13 maxlen: 13
82.0.0.0/13 maxlen: 13
81.108.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
86.0.0.0/16 maxlen: 16
86.0.0.0/15 maxlen: 15
86.0.0.0/14 maxlen: 14
82.0.0.0/14 maxlen: 14
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
86.14.0.0/15 maxlen: 15
82.41.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
86.13.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
62.255.64.0/18 maxlen: 18
94.175.0.0/16 maxlen: 16
195.188.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
82.40.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
213.107.128.0/17 maxlen: 17
80.255.192.0/19 maxlen: 19
62.255.192.0/18 maxlen: 18
86.12.0.0/17 maxlen: 17
86.12.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.12.0.0/14 maxlen: 14
193.39.32.0/19 maxlen: 19
193.39.32.0/20 maxlen: 20
213.106.128.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
86.12.128.0/17 maxlen: 17
193.39.48.0/20 maxlen: 20
62.254.192.0/18 maxlen: 18
94.174.0.0/16 maxlen: 16
94.174.0.0/15 maxlen: 15
213.105.128.0/17 maxlen: 17
193.38.64.0/19 maxlen: 19
193.38.64.0/18 maxlen: 18
94.173.0.0/17 maxlen: 17
94.173.0.0/16 maxlen: 16
62.253.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
82.38.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
213.106.0.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
62.254.64.0/18 maxlen: 18
81.106.0.0/15 maxlen: 15
193.38.96.0/19 maxlen: 19
62.254.0.0/18 maxlen: 18
62.254.0.0/17 maxlen: 17
62.253.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
62.252.192.0/18 maxlen: 18
86.24.0.0/13 maxlen: 13
82.24.0.0/13 maxlen: 13
212.24.64.0/20 maxlen: 20
212.24.64.0/19 maxlen: 19
212.24.80.0/20 maxlen: 20
82.24.0.0/14 maxlen: 14
213.105.0.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.0.0/14 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
86.10.0.0/17 maxlen: 17
86.10.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
213.104.0.0/16 maxlen: 16
81.104.0.0/15 maxlen: 15
62.252.64.0/18 maxlen: 18
194.117.144.0/20 maxlen: 20
213.104.0.0/14 maxlen: 14
81.104.0.0/14 maxlen: 14
77.103.0.0/16 maxlen: 16
86.8.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
86.9.0.0/16 maxlen: 16
213.48.64.0/18 maxlen: 18
212.250.128.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.0.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
77.102.0.0/16 maxlen: 16
81.102.0.0/15 maxlen: 15
77.102.0.0/15 maxlen: 15
82.8.0.0/13 maxlen: 13
86.8.0.0/13 maxlen: 13
213.48.192.0/18 maxlen: 18
86.8.0.0/17 maxlen: 17
86.8.0.0/16 maxlen: 16
86.21.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
82.35.0.0/16 maxlen: 16
213.48.128.0/17 maxlen: 17
82.8.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
86.7.0.0/16 maxlen: 16
92.236.0.0/14 maxlen: 14
82.34.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
194.168.128.0/17 maxlen: 17
212.250.0.0/17 maxlen: 17
212.250.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.0.0/16 maxlen: 16
2a02:88fe:8::/46 maxlen: 46
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:39:fa:2a:f8:e4:11:71:a8:c9:1a:02:65:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74a13e06cba37c71ac815de70efdd225f368ee72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:c3:38:a4:ff:ed:df:fc:56:ed:b1:26:9a:
dd:58:b1:2a:93:88:d4:06:00:8f:bb:23:a6:c5:27:
65:6c:0f:0b:96:5c:4f:bd:b6:09:9f:50:fb:36:5f:
5e:27:64:1a:15:ec:d7:db:60:56:f2:40:cb:cd:f7:
1e:f9:ec:1b:cd:fb:90:93:a8:b0:b3:33:fa:57:14:
7a:8f:c3:fe:36:50:b3:bd:79:82:9d:7e:97:de:d9:
c1:94:83:ee:c8:50:5c:65:2b:f6:24:86:17:01:54:
6f:f0:79:93:ca:bc:4c:a3:fb:4e:77:c3:3d:dc:63:
99:4d:cc:29:6b:8e:9c:7c:df:4e:92:7e:bb:cc:3b:
47:cb:d4:a8:df:d3:c3:0f:85:27:10:bc:65:86:02:
c3:5e:12:f5:59:8a:71:df:28:18:71:49:39:a7:80:
57:ee:df:70:45:62:9e:cd:1b:d7:44:92:29:20:80:
c5:01:2d:04:75:02:78:3f:18:db:94:df:32:76:4e:
7f:27:4e:31:97:a3:02:b5:16:72:29:f8:35:f9:09:
00:4f:ca:c1:aa:27:a4:03:25:05:fc:fa:ef:53:73:
f3:30:b1:ca:bc:3e:e7:57:50:14:0d:fd:cc:c6:7d:
93:9c:1a:f9:13:51:57:fa:2b:6e:2f:d0:a7:59:e1:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:3E:06:CB:A3:7C:71:AC:81:5D:E7:0E:FD:D2:25:F3:68:EE:72
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/dKE-BsujfHGsgV3nDv3SJfNo7nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
80.255.192.0/19
81.96.0.0/12
82.0.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
bd:b6:7f:f1:2a:e4:be:dd:4a:34:56:19:fa:15:b5:23:b7:3c:
4f:ce:ca:5e:13:43:41:18:4b:00:50:b9:8a:4d:79:62:67:29:
aa:38:28:54:6e:ff:23:0c:94:c2:af:8b:fd:a8:5a:b1:89:5b:
42:86:93:41:ba:23:a9:12:ce:93:66:51:54:09:cd:54:dc:a1:
ae:88:ce:83:bc:08:1c:d7:ba:d2:5f:21:a5:08:04:08:aa:e8:
40:a1:52:ef:01:ec:6a:b8:8f:b2:ec:fa:d9:2e:58:4a:0b:20:
7a:c7:d7:1a:17:c8:48:23:65:2f:98:ce:b0:7a:7a:18:70:d7:
0f:67:5b:a8:4f:d8:e2:87:d7:a3:5f:15:ca:b2:9b:f0:38:fd:
6d:2e:f9:32:ff:6a:48:ef:f2:57:45:9f:a4:4b:a5:51:40:7b:
56:e5:da:3f:a2:6a:a0:99:d3:48:36:5c:2a:09:09:26:e6:15:
6a:9e:7c:0f:65:b0:54:a1:d0:f3:a5:d3:4b:35:39:b7:cc:ff:
94:24:7d:bf:91:b9:97:b7:4b:10:51:42:b7:cb:08:21:3b:be:
f6:16:53:09:e5:25:1e:14:ec:57:0c:3d:7d:61:27:5e:68:a3:
51:1f:a8:ce:b1:80:61:de:d9:3c:a7:12:47:39:c7:06:7b:f9:
ce:11:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:52:00 2024 by rpki-client on console-ams.rpki-client.org