Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/HZGWKsAQvD3EquTmeH_I-UqOfQQ.roa
File: HZGWKsAQvD3EquTmeH_I-UqOfQQ.roa (raw, json)
Hash identifier: XpK/pYxmZzNFXhUH0PHl1R4ZKEyA3Ln/nXn1boZgvto=
Subject key identifier: 1D:91:96:2A:C0:10:BC:3D:C4:AA:E4:E6:78:7F:C8:F9:4A:8E:7D:04
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01927A680C36E24D1D73187E8CC6A517E784
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/HZGWKsAQvD3EquTmeH_I-UqOfQQ.roa
Signing time: Fri 11 Oct 2024 07:08:11 +0000
ROA not before: Fri 11 Oct 2024 07:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:68:0c:36:e2:4d:1d:73:18:7e:8c:c6:a5:17:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Oct 11 07:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d91962ac010bc3dc4aae4e6787fc8f94a8e7d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:85:45:a1:93:c5:e5:77:14:fc:a3:fa:2e:
e0:d5:16:a5:8c:3a:ed:f8:32:85:43:50:93:80:d1:
c5:2f:9c:03:e3:2b:3b:9a:a9:7e:15:52:74:85:8c:
6c:16:c4:a7:be:de:c6:de:d0:43:67:dd:03:16:74:
76:4b:d4:0d:c1:14:70:53:34:a3:32:8e:81:6a:a8:
9b:3d:9c:01:4b:38:9e:92:8f:fb:5a:25:9b:cb:ff:
1e:ba:c8:b3:05:94:96:28:48:32:02:92:6f:34:56:
a9:37:cd:38:53:a9:56:21:55:14:ea:2f:22:05:8f:
d5:a9:a1:0c:a0:b9:fb:c9:a6:22:3a:de:17:95:e6:
0d:c7:aa:e2:62:d9:1e:b9:2c:db:d0:15:83:f4:f4:
4e:7e:3b:18:6e:14:2b:8f:24:c6:10:db:bc:97:a2:
f2:4f:17:a0:e3:fa:93:ef:5a:1a:8d:d2:1b:ee:90:
c0:71:d0:b7:9f:df:bd:17:ad:b0:6c:b6:6f:64:a3:
9f:0b:45:55:df:7b:7f:7c:3c:26:8d:99:77:cd:5e:
62:b8:d1:c9:2b:ed:b9:e4:56:b0:19:9f:43:15:76:
66:3c:82:7d:8c:ef:51:53:eb:9b:eb:7c:22:21:5a:
89:07:78:12:fa:e4:77:a2:a0:8d:e2:35:75:54:d8:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:96:2A:C0:10:BC:3D:C4:AA:E4:E6:78:7F:C8:F9:4A:8E:7D:04
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/HZGWKsAQvD3EquTmeH_I-UqOfQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0-89.252.150.255
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
19:ac:5c:9c:6b:f3:ba:01:22:08:f2:9a:8b:10:9b:3c:c2:8a:
ee:fa:af:6f:bb:a8:a6:9e:40:87:f2:1a:b2:65:f9:65:49:70:
34:08:7c:c3:5e:62:c9:71:02:73:ca:ca:1f:ec:91:c7:c3:26:
24:03:91:ae:5d:88:e2:44:28:f8:68:ca:e6:4a:6f:03:47:0a:
1a:03:f1:4b:67:cf:3a:5c:dc:63:21:00:33:c0:12:6d:ab:09:
6a:d5:f0:b2:e4:8f:27:83:f7:f7:8d:25:e5:65:19:1d:2a:48:
8e:5d:a2:33:3c:cd:3d:e5:0b:47:68:27:8e:50:e0:05:87:1a:
8f:4e:6c:ce:3e:d9:47:7c:ed:d0:7c:bc:56:d5:88:7d:03:74:
ec:c5:96:34:37:0b:87:12:5c:75:87:a2:25:d0:0d:98:94:09:
12:d2:5f:de:b2:b5:a0:1c:27:c2:3d:6c:b7:dd:70:93:3e:e3:
81:32:5a:75:c3:89:b5:fe:e1:37:20:18:39:fe:0e:b2:88:76:
6b:5c:5e:ef:d4:29:62:b6:c6:45:4c:4a:33:e1:25:5c:ae:f3:
01:f1:53:5c:e8:6e:fc:fb:e7:54:38:19:df:34:9f:f6:8b:e1:
8f:1e:ca:f3:1a:db:c8:6e:cb:d3:a6:50:43:12:10:f0:43:07:
93:7b:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:50:49 2024 by rpki-client on console-ams.rpki-client.org