Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/yZ-kJcVnVw-jBC8bbpJ9j4e1ATg.roa
File: yZ-kJcVnVw-jBC8bbpJ9j4e1ATg.roa (raw, json)
Hash identifier: Ib21Nkp2+DoMLQvqaafBeZ/6ZFoSCLii+u8g7k88jY8=
Subject key identifier: C9:9F:A4:25:C5:67:57:0F:A3:04:2F:1B:6E:92:7D:8F:87:B5:01:38
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018DD48F28E2C2610D154B531C360762085F
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/yZ-kJcVnVw-jBC8bbpJ9j4e1ATg.roa
Signing time: Fri 23 Feb 2024 06:02:48 +0000
ROA not before: Fri 23 Feb 2024 06:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:8f:28:e2:c2:61:0d:15:4b:53:1c:36:07:62:08:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Feb 23 06:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c99fa425c567570fa3042f1b6e927d8f87b50138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:4d:d7:3d:4a:7d:8a:bc:fb:b4:46:cf:bf:
b8:ac:27:fb:c1:1b:a3:1b:aa:0c:fd:59:2f:73:ac:
0c:08:c7:3c:3b:79:a2:4d:59:09:95:da:4c:9e:bb:
3d:ea:29:12:58:83:2c:31:c1:ca:20:fa:e0:f6:c0:
5c:bf:69:46:e6:b7:46:99:75:aa:da:74:0d:41:88:
ce:b8:39:2d:37:d3:39:c5:cf:52:8c:ab:f7:7d:b8:
9e:c2:b0:3d:d9:ad:ef:ec:67:f7:8f:12:46:12:d5:
ef:ce:ba:66:1f:01:ee:e6:8d:1b:00:00:7a:97:2a:
8b:be:5e:74:bb:9f:84:2e:46:50:1e:2d:52:8b:21:
b6:e3:bf:35:ac:3f:5a:9a:9a:de:60:49:65:4c:8e:
9c:ab:5d:83:72:95:00:c2:22:26:3a:24:28:e9:c3:
96:9f:26:79:22:d1:b8:77:35:96:69:9d:1d:3e:7a:
55:b8:a2:95:ea:17:01:db:56:10:87:ef:47:db:b8:
e9:ce:ac:23:5a:b6:1f:c3:2a:8a:dd:7b:aa:b1:25:
5b:fa:d3:0c:f7:d0:88:42:83:19:b1:f1:93:5a:0d:
78:ff:3b:11:e6:36:2e:44:97:2c:01:06:8d:9d:1c:
8e:e4:29:36:eb:34:93:3c:bb:3e:44:19:6f:2a:8e:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:A4:25:C5:67:57:0F:A3:04:2F:1B:6E:92:7D:8F:87:B5:01:38
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/yZ-kJcVnVw-jBC8bbpJ9j4e1ATg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0/24
89.252.145.0-89.252.146.255
89.252.148.0/24
89.252.155.0/24
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.9.255
94.102.11.0/24
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
45:5b:90:d6:a7:3e:3e:58:24:5f:e0:29:db:62:ac:46:71:35:
72:c9:62:1b:7b:3a:ba:23:1b:88:24:7c:dd:aa:98:ff:23:f7:
62:45:c3:b1:54:36:f9:f1:2e:67:50:aa:7a:ea:58:a6:1f:42:
67:26:d3:a1:e3:e7:20:93:99:31:e4:ed:41:05:0a:ad:08:cd:
20:d6:31:ad:b9:29:bc:ad:2d:59:cc:ad:58:f4:0e:d0:5a:65:
bf:38:90:25:df:25:e4:f6:23:52:2a:be:83:0f:b9:a7:29:23:
d6:70:da:3a:11:c2:4c:8a:0d:0f:5d:b9:8c:18:39:44:98:fa:
81:63:06:d8:21:f0:32:2e:c8:fe:e9:a4:87:07:e2:2c:0b:d7:
b2:e0:49:24:ed:49:4d:1d:68:44:d4:e6:51:f7:c4:8a:60:3d:
13:dc:38:6e:b7:01:06:28:03:ae:c9:7e:71:ff:f9:01:15:c5:
8b:a3:91:e7:7a:3e:eb:b2:bf:7d:2b:29:c2:e0:ee:25:7c:6d:
55:a0:e8:12:88:4d:09:f3:e3:25:1a:6c:1e:8f:64:e3:30:a2:
5f:ea:6f:62:68:c8:98:d8:48:ba:85:38:31:3d:73:84:62:d0:
7a:19:e1:5a:ce:23:a4:e1:1f:d4:ca:70:ad:cc:04:1a:93:06:
a0:10:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:42:04 2024 by rpki-client on console-fra.rpki-client.org