Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/h5b3mO8PEDyWDHQwH1SgXNcB5Ak.roa
File: h5b3mO8PEDyWDHQwH1SgXNcB5Ak.roa (raw, json)
Hash identifier: pBSqcWB/JjPth4AhoWghjcg296mZhtfFePnX7f2T9A0=
Subject key identifier: 87:96:F7:98:EF:0F:10:3C:96:0C:74:30:1F:54:A0:5C:D7:01:E4:09
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01921E2315A394CAB0C7C6348C1D6860AC2C
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/h5b3mO8PEDyWDHQwH1SgXNcB5Ak.roa
Signing time: Mon 23 Sep 2024 09:07:48 +0000
ROA not before: Mon 23 Sep 2024 09:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47589
IP address blocks: 37.231.0.0/17 maxlen: 17
37.231.0.0/18 maxlen: 18
37.231.0.0/22 maxlen: 22
37.231.4.0/22 maxlen: 22
37.231.8.0/22 maxlen: 22
37.231.12.0/22 maxlen: 22
37.231.16.0/22 maxlen: 22
37.231.20.0/22 maxlen: 22
37.231.24.0/22 maxlen: 22
37.231.28.0/22 maxlen: 22
37.231.32.0/22 maxlen: 22
37.231.36.0/22 maxlen: 22
37.231.40.0/22 maxlen: 22
37.231.44.0/22 maxlen: 22
37.231.48.0/22 maxlen: 22
37.231.52.0/22 maxlen: 22
37.231.56.0/22 maxlen: 22
37.231.56.0/24 maxlen: 24
37.231.57.0/24 maxlen: 24
37.231.58.0/24 maxlen: 24
37.231.59.0/24 maxlen: 24
37.231.60.0/22 maxlen: 22
37.231.64.0/18 maxlen: 18
37.231.64.0/22 maxlen: 22
37.231.68.0/22 maxlen: 22
37.231.72.0/22 maxlen: 22
37.231.76.0/22 maxlen: 22
37.231.80.0/22 maxlen: 22
37.231.84.0/22 maxlen: 22
37.231.88.0/22 maxlen: 22
37.231.92.0/22 maxlen: 22
37.231.96.0/22 maxlen: 22
37.231.100.0/22 maxlen: 22
37.231.104.0/22 maxlen: 22
37.231.108.0/22 maxlen: 22
37.231.112.0/22 maxlen: 22
37.231.116.0/22 maxlen: 22
37.231.116.0/24 maxlen: 24
37.231.117.0/24 maxlen: 24
37.231.118.0/24 maxlen: 24
37.231.119.0/24 maxlen: 24
37.231.120.0/22 maxlen: 22
37.231.124.0/22 maxlen: 22
37.231.124.0/24 maxlen: 24
37.231.125.0/24 maxlen: 24
37.231.126.0/24 maxlen: 24
37.231.127.0/24 maxlen: 24
37.231.128.0/17 maxlen: 17
37.231.128.0/18 maxlen: 18
37.231.128.0/22 maxlen: 22
37.231.132.0/22 maxlen: 22
37.231.136.0/22 maxlen: 22
37.231.140.0/22 maxlen: 22
37.231.144.0/22 maxlen: 22
37.231.148.0/22 maxlen: 22
37.231.152.0/22 maxlen: 22
37.231.156.0/22 maxlen: 22
37.231.160.0/22 maxlen: 22
37.231.164.0/22 maxlen: 22
37.231.168.0/22 maxlen: 22
37.231.172.0/22 maxlen: 22
37.231.176.0/22 maxlen: 22
37.231.180.0/22 maxlen: 22
37.231.184.0/22 maxlen: 22
37.231.188.0/22 maxlen: 22
37.231.192.0/18 maxlen: 18
37.231.192.0/22 maxlen: 22
37.231.196.0/22 maxlen: 22
37.231.200.0/22 maxlen: 22
37.231.204.0/22 maxlen: 22
37.231.208.0/22 maxlen: 22
37.231.212.0/22 maxlen: 22
37.231.216.0/22 maxlen: 22
37.231.216.0/24 maxlen: 24
37.231.217.0/24 maxlen: 24
37.231.218.0/24 maxlen: 24
37.231.219.0/24 maxlen: 24
37.231.220.0/22 maxlen: 22
37.231.220.0/24 maxlen: 24
37.231.221.0/24 maxlen: 24
37.231.222.0/24 maxlen: 24
37.231.223.0/24 maxlen: 24
37.231.224.0/22 maxlen: 22
37.231.228.0/22 maxlen: 22
37.231.232.0/22 maxlen: 22
37.231.236.0/22 maxlen: 22
37.231.240.0/22 maxlen: 22
37.231.244.0/22 maxlen: 22
37.231.248.0/22 maxlen: 22
37.231.252.0/22 maxlen: 22
94.128.0.0/16 maxlen: 16
94.128.0.0/17 maxlen: 17
94.128.0.0/22 maxlen: 22
94.128.4.0/22 maxlen: 22
94.128.7.0/24 maxlen: 24
94.128.8.0/22 maxlen: 22
94.128.10.0/24 maxlen: 24
94.128.11.0/24 maxlen: 24
94.128.12.0/22 maxlen: 22
94.128.13.0/24 maxlen: 24
94.128.16.0/22 maxlen: 22
94.128.20.0/22 maxlen: 22
94.128.24.0/22 maxlen: 22
94.128.28.0/22 maxlen: 22
94.128.30.0/23 maxlen: 23
94.128.32.0/22 maxlen: 22
94.128.36.0/22 maxlen: 22
94.128.40.0/22 maxlen: 22
94.128.44.0/22 maxlen: 22
94.128.48.0/22 maxlen: 22
94.128.52.0/22 maxlen: 22
94.128.56.0/22 maxlen: 22
94.128.60.0/22 maxlen: 22
94.128.64.0/22 maxlen: 22
94.128.68.0/22 maxlen: 22
94.128.72.0/22 maxlen: 22
94.128.76.0/22 maxlen: 22
94.128.80.0/22 maxlen: 22
94.128.84.0/22 maxlen: 22
94.128.88.0/22 maxlen: 22
94.128.92.0/22 maxlen: 22
94.128.96.0/22 maxlen: 22
94.128.100.0/22 maxlen: 22
94.128.104.0/22 maxlen: 22
94.128.108.0/22 maxlen: 22
94.128.112.0/22 maxlen: 22
94.128.116.0/22 maxlen: 22
94.128.120.0/22 maxlen: 22
94.128.124.0/22 maxlen: 22
94.128.128.0/17 maxlen: 17
94.128.128.0/22 maxlen: 22
94.128.132.0/22 maxlen: 22
94.128.136.0/22 maxlen: 22
94.128.140.0/22 maxlen: 22
94.128.144.0/22 maxlen: 22
94.128.148.0/22 maxlen: 22
94.128.152.0/22 maxlen: 22
94.128.156.0/22 maxlen: 22
94.128.160.0/22 maxlen: 22
94.128.164.0/22 maxlen: 22
94.128.168.0/22 maxlen: 22
94.128.172.0/22 maxlen: 22
94.128.176.0/22 maxlen: 22
94.128.180.0/22 maxlen: 22
94.128.184.0/22 maxlen: 22
94.128.188.0/22 maxlen: 22
94.128.192.0/22 maxlen: 22
94.128.196.0/22 maxlen: 22
94.128.200.0/22 maxlen: 22
94.128.204.0/22 maxlen: 22
94.128.208.0/22 maxlen: 22
94.128.212.0/22 maxlen: 22
94.128.216.0/22 maxlen: 22
94.128.220.0/22 maxlen: 22
94.128.224.0/22 maxlen: 22
94.128.228.0/22 maxlen: 22
94.128.232.0/22 maxlen: 22
94.128.236.0/22 maxlen: 22
94.128.240.0/22 maxlen: 22
94.128.244.0/22 maxlen: 22
94.128.248.0/22 maxlen: 22
94.128.252.0/22 maxlen: 22
94.129.0.0/17 maxlen: 17
94.129.0.0/22 maxlen: 22
94.129.4.0/22 maxlen: 22
94.129.8.0/22 maxlen: 22
94.129.10.0/24 maxlen: 24
94.129.11.0/24 maxlen: 24
94.129.12.0/22 maxlen: 22
94.129.16.0/22 maxlen: 22
94.129.20.0/22 maxlen: 22
94.129.24.0/22 maxlen: 22
94.129.28.0/22 maxlen: 22
94.129.32.0/22 maxlen: 22
94.129.36.0/22 maxlen: 22
94.129.40.0/22 maxlen: 22
94.129.44.0/22 maxlen: 22
94.129.48.0/22 maxlen: 22
94.129.52.0/22 maxlen: 22
94.129.56.0/22 maxlen: 22
94.129.60.0/22 maxlen: 22
94.129.64.0/22 maxlen: 22
94.129.68.0/22 maxlen: 22
94.129.72.0/22 maxlen: 22
94.129.76.0/22 maxlen: 22
94.129.80.0/22 maxlen: 22
94.129.84.0/22 maxlen: 22
94.129.88.0/22 maxlen: 22
94.129.92.0/22 maxlen: 22
94.129.96.0/22 maxlen: 22
94.129.100.0/22 maxlen: 22
94.129.104.0/22 maxlen: 22
94.129.108.0/22 maxlen: 22
94.129.112.0/22 maxlen: 22
94.129.116.0/22 maxlen: 22
94.129.120.0/22 maxlen: 22
94.129.124.0/22 maxlen: 22
94.129.128.0/17 maxlen: 17
94.129.128.0/22 maxlen: 22
94.129.132.0/22 maxlen: 22
94.129.136.0/22 maxlen: 22
94.129.140.0/22 maxlen: 22
94.129.144.0/22 maxlen: 22
94.129.148.0/22 maxlen: 22
94.129.152.0/22 maxlen: 22
94.129.156.0/22 maxlen: 22
94.129.160.0/22 maxlen: 22
94.129.164.0/22 maxlen: 22
94.129.168.0/22 maxlen: 22
94.129.172.0/22 maxlen: 22
94.129.176.0/22 maxlen: 22
94.129.180.0/22 maxlen: 22
94.129.184.0/22 maxlen: 22
94.129.188.0/22 maxlen: 22
94.129.192.0/22 maxlen: 22
94.129.196.0/22 maxlen: 22
94.129.200.0/22 maxlen: 22
94.129.204.0/22 maxlen: 22
94.129.208.0/22 maxlen: 22
94.129.212.0/22 maxlen: 22
94.129.216.0/22 maxlen: 22
94.129.220.0/22 maxlen: 22
94.129.224.0/22 maxlen: 22
94.129.228.0/22 maxlen: 22
94.129.232.0/22 maxlen: 22
94.129.236.0/22 maxlen: 22
94.129.240.0/22 maxlen: 22
94.129.244.0/22 maxlen: 22
94.129.248.0/22 maxlen: 22
94.129.252.0/22 maxlen: 22
185.192.236.0/23 maxlen: 23
185.192.238.0/23 maxlen: 23
2a03:4780::/32 maxlen: 32
2a03:4781::/32 maxlen: 32
2a03:4782::/32 maxlen: 32
2a03:4783::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:23:15:a3:94:ca:b0:c7:c6:34:8c:1d:68:60:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Sep 23 09:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8796f798ef0f103c960c74301f54a05cd701e409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:d6:f7:bb:18:08:f3:ff:3c:bb:71:16:6a:
15:88:52:c6:f4:6e:69:bb:87:f3:3f:c1:d2:db:ea:
c5:d4:96:34:54:26:0a:64:7a:bd:2a:26:50:19:fb:
8c:f7:9e:d5:5b:23:57:fb:ca:74:f9:ec:82:17:6b:
f5:01:26:df:ab:7d:ff:23:cb:3e:15:5a:26:15:8b:
c0:25:75:27:55:e5:ad:10:46:4f:2a:f7:86:fd:d8:
22:c0:c8:b4:e3:ef:6e:9c:2d:58:ee:f7:04:04:97:
cd:f7:c6:bd:48:5a:8e:c5:24:ee:42:8a:37:47:c8:
cf:a0:80:ea:26:1f:36:13:2e:55:f0:9c:dd:8f:46:
a2:35:30:24:22:02:97:c0:bb:fd:df:ba:e0:a5:62:
45:7d:eb:d2:a5:0a:e6:bc:e1:5a:c1:1f:47:e2:e1:
5f:d5:60:a5:75:ad:7d:c1:7b:c7:ea:21:a3:5e:4c:
14:f3:4b:03:22:12:65:08:af:13:3f:a8:cb:94:90:
08:95:0e:f7:07:b0:ec:5d:04:c0:0b:c2:bc:22:c2:
b0:38:4a:a0:43:fe:26:65:9f:24:ef:65:58:e7:67:
15:9c:8e:a6:53:c1:dd:f1:65:7e:14:66:d6:de:25:
1b:53:6a:26:a7:b4:1b:33:97:38:ff:c2:81:04:b5:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:96:F7:98:EF:0F:10:3C:96:0C:74:30:1F:54:A0:5C:D7:01:E4:09
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/h5b3mO8PEDyWDHQwH1SgXNcB5Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.231.0.0/16
94.128.0.0/15
185.192.236.0/22
IPv6:
2a03:4780::/30
Signature Algorithm: sha256WithRSAEncryption
5f:c7:3e:5d:3f:cf:47:c1:8a:b8:d3:73:42:be:ca:bc:df:b2:
bb:8e:00:b9:e0:3d:fb:b4:3a:01:cd:ff:74:d7:61:06:36:e5:
3d:fa:a4:aa:99:95:d3:b1:ca:b2:79:73:ed:6e:7f:3f:45:02:
ef:8a:3b:e6:ee:a5:7b:76:27:bf:a3:c7:d8:fa:23:85:3e:be:
6f:ef:bd:0a:79:2a:e3:f3:05:3a:31:57:28:7e:71:be:4b:e0:
ea:f3:29:6b:5f:1b:3c:c3:fc:80:fd:a0:24:48:b4:b6:9c:dc:
b0:b1:5e:e1:14:ca:c3:f2:30:82:13:06:93:e6:73:34:f3:78:
9a:f6:9c:b8:aa:b3:41:0f:0c:ae:f2:fa:a8:72:7e:31:91:fb:
84:99:eb:05:97:9b:2f:e8:1c:b5:63:53:1f:bf:1e:43:d8:99:
8a:e3:fb:de:9b:7b:a7:d0:ca:17:1b:2a:3b:44:ba:b4:0f:bb:
95:9b:ef:7f:2a:38:18:c8:c6:66:02:13:22:48:cd:17:fa:7d:
59:0a:06:89:eb:94:89:fa:9a:d9:3e:6b:24:cf:1e:3b:99:bd:
2e:22:b0:db:13:39:e6:b7:9a:99:a0:91:13:82:35:29:68:69:
74:51:b0:ae:8b:7e:01:17:79:a4:61:0d:4e:05:6a:91:0a:57:
df:42:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:13 2024 by rpki-client on console-fra.rpki-client.org