Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/dYUD4RM3nL7jATL2XiC_Fpl8yPI.roa
File: dYUD4RM3nL7jATL2XiC_Fpl8yPI.roa (raw, json)
Hash identifier: eBI/PCG4ZAgWspfLHa5EjPgMwxtJvzAlNZyAMs5sd+s=
Subject key identifier: 75:85:03:E1:13:37:9C:BE:E3:01:32:F6:5E:20:BF:16:99:7C:C8:F2
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 018D4A113AC6864EB8985D3FBFFA0BDFDC0B
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/dYUD4RM3nL7jATL2XiC_Fpl8yPI.roa
Signing time: Sat 27 Jan 2024 08:37:39 +0000
ROA not before: Sat 27 Jan 2024 08:37:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57218
IP address blocks: 5.62.192.0/18 maxlen: 18
5.62.192.0/19 maxlen: 19
5.62.224.0/19 maxlen: 19
5.72.0.0/16 maxlen: 16
5.72.0.0/19 maxlen: 19
5.72.32.0/19 maxlen: 19
5.72.64.0/19 maxlen: 19
5.72.96.0/19 maxlen: 19
5.72.128.0/19 maxlen: 19
5.72.160.0/19 maxlen: 19
5.72.192.0/19 maxlen: 19
5.72.224.0/19 maxlen: 19
5.73.0.0/16 maxlen: 16
5.73.0.0/19 maxlen: 19
5.73.32.0/19 maxlen: 19
5.73.64.0/19 maxlen: 19
5.73.96.0/19 maxlen: 19
5.73.128.0/19 maxlen: 19
5.73.160.0/19 maxlen: 19
5.73.192.0/19 maxlen: 19
5.73.224.0/19 maxlen: 19
5.134.128.0/18 maxlen: 18
5.134.128.0/20 maxlen: 22
5.134.128.0/22 maxlen: 22
5.134.132.0/22 maxlen: 22
5.134.144.0/20 maxlen: 22
5.134.160.0/20 maxlen: 20
5.134.160.0/22 maxlen: 22
5.134.164.0/22 maxlen: 22
5.134.168.0/22 maxlen: 22
5.134.172.0/22 maxlen: 22
5.134.176.0/20 maxlen: 20
5.134.176.0/22 maxlen: 22
5.134.180.0/22 maxlen: 22
5.134.184.0/22 maxlen: 22
5.134.191.0/24 maxlen: 24
5.200.96.0/19 maxlen: 19
5.200.96.0/20 maxlen: 20
5.200.112.0/20 maxlen: 20
37.44.56.0/21 maxlen: 21
37.44.56.0/22 maxlen: 22
37.44.60.0/22 maxlen: 22
37.137.0.0/17 maxlen: 21
37.137.0.0/18 maxlen: 21
37.137.0.0/19 maxlen: 19
37.137.32.0/22 maxlen: 22
37.137.36.0/24 maxlen: 24
37.137.64.0/18 maxlen: 18
37.137.128.0/17 maxlen: 17
37.137.128.0/18 maxlen: 18
37.137.192.0/18 maxlen: 18
37.153.176.0/20 maxlen: 20
37.153.176.0/21 maxlen: 21
37.153.184.0/21 maxlen: 21
37.156.48.0/20 maxlen: 20
37.156.48.0/21 maxlen: 21
37.156.56.0/21 maxlen: 21
37.156.152.0/21 maxlen: 21
37.156.152.0/22 maxlen: 22
37.156.156.0/22 maxlen: 22
77.81.192.0/19 maxlen: 19
77.81.192.0/20 maxlen: 20
77.81.208.0/20 maxlen: 20
89.32.0.0/19 maxlen: 19
89.32.0.0/20 maxlen: 20
89.32.16.0/20 maxlen: 20
89.32.96.0/20 maxlen: 20
89.32.96.0/21 maxlen: 21
89.32.104.0/21 maxlen: 21
89.34.32.0/19 maxlen: 19
89.34.32.0/20 maxlen: 20
89.34.48.0/20 maxlen: 20
89.34.128.0/19 maxlen: 19
89.34.128.0/20 maxlen: 20
89.34.144.0/20 maxlen: 20
89.41.192.0/19 maxlen: 19
89.41.192.0/20 maxlen: 20
89.41.208.0/20 maxlen: 20
89.47.64.0/20 maxlen: 20
89.47.64.0/21 maxlen: 21
89.47.72.0/21 maxlen: 21
89.47.128.0/19 maxlen: 19
89.47.128.0/20 maxlen: 20
89.47.144.0/20 maxlen: 20
91.229.214.0/23 maxlen: 24
92.114.64.0/20 maxlen: 20
92.114.64.0/21 maxlen: 21
92.114.72.0/21 maxlen: 21
93.114.16.0/20 maxlen: 20
93.114.16.0/21 maxlen: 21
93.114.24.0/21 maxlen: 21
94.24.0.0/20 maxlen: 20
94.24.0.0/21 maxlen: 21
94.24.8.0/21 maxlen: 21
94.24.16.0/21 maxlen: 21
94.24.16.0/22 maxlen: 22
94.24.20.0/22 maxlen: 22
94.24.80.0/20 maxlen: 20
94.24.80.0/21 maxlen: 21
94.24.88.0/21 maxlen: 21
94.24.96.0/21 maxlen: 21
94.24.96.0/22 maxlen: 22
94.24.100.0/22 maxlen: 22
95.162.0.0/16 maxlen: 17
95.162.0.0/19 maxlen: 19
95.162.0.0/20 maxlen: 20
95.162.16.0/20 maxlen: 20
95.162.32.0/19 maxlen: 19
95.162.32.0/20 maxlen: 20
95.162.48.0/20 maxlen: 20
95.162.64.0/19 maxlen: 19
95.162.64.0/20 maxlen: 20
95.162.80.0/20 maxlen: 20
95.162.96.0/19 maxlen: 19
95.162.96.0/20 maxlen: 20
95.162.112.0/20 maxlen: 20
95.162.128.0/17 maxlen: 17
95.162.128.0/19 maxlen: 21
95.162.128.0/20 maxlen: 21
95.162.128.0/21 maxlen: 21
95.162.144.0/20 maxlen: 21
95.162.152.0/21 maxlen: 21
95.162.160.0/19 maxlen: 21
95.162.160.0/20 maxlen: 21
95.162.160.0/21 maxlen: 21
95.162.176.0/20 maxlen: 21
95.162.192.0/19 maxlen: 19
95.162.192.0/20 maxlen: 20
95.162.208.0/20 maxlen: 20
95.162.224.0/19 maxlen: 24
95.162.224.0/20 maxlen: 20
95.162.240.0/20 maxlen: 20
95.162.248.0/24 maxlen: 24
185.24.136.0/23 maxlen: 23
185.24.136.0/24 maxlen: 24
185.24.137.0/24 maxlen: 24
185.24.228.0/22 maxlen: 22
185.24.228.0/23 maxlen: 23
185.24.230.0/23 maxlen: 23
188.208.64.0/19 maxlen: 19
188.208.64.0/20 maxlen: 20
188.208.80.0/20 maxlen: 20
188.208.144.0/20 maxlen: 20
188.208.144.0/21 maxlen: 21
188.208.152.0/21 maxlen: 21
188.208.156.0/24 maxlen: 24
188.208.160.0/19 maxlen: 19
188.208.160.0/20 maxlen: 20
188.208.176.0/20 maxlen: 20
188.208.224.0/19 maxlen: 19
188.208.224.0/20 maxlen: 20
188.208.240.0/20 maxlen: 20
188.208.243.0/24 maxlen: 24
188.214.4.0/22 maxlen: 22
188.214.4.0/23 maxlen: 23
188.214.6.0/23 maxlen: 23
188.214.84.0/22 maxlen: 22
188.214.84.0/23 maxlen: 23
188.214.86.0/23 maxlen: 23
188.215.24.0/22 maxlen: 22
188.215.24.0/23 maxlen: 23
188.215.26.0/23 maxlen: 23
188.215.88.0/22 maxlen: 22
188.215.88.0/23 maxlen: 23
188.215.90.0/23 maxlen: 23
213.195.32.0/20 maxlen: 20
213.195.32.0/21 maxlen: 21
213.195.40.0/21 maxlen: 21
213.195.48.0/22 maxlen: 22
213.195.48.0/23 maxlen: 23
213.195.50.0/23 maxlen: 23
2a03:ef40::/128 maxlen: 128
2a03:ef42::/34 maxlen: 34
2a03:ef42:4000::/34 maxlen: 34
2a03:ef42:8000::/34 maxlen: 34
2a03:ef42:c000::/34 maxlen: 34
2a03:ef42:c000::/128 maxlen: 128
2a03:ef42:c000::1/128 maxlen: 128
2a03:ef43::/34 maxlen: 34
2a03:ef43::/43 maxlen: 43
2a03:ef43:3::/48 maxlen: 48
2a03:ef43:3:8000::/49 maxlen: 49
2a03:ef43:c000::/48 maxlen: 48
2a03:ef44::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:11:3a:c6:86:4e:b8:98:5d:3f:bf:fa:0b:df:dc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jan 27 08:37:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=758503e113379cbee30132f65e20bf16997cc8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:b8:cf:06:d0:d7:39:d5:46:69:4d:6b:64:
f9:52:ed:b6:af:02:ef:94:cf:ef:94:c3:fe:22:49:
ec:5d:1c:c7:83:e3:36:31:86:05:b5:84:94:60:ad:
74:b6:bf:d2:50:6d:3b:03:55:de:e9:9e:0a:43:36:
cf:55:ee:ee:b6:38:00:18:7f:45:3f:3c:b5:65:4e:
1f:04:ca:ba:12:26:a3:7e:c7:a9:68:a5:ff:6f:f0:
17:c2:19:4c:7f:bd:0a:f8:22:d6:e1:f3:15:8b:4b:
6e:aa:58:2b:49:c3:0c:1a:a4:95:5c:4f:94:14:5a:
ea:e6:4c:21:c5:88:cd:12:55:eb:f2:0d:90:df:aa:
9c:15:15:17:cc:e3:f4:0a:47:96:2a:ed:27:52:25:
98:5b:50:cd:88:00:1c:31:74:f3:be:ed:59:8e:56:
c0:1f:88:1b:0c:ea:60:56:01:a5:17:bf:2e:11:b8:
e0:31:7e:33:6b:94:45:23:e8:63:db:e6:d4:c1:8b:
63:d4:d3:e0:18:44:2c:c0:13:96:57:32:02:af:c9:
73:56:a5:0c:47:8b:c3:84:5a:4e:0b:ef:c5:9d:2a:
e2:4c:fb:f3:74:22:f5:65:91:fd:86:07:e3:b4:16:
78:86:6b:95:ff:27:c5:ec:8f:84:85:bf:f5:6b:25:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:85:03:E1:13:37:9C:BE:E3:01:32:F6:5E:20:BF:16:99:7C:C8:F2
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/dYUD4RM3nL7jATL2XiC_Fpl8yPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.192.0/18
5.72.0.0/15
5.134.128.0/18
5.200.96.0/19
37.44.56.0/21
37.137.0.0/16
37.153.176.0/20
37.156.48.0/20
37.156.152.0/21
77.81.192.0/19
89.32.0.0/19
89.32.96.0/20
89.34.32.0/19
89.34.128.0/19
89.41.192.0/19
89.47.64.0/20
89.47.128.0/19
91.229.214.0/23
92.114.64.0/20
93.114.16.0/20
94.24.0.0-94.24.23.255
94.24.80.0-94.24.103.255
95.162.0.0/16
185.24.136.0/23
185.24.228.0/22
188.208.64.0/19
188.208.144.0-188.208.191.255
188.208.224.0/19
188.214.4.0/22
188.214.84.0/22
188.215.24.0/22
188.215.88.0/22
213.195.32.0-213.195.51.255
IPv6:
2a03:ef40::/128
2a03:ef42::-2a03:ef43:3fff:ffff:ffff:ffff:ffff:ffff
2a03:ef43:c000::/48
2a03:ef44::/34
Signature Algorithm: sha256WithRSAEncryption
13:4a:f3:01:17:f2:ea:c6:e2:09:ee:c0:50:7e:a2:8c:50:42:
97:11:9e:e0:95:84:08:5f:20:12:6e:6c:8c:33:39:92:2e:26:
df:ad:d1:e0:33:6b:c0:39:40:06:70:40:44:7c:eb:42:26:82:
37:ac:2a:55:89:d1:ba:64:49:eb:76:9d:81:1f:11:17:9a:93:
83:a6:7f:24:d9:75:fb:9a:16:a6:a6:41:ca:5a:d5:88:f0:41:
f5:ef:95:23:7b:09:72:03:67:ed:c3:ac:96:5e:cd:73:b5:a0:
84:28:70:80:ae:ed:32:8c:1c:cd:46:bf:9b:8b:62:5e:dc:db:
21:c9:34:10:cb:0d:6a:d6:8a:7b:ac:ab:0b:ff:36:81:0e:3e:
40:62:4b:8b:67:aa:36:1c:82:85:10:8d:d7:8c:b8:58:1f:0f:
80:1d:71:8f:31:9e:13:d9:d3:12:8d:e9:a8:6f:ad:6a:58:ac:
df:b7:ec:ff:8f:ac:f2:67:57:9c:a3:a8:16:d9:17:68:f9:17:
1a:c4:16:39:73:94:6e:c3:e2:28:0e:1a:eb:c0:87:29:41:b5:
1f:71:c1:eb:66:b3:6b:dc:66:2d:69:3e:cd:0c:d0:4f:8d:90:
df:a9:70:bc:45:72:6d:99:10:50:4c:fa:96:25:60:b0:ac:a3:
83:a1:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:50:20 2024 by rpki-client on console-fra.rpki-client.org