Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/HkVVDBgWDr67Ybb9SULldptbZ-8.roa
File: HkVVDBgWDr67Ybb9SULldptbZ-8.roa (raw, json)
Hash identifier: 8/I7pJirwilS11WDjzmjdG5p77jIs4Vrp68wu9Ha3UI=
Subject key identifier: 1E:45:55:0C:18:16:0E:BE:BB:61:B6:FD:49:42:E5:76:9B:5B:67:EF
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 018EEBCB30EFA5A5BB14D4FD4992ECF071B3
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/HkVVDBgWDr67Ybb9SULldptbZ-8.roa
Signing time: Wed 17 Apr 2024 11:22:25 +0000
ROA not before: Wed 17 Apr 2024 11:22:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 46.97.0.0/16 maxlen: 16
46.97.0.0/21 maxlen: 21
46.97.8.0/21 maxlen: 21
46.97.16.0/21 maxlen: 21
46.97.24.0/21 maxlen: 21
46.97.32.0/21 maxlen: 21
46.97.40.0/21 maxlen: 21
46.97.48.0/21 maxlen: 21
46.97.56.0/21 maxlen: 21
46.97.64.0/21 maxlen: 21
46.97.72.0/21 maxlen: 21
46.97.80.0/21 maxlen: 21
46.97.88.0/21 maxlen: 21
46.97.96.0/21 maxlen: 21
46.97.104.0/21 maxlen: 21
46.97.104.0/24 maxlen: 24
46.97.112.0/21 maxlen: 21
46.97.120.0/21 maxlen: 21
46.97.128.0/21 maxlen: 21
46.97.128.0/24 maxlen: 24
46.97.136.0/21 maxlen: 21
46.97.144.0/21 maxlen: 21
46.97.152.0/21 maxlen: 21
46.97.152.0/24 maxlen: 24
46.97.153.0/24 maxlen: 24
46.97.155.0/24 maxlen: 24
46.97.156.0/24 maxlen: 24
46.97.160.0/21 maxlen: 21
46.97.168.0/21 maxlen: 21
46.97.176.0/21 maxlen: 21
46.97.184.0/21 maxlen: 21
46.97.192.0/21 maxlen: 21
46.97.200.0/21 maxlen: 21
46.97.208.0/21 maxlen: 21
46.97.216.0/21 maxlen: 21
46.97.224.0/21 maxlen: 21
46.97.232.0/21 maxlen: 21
46.97.240.0/21 maxlen: 21
46.97.248.0/21 maxlen: 21
81.12.128.0/17 maxlen: 17
81.12.128.0/21 maxlen: 21
81.12.128.0/23 maxlen: 23
81.12.130.0/24 maxlen: 24
81.12.132.0/23 maxlen: 23
81.12.134.0/24 maxlen: 24
81.12.136.0/21 maxlen: 21
81.12.144.0/21 maxlen: 21
81.12.152.0/21 maxlen: 21
81.12.153.0/24 maxlen: 24
81.12.159.0/24 maxlen: 24
81.12.160.0/21 maxlen: 21
81.12.168.0/21 maxlen: 21
81.12.176.0/21 maxlen: 21
81.12.184.0/21 maxlen: 21
81.12.192.0/21 maxlen: 21
81.12.192.0/24 maxlen: 24
81.12.195.0/24 maxlen: 24
81.12.199.0/24 maxlen: 24
81.12.200.0/21 maxlen: 21
81.12.200.0/23 maxlen: 23
81.12.208.0/21 maxlen: 21
81.12.216.0/21 maxlen: 21
81.12.224.0/21 maxlen: 21
81.12.228.0/24 maxlen: 24
81.12.229.0/24 maxlen: 24
81.12.230.0/24 maxlen: 24
81.12.231.0/24 maxlen: 24
81.12.232.0/21 maxlen: 21
81.12.240.0/21 maxlen: 21
81.12.242.0/24 maxlen: 24
81.12.243.0/24 maxlen: 24
81.12.245.0/24 maxlen: 24
81.12.246.0/24 maxlen: 24
81.12.247.0/24 maxlen: 24
81.12.248.0/21 maxlen: 21
91.233.130.0/23 maxlen: 23
136.255.0.0/16 maxlen: 24
136.255.224.0/20 maxlen: 20
136.255.251.0/24 maxlen: 24
165.78.0.0/16 maxlen: 16
165.78.0.0/19 maxlen: 19
165.78.0.0/21 maxlen: 21
165.78.32.0/19 maxlen: 19
165.78.64.0/19 maxlen: 19
165.78.64.0/21 maxlen: 21
165.78.96.0/19 maxlen: 19
165.78.128.0/19 maxlen: 19
165.78.128.0/21 maxlen: 21
165.78.160.0/19 maxlen: 19
165.78.192.0/19 maxlen: 19
165.78.192.0/21 maxlen: 21
165.78.224.0/19 maxlen: 19
185.34.64.0/23 maxlen: 23
192.145.100.0/22 maxlen: 22
213.233.64.0/24 maxlen: 24
213.233.65.0/24 maxlen: 24
213.233.66.0/24 maxlen: 24
213.233.67.0/24 maxlen: 24
213.233.68.0/24 maxlen: 24
213.233.69.0/24 maxlen: 24
213.233.70.0/24 maxlen: 24
213.233.71.0/24 maxlen: 24
213.233.72.0/24 maxlen: 24
213.233.73.0/24 maxlen: 24
213.233.74.0/24 maxlen: 24
213.233.75.0/24 maxlen: 24
213.233.76.0/24 maxlen: 24
213.233.77.0/24 maxlen: 24
213.233.78.0/24 maxlen: 24
213.233.79.0/24 maxlen: 24
213.233.80.0/24 maxlen: 24
213.233.81.0/24 maxlen: 24
213.233.82.0/24 maxlen: 24
213.233.83.0/24 maxlen: 24
213.233.84.0/24 maxlen: 24
213.233.85.0/24 maxlen: 24
213.233.86.0/24 maxlen: 24
213.233.87.0/24 maxlen: 24
213.233.88.0/24 maxlen: 24
213.233.89.0/24 maxlen: 24
213.233.90.0/24 maxlen: 24
213.233.91.0/24 maxlen: 24
213.233.92.0/24 maxlen: 24
213.233.93.0/24 maxlen: 24
213.233.94.0/24 maxlen: 24
213.233.95.0/24 maxlen: 24
213.233.96.0/24 maxlen: 24
213.233.97.0/24 maxlen: 24
213.233.98.0/24 maxlen: 24
213.233.99.0/24 maxlen: 24
213.233.100.0/24 maxlen: 24
213.233.101.0/24 maxlen: 24
213.233.102.0/24 maxlen: 24
213.233.103.0/24 maxlen: 24
213.233.104.0/24 maxlen: 24
213.233.105.0/24 maxlen: 24
213.233.106.0/24 maxlen: 24
213.233.107.0/24 maxlen: 24
213.233.108.0/24 maxlen: 24
213.233.109.0/24 maxlen: 24
213.233.110.0/24 maxlen: 24
213.233.111.0/24 maxlen: 24
213.233.112.0/24 maxlen: 24
213.233.113.0/24 maxlen: 24
213.233.114.0/24 maxlen: 24
213.233.115.0/24 maxlen: 24
213.233.116.0/24 maxlen: 24
213.233.117.0/24 maxlen: 24
213.233.118.0/24 maxlen: 24
213.233.119.0/24 maxlen: 24
213.233.120.0/24 maxlen: 24
213.233.121.0/24 maxlen: 24
213.233.122.0/24 maxlen: 24
213.233.123.0/24 maxlen: 24
213.233.124.0/24 maxlen: 24
213.233.125.0/24 maxlen: 24
213.233.126.0/24 maxlen: 24
213.233.127.0/24 maxlen: 24
217.10.192.0/24 maxlen: 24
217.10.193.0/24 maxlen: 24
217.10.194.0/24 maxlen: 24
217.10.195.0/24 maxlen: 24
217.10.196.0/24 maxlen: 24
217.10.197.0/24 maxlen: 24
217.10.198.0/24 maxlen: 24
217.10.199.0/24 maxlen: 24
217.10.200.0/24 maxlen: 24
217.10.201.0/24 maxlen: 24
217.10.202.0/24 maxlen: 24
217.10.203.0/24 maxlen: 24
217.10.204.0/24 maxlen: 24
217.10.205.0/24 maxlen: 24
217.10.206.0/24 maxlen: 24
217.10.207.0/24 maxlen: 24
217.10.208.0/24 maxlen: 24
217.10.209.0/24 maxlen: 24
217.10.210.0/24 maxlen: 24
217.10.211.0/24 maxlen: 24
217.10.212.0/24 maxlen: 24
217.10.213.0/24 maxlen: 24
217.10.214.0/24 maxlen: 24
217.10.215.0/24 maxlen: 24
217.10.216.0/24 maxlen: 24
217.10.217.0/24 maxlen: 24
217.10.218.0/24 maxlen: 24
217.10.219.0/24 maxlen: 24
217.10.220.0/24 maxlen: 24
217.10.221.0/24 maxlen: 24
217.10.222.0/24 maxlen: 24
217.10.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:cb:30:ef:a5:a5:bb:14:d4:fd:49:92:ec:f0:71:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Apr 17 11:22:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e45550c18160ebebb61b6fd4942e5769b5b67ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:ea:0d:35:07:db:cc:cb:06:06:02:aa:d0:
d1:75:fd:ab:b1:15:74:ac:cf:24:87:3a:f4:47:f2:
11:05:c3:a7:ab:ca:67:56:56:b8:15:74:a5:b0:72:
a1:7d:af:18:07:82:69:5b:38:4a:e8:d7:5b:52:72:
7d:25:8e:a6:d5:5c:ce:35:07:c2:97:b8:3c:cf:20:
62:9a:09:11:51:0c:38:05:50:23:47:87:0d:d9:b1:
b7:74:44:74:14:a2:d7:60:73:70:06:2e:bb:ad:d4:
78:2e:83:2b:66:7c:59:16:60:98:ed:8a:83:4c:5d:
a6:57:63:e2:a2:8d:be:f1:25:90:c3:7c:46:4b:72:
70:5c:8d:01:3d:d6:1c:f4:62:ae:8f:af:fe:4e:f5:
e3:b4:11:f7:6d:49:b8:8c:89:ee:c7:d1:fe:9a:cf:
c9:60:be:16:f3:3d:c8:63:ef:ef:b4:e8:c0:be:4d:
4c:61:57:88:9c:12:5a:e2:bf:aa:a6:70:87:24:8e:
34:12:e8:5c:6e:ae:94:a5:1d:4a:59:71:b5:16:bb:
22:54:e5:f7:d7:b5:42:5e:a8:76:e1:64:11:68:aa:
0f:eb:2d:13:2c:0e:d6:18:f3:93:a3:54:0f:93:af:
31:ba:cf:da:6a:12:60:29:0d:ed:13:c6:77:c6:39:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:55:0C:18:16:0E:BE:BB:61:B6:FD:49:42:E5:76:9B:5B:67:EF
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/HkVVDBgWDr67Ybb9SULldptbZ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.97.0.0/16
81.12.128.0/17
91.233.130.0/23
136.255.0.0/16
165.78.0.0/16
185.34.64.0/23
192.145.100.0/22
213.233.64.0/18
217.10.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:b4:26:c3:fc:6a:d4:bf:7f:75:3d:2c:e4:28:6c:ba:1f:c1:
cd:36:ed:7a:00:0b:66:36:15:dc:cd:5e:32:45:88:ee:b3:d1:
8b:33:3e:ed:fc:da:8b:dc:66:4c:36:7c:e9:f0:93:19:20:26:
f1:55:c5:b1:d7:ff:d4:7c:3a:36:6a:8c:16:13:f1:c9:da:d6:
ef:18:9a:6f:2f:f1:be:a4:55:93:27:51:24:9e:8a:72:e7:ab:
81:2c:75:58:9f:e7:b6:67:bf:ca:c7:e7:99:d0:fe:96:7f:fe:
0e:5b:e0:72:16:09:0f:8d:c9:43:92:f5:cc:8e:dd:07:db:73:
6a:90:f4:30:4b:f3:e4:17:fa:32:0c:d5:f1:57:53:63:cc:5d:
e7:58:4e:03:72:76:2a:26:4d:23:64:3d:7e:59:92:d5:84:a8:
3d:e6:f8:23:fa:da:ab:cb:85:53:56:2f:bb:a8:42:3e:f3:98:
5e:d9:8a:23:9e:c1:d1:41:aa:20:18:65:15:23:e5:73:4f:7c:
a7:c3:11:f0:2c:92:e2:f7:18:20:09:13:3c:67:30:12:ef:3e:
f6:b3:01:0a:a7:93:08:b4:eb:2a:34:14:84:bd:05:4d:5d:b1:
b0:7f:0b:32:c6:f1:ea:56:b1:1a:ba:ab:57:cf:c9:a5:be:a8:
fc:0a:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:32 2024 by rpki-client on console-fra.rpki-client.org