Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kUe9r3Bo_7OmAGu9zDl_qW_3PmY.roa (download)
Subject key identifier: 91:47:BD:AF:70:68:FF:B3:A6:00:6B:BD:CC:39:7F:A9:6F:F7:3E:66
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID: AS20473
Prefixes:
1: 185.188.6.0/24 (max: 32)
2: 193.160.214.0/24 (max: 32)
3: 193.160.215.0/24 (max: 32)
4: 84.39.184.0/24 (max: 24)
5: 84.39.191.0/24 (max: 32)
6: 84.39.187.0/24 (max: 32)
7: 84.39.190.0/24 (max: 32)
8: 185.208.168.0/22 (max: 32)
9: 185.255.154.0/24 (max: 32)
10: 45.67.17.0/24 (max: 32)
11: 45.67.16.0/24 (max: 32)
12: 85.208.152.0/22 (max: 32)
13: 185.146.194.0/24 (max: 24)
14: 185.133.75.0/24 (max: 32)
15: 185.146.193.0/24 (max: 32)
16: 94.140.20.0/22 (max: 32)
17: 185.214.70.0/24 (max: 32)
18: 92.119.150.0/24 (max: 32)
19: 185.240.218.0/24 (max: 32)
20: 92.119.149.0/24 (max: 32)
21: 92.119.151.0/24 (max: 32)
22: 185.240.219.0/24 (max: 32)
23: 193.187.152.0/24 (max: 32)
24: 185.133.195.0/24 (max: 32)
25: 185.133.193.0/24 (max: 32)
26: 193.160.212.0/24 (max: 32)
27: 185.119.255.0/24 (max: 32)
28: 185.120.7.0/24 (max: 32)
29: 185.120.6.0/24 (max: 32)
30: 185.120.5.0/24 (max: 32)
31: 185.120.15.0/24 (max: 32)
32: 185.120.14.0/24 (max: 32)
33: 185.120.20.0/24 (max: 32)
34: 185.120.23.0/24 (max: 24)
35: 185.120.21.0/24 (max: 32)
36: 185.207.176.0/22 (max: 32)
37: 79.174.23.0/24 (max: 32)
38: 79.174.21.0/24 (max: 32)
39: 79.174.22.0/24 (max: 32)
40: 195.85.68.0/22 (max: 32)
41: 185.193.36.0/22 (max: 32)
42: 185.172.165.0/24 (max: 32)
43: 185.172.166.0/24 (max: 32)
44: 5.253.138.0/24 (max: 32)
45: 195.85.32.0/22 (max: 32)
46: 195.85.40.0/22 (max: 32)
47: 195.85.48.0/23 (max: 32)
48: 185.253.251.0/24 (max: 32)
49: 147.78.220.0/24 (max: 32)
50: 147.78.221.0/24 (max: 32)
51: 37.10.112.0/24 (max: 32)
52: 94.199.102.0/24 (max: 32)
53: 2.57.252.0/22 (max: 32)
54: 185.185.251.0/24 (max: 24)
55: 185.185.250.0/24 (max: 32)
56: 185.172.145.0/24 (max: 32)
57: 195.85.10.0/23 (max: 32)
58: 185.226.73.0/24 (max: 32)
59: 185.226.74.0/24 (max: 32)
60: 185.144.103.0/24 (max: 32)
61: 185.144.102.0/24 (max: 32)
62: 185.144.101.0/24 (max: 32)
63: 193.16.8.0/22 (max: 32)
64: 185.117.20.0/24 (max: 32)
65: 185.171.2.0/24 (max: 32)
66: 185.171.1.0/24 (max: 32)
67: 185.171.0.0/24 (max: 32)
68: 185.251.233.0/24 (max: 32)
69: 185.251.235.0/24 (max: 32)
70: 185.251.234.0/24 (max: 32)
71: 46.251.239.0/24 (max: 32)
72: 194.36.101.0/24 (max: 32)
73: 194.36.100.0/24 (max: 32)
74: 185.238.242.0/24 (max: 32)
75: 185.238.241.0/24 (max: 32)
76: 45.10.3.0/24 (max: 32)
77: 45.10.2.0/24 (max: 32)
78: 213.232.104.0/22 (max: 32)
79: 194.124.64.0/23 (max: 32)
80: 185.137.180.0/22 (max: 32)
81: 185.238.240.0/24 (max: 32)
82: 5.183.206.0/24 (max: 32)
83: 5.183.207.0/24 (max: 32)
84: 185.177.20.0/22 (max: 32)
85: 79.143.51.0/24 (max: 32)
86: 79.143.49.0/24 (max: 32)
87: 79.143.52.0/24 (max: 32)
88: 79.143.55.0/24 (max: 32)
89: 79.143.53.0/24 (max: 32)
90: 79.143.62.0/24 (max: 32)
91: 79.143.61.0/24 (max: 32)
92: 185.211.50.0/24 (max: 24)
93: 185.211.49.0/24 (max: 32)
94: 185.211.48.0/24 (max: 24)
95: 194.56.76.0/22 (max: 32)
96: 193.22.159.0/24 (max: 32)
97: 185.177.80.0/22 (max: 32)
98: 91.189.184.0/22 (max: 32)
99: 185.142.143.0/24 (max: 32)
100: 85.209.253.0/24 (max: 32)
101: 194.34.230.0/24 (max: 32)
102: 194.34.231.0/24 (max: 32)
103: 77.243.92.0/22 (max: 32)
104: 185.122.56.0/22 (max: 32)
105: 185.115.131.0/24 (max: 32)
106: 188.116.19.0/24 (max: 32)
107: 188.116.49.0/24 (max: 32)
108: 185.115.243.0/24 (max: 32)
109: 193.149.160.0/22 (max: 32)
110: 185.115.242.0/24 (max: 32)
111: 213.190.20.0/22 (max: 32)
112: 185.215.212.0/22 (max: 32)
113: 195.7.1.0/24 (max: 32)
114: 195.7.3.0/24 (max: 32)
115: 185.182.48.0/24 (max: 32)
116: 185.182.49.0/24 (max: 32)
117: 185.141.205.0/24 (max: 32)
118: 185.182.62.0/24 (max: 32)
119: 185.114.225.0/24 (max: 32)
120: 185.141.207.0/24 (max: 32)
121: 185.114.227.0/24 (max: 32)
122: 193.222.100.0/24 (max: 32)
123: 193.222.103.0/24 (max: 32)
124: 91.188.200.0/22 (max: 32)
125: 45.14.44.0/22 (max: 32)
126: 62.122.24.0/22 (max: 32)
127: 128.0.116.0/22 (max: 32)
128: 45.13.244.0/22 (max: 32)
129: 185.236.80.0/24 (max: 32)
130: 185.236.83.0/24 (max: 32)
131: 185.249.216.0/24 (max: 32)
132: 185.249.218.0/24 (max: 32)
133: 185.188.4.0/22 (max: 32)
134: 84.39.184.0/21 (max: 32)
135: 85.208.155.0/24 (max: 32)
136: 85.208.153.0/24 (max: 32)
137: 185.133.72.0/22 (max: 32)
138: 185.214.68.0/22 (max: 32)
139: 92.119.148.0/22 (max: 32)
140: 185.133.192.0/22 (max: 32)
141: 2.59.174.0/24 (max: 32)
142: 2.59.175.0/24 (max: 32)
143: 185.120.4.0/22 (max: 32)
144: 185.120.12.0/22 (max: 32)
145: 185.120.20.0/22 (max: 32)
146: 185.207.178.0/24 (max: 32)
147: 185.207.177.0/24 (max: 32)
148: 185.227.240.0/22 (max: 32)
149: 79.174.20.0/22 (max: 32)
150: 185.193.36.0/24 (max: 32)
151: 185.193.39.0/24 (max: 32)
152: 185.172.164.0/22 (max: 32)
153: 185.253.248.0/22 (max: 32)
154: 213.232.107.0/24 (max: 32)
155: 87.239.48.0/22 (max: 32)
156: 94.199.100.0/22 (max: 32)
157: 2.57.255.0/24 (max: 32)
158: 77.83.156.0/24 (max: 32)
159: 77.83.158.0/24 (max: 32)
160: 77.83.159.0/24 (max: 32)
161: 77.83.157.0/24 (max: 32)
162: 185.144.100.0/22 (max: 32)
163: 193.16.9.0/24 (max: 32)
164: 193.16.10.0/24 (max: 32)
165: 185.117.20.0/22 (max: 32)
166: 185.171.0.0/22 (max: 32)
167: 194.36.100.0/22 (max: 32)
168: 45.10.0.0/22 (max: 32)
169: 185.137.181.0/24 (max: 32)
170: 194.124.64.0/24 (max: 32)
171: 194.124.67.0/24 (max: 32)
172: 194.124.65.0/24 (max: 32)
173: 194.124.66.0/24 (max: 32)
174: 81.16.138.0/24 (max: 32)
175: 81.16.137.0/24 (max: 32)
176: 81.16.136.0/24 (max: 32)
177: 185.238.240.0/22 (max: 32)
178: 5.183.204.0/22 (max: 32)
179: 79.143.48.0/20 (max: 32)
180: 185.211.48.0/22 (max: 32)
181: 194.56.76.0/24 (max: 32)
182: 194.56.77.0/24 (max: 32)
183: 194.56.79.0/24 (max: 24)
184: 185.224.144.0/22 (max: 32)
185: 91.189.184.0/24 (max: 32)
186: 91.189.185.0/24 (max: 32)
187: 91.189.187.0/24 (max: 32)
188: 194.34.228.0/22 (max: 32)
189: 77.243.95.0/24 (max: 32)
190: 77.243.93.0/24 (max: 32)
191: 185.122.39.0/24 (max: 32)
192: 185.115.124.0/22 (max: 32)
193: 188.116.18.0/23 (max: 32)
194: 188.116.48.0/23 (max: 32)
195: 185.115.240.0/22 (max: 32)
196: 213.190.21.0/24 (max: 32)
197: 213.190.23.0/24 (max: 32)
198: 213.190.20.0/24 (max: 32)
199: 185.215.214.0/24 (max: 32)
200: 195.7.0.0/22 (max: 32)
201: 185.141.204.0/22 (max: 32)
202: 193.222.100.0/22 (max: 32)
203: 45.14.44.0/24 (max: 32)
204: 45.14.45.0/24 (max: 32)
205: 45.13.245.0/24 (max: 32)
206: 185.236.80.0/22 (max: 32)
207: 185.249.216.0/22 (max: 32)
208: 2a06:7a02::/48 (max: 48)
209: 2a0b:1900::/29 (max: 128)
210: 2a06:7a05::/48 (max: 48)
211: 2a0c:da01::/48 (max: 48)
212: 2a0e:c500::/29 (max: 128)
213: 2a06:8dc0::/42 (max: 48)
--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kUe9r3Bo_7OmAGu9zDl_qW_3PmY.roa | openssl x509 -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319459722 (0x130a918a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 10 16:37:39 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=9147bdaf7068ffb3a6006bbdcc397fa96ff73e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:22:31:b6:9d:77:ac:65:c8:76:6a:4d:1c:
31:87:58:95:cd:a5:56:36:2e:4d:2f:ff:4c:6a:50:
16:e0:02:9f:93:51:09:d4:5d:2d:6b:29:81:99:f1:
aa:90:38:95:09:15:87:eb:2f:24:46:27:c3:d7:5a:
85:bf:e3:a2:fd:e9:5b:31:e5:12:65:1c:7b:6f:0d:
35:c1:ff:aa:63:26:a9:bb:20:c2:b7:4e:50:2f:84:
b2:55:ab:a0:4f:05:a9:54:9a:fa:b1:c0:4e:86:02:
ed:6a:f6:48:bb:e0:05:da:86:f1:b3:fb:7e:92:d4:
ea:4b:7c:ea:7e:13:83:64:62:d7:e0:d0:6d:70:8d:
06:f6:45:c5:93:44:86:f4:89:cc:e1:47:8b:d8:b1:
f8:40:f3:5e:e6:9b:2d:07:89:85:db:15:cb:b2:c5:
8b:9d:aa:c3:fe:e5:0a:42:ea:91:4f:42:f5:05:88:
6c:76:58:4f:1b:5a:93:b9:b2:ef:61:1b:c7:60:ab:
d3:ca:db:de:39:cf:06:5b:08:a4:9c:4f:cd:f3:72:
72:24:57:3a:49:b8:ff:55:1c:84:f9:86:86:1a:49:
40:0e:37:e4:a2:30:68:ce:b4:c8:32:ce:92:52:b9:
5b:d6:af:07:d4:2d:28:7d:36:33:86:5a:e6:d8:2a:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:BD:AF:70:68:FF:B3:A6:00:6B:BD:CC:39:7F:A9:6F:F7:3E:66
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kUe9r3Bo_7OmAGu9zDl_qW_3PmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
0...0..P....0..H....9.....;................%
p...-
....-
....-.,...-C..........>z....MS....M.\...O.0...O..0....Q.....Q.....T'....U.....U.....W.0...[.....[.....\w....^.....^.d.....t....N.....r.....r.....s|....s.....s.....u.....w.....x.....x.....x.....z'....z8.....H.............................d0..........................................P.....0.....>.................$.................0.....D............0......I.....J...........P..................0.............................t.....t0.........................................d....".....$d....8L....|@..........U
....U ....U(....U0....UD...........h08....02...*.z......*.z......*........*......*........*...
Signature Algorithm: sha256WithRSAEncryption
10:3e:da:43:a8:da:19:44:38:5c:b1:7e:d5:f4:c0:bc:93:a8:
4b:7d:02:1e:89:56:9c:d3:d3:96:ef:ae:38:c7:38:12:54:79:
30:4e:99:73:4b:35:68:c6:d1:0d:a9:f2:1b:01:a0:1c:fc:65:
a5:76:a8:ef:83:1c:0c:43:20:98:8e:1a:c2:c7:6d:d4:bf:99:
c7:62:d3:16:d2:e2:36:65:fc:68:62:b9:66:53:3c:69:1c:ee:
1e:3e:f9:17:20:50:23:ef:07:7e:e5:70:98:be:d5:d9:1a:74:
65:e2:fa:fa:0c:99:0b:cc:44:78:7a:b4:ac:7c:e1:e7:64:0e:
99:11:c8:88:0e:e5:df:d7:8d:5d:b8:fd:a6:26:26:21:eb:2c:
b3:75:16:02:df:30:55:d5:56:c3:0c:54:b1:3b:7a:71:e8:f5:
8b:ff:95:99:59:55:cc:aa:cd:1d:85:bb:1e:50:01:87:bd:92:
b9:26:51:55:3b:7b:d9:18:e4:ad:18:fd:bb:58:65:4e:d3:4a:
68:ad:4b:e8:bb:98:62:55:2b:cf:e1:ab:a8:57:54:27:ff:c5:
e3:62:e4:55:f3:c1:2e:d4:63:43:05:a1:63:55:04:1d:be:a0:
14:b6:8f:f3:8c:c9:5d:a4:fb:01:46:6a:1f:03:e6:88:6a:52:
bd:a7:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 11 07:53:47 2021 by LibreSSL & rpki-client.