Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0f80EhkwTm1ezLEK7dycb_S3bHM.roa
File: 0f80EhkwTm1ezLEK7dycb_S3bHM.roa (raw, json)
Hash identifier: T0k3VlLeqjGbgdn2GIQzpK3Hhqmt9LX23h3SspxPIXU=
Subject key identifier: D1:FF:34:12:19:30:4E:6D:5E:CC:B1:0A:ED:DC:9C:6F:F4:B7:6C:73
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0191E4AC656CF2F8397769AEE93E53EB1568
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0f80EhkwTm1ezLEK7dycb_S3bHM.roa
Signing time: Thu 12 Sep 2024 05:19:49 +0000
ROA not before: Thu 12 Sep 2024 05:19:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.20.0/23 maxlen: 23
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:ac:65:6c:f2:f8:39:77:69:ae:e9:3e:53:eb:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 12 05:19:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1ff341219304e6d5eccb10aeddc9c6ff4b76c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:e2:45:ac:5a:3d:6a:42:1a:41:cb:d4:82:
21:4f:53:bc:79:68:26:1d:4b:db:b1:b5:e1:90:80:
56:dd:bc:3e:d9:06:d0:0c:b8:3f:5a:52:10:e5:1f:
34:c5:0a:12:53:fa:0d:57:03:e4:cd:d1:a6:f0:ad:
76:24:dd:c8:d5:8c:dd:f5:ca:2c:e5:04:e7:34:c8:
c6:9d:d3:6f:a1:d1:62:9e:ce:eb:a6:bb:1c:b5:a9:
cd:f8:27:2f:12:8a:6d:33:d9:24:30:5c:d7:80:b2:
83:ca:b7:c9:3b:35:da:e1:41:c3:c9:73:dc:ee:1b:
0a:c0:57:87:4f:37:81:ab:5c:ec:d3:b9:11:13:8f:
fa:94:50:bd:5f:15:64:78:b0:30:29:aa:d5:ef:f2:
cd:d7:45:f0:8f:d1:aa:99:fd:1a:7b:3e:64:b0:c4:
ba:5d:d8:52:fe:cd:43:1f:07:d5:92:70:56:2a:3c:
fb:1d:1b:c0:7c:9a:9a:8e:2f:0e:b2:cb:8c:af:5a:
74:06:b6:3a:46:de:99:c7:a6:6b:62:87:0d:6a:53:
30:90:77:a2:bc:39:4e:7c:b4:04:57:24:a3:c7:c3:
07:65:7e:4c:9b:1a:27:58:79:6c:c7:2c:92:df:b9:
95:d1:23:29:37:8d:23:df:35:53:96:5c:bd:78:6e:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:34:12:19:30:4E:6D:5E:CC:B1:0A:ED:DC:9C:6F:F4:B7:6C:73
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0f80EhkwTm1ezLEK7dycb_S3bHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.226.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.20.0/23
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4a:88:a4:af:24:36:17:81:94:8e:71:13:8a:e1:37:da:a2:
fb:45:d8:0d:c7:64:ff:75:fb:3c:40:65:b5:f9:75:61:aa:9c:
b1:f7:f1:08:14:d2:6c:91:9e:ef:a2:87:47:3c:d9:72:fd:f2:
b7:c0:88:60:82:27:1f:b5:3f:b7:fd:ae:e8:85:66:e0:ab:32:
62:84:e3:8c:29:e4:a1:58:3f:27:65:ac:90:4e:54:ee:0f:aa:
3a:6a:54:d6:5b:3a:85:24:ae:d2:5a:a9:f1:e9:41:b3:49:b6:
2b:9e:c6:ae:97:06:d6:10:35:bf:23:f5:5c:c4:9d:29:d7:11:
ff:c8:cc:6b:e5:f4:8d:ec:5e:10:47:7c:b1:99:f1:ce:4d:db:
fe:70:ea:1a:5b:4a:5a:44:17:62:6d:b0:94:b0:c3:f9:ec:ef:
d8:d1:6d:27:92:a6:c6:5a:7e:0e:df:b2:5b:17:db:21:6a:d0:
ab:62:1d:ea:1a:fd:5f:83:f5:4a:b6:15:d1:0d:82:8b:39:ee:
37:c6:f7:a3:2b:c9:20:e8:aa:9f:8a:35:a2:48:6f:c4:a0:c4:
ce:33:eb:06:35:a6:a4:81:27:5a:94:92:e3:ed:54:c7:6d:dc:
4e:93:e5:14:7c:bf:ea:a0:cf:a1:65:42:2c:31:fa:f1:b0:06:
16:fa:23:b1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgISAZHkrGVs8vg5d2mu6T5T6xVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwOTEyMDUxOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWZmMzQxMjE5MzA0ZTZkNWVjY2IxMGFlZGRjOWM2ZmY0Yjc2YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCLiRaxaPWpCGkHL1IIhT1O8eWgm
HUvbsbXhkIBW3bw+2QbQDLg/WlIQ5R80xQoSU/oNVwPkzdGm8K12JN3I1Yzd9cos
5QTnNMjGndNvodFins7rprsctanN+CcvEoptM9kkMFzXgLKDyrfJOzXa4UHDyXPc
7hsKwFeHTzeBq1zs07kRE4/6lFC9XxVkeLAwKarV7/LN10Xwj9Gqmf0aez5ksMS6
XdhS/s1DHwfVknBWKjz7HRvAfJqaji8OssuMr1p0BrY6Rt6Zx6ZrYocNalMwkHei
vDlOfLQEVySjx8MHZX5MmxonWHlsxyyS37mV0SMpN40j3zVTlly9eG7JWwIDAQAB
o4IDHTCCAxkwHQYDVR0OBBYEFNH/NBIZME5tXsyxCu3cnG/0t2xzMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvMGY4MEVoa3dUbTFlekxFSzdkeWNiX1MzYkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMQYIKwYBBQUHAQcBAf8EggEgMIIBHDCCARgEAgABMIIB
EAMEAFBgDAMEAFBgKwMEAFBgLwMEAFBgMwMEAFBgQwMEAFBgRQMEAFBgSAMEAFBg
TwMEAFBgUgMEAFBg2zAMAwQAUGGTAwQBUGGUAwQAUbQbAwQAUbUeAwQAUbVwAwQA
UbWAAwQAUbWnAwQAUbX2AwQAVXgUAwQAVXgXAwQAweIQAwQAweJ0AwQAweJ9AwQA
weJ/AwQAweaeAwQAwearAwQAwebZAwQAweblAwQAwedLAwQAwedsAwQAwee4AwQA
wefCAwQAwefiAwQAwefpAwQAwefsAwQAwefuAwQAwef8AwQAwmZiAwQAwmaGAwQA
wmblAwQAwpngAwQA2ZwOAwQB2ZwUAwQA2ZwpAwQA2ZxcMA0GCSqGSIb3DQEBCwUA
A4IBAQBkSoikryQ2F4GUjnETiuE32qL7RdgNx2T/dfs8QGW1+XVhqpyx9/EIFNJs
kZ7voodHPNly/fK3wIhggicftT+3/a7ohWbgqzJihOOMKeShWD8nZayQTlTuD6o6
alTWWzqFJK7SWqnx6UGzSbYrnsaulwbWEDW/I/VcxJ0p1xH/yMxr5fSN7F4QR3yx
mfHOTdv+cOoaW0paRBdibbCUsMP57O/Y0W0nkqbGWn4O37JbF9shatCrYh3qGv1f
g/VKthXRDYKLOe43xvejK8kg6KqfijWiSG/EoMTOM+sGNaakgSdalJLj7VTHbdxO
k+UUfL/qoM+hZUIsMfrxsAYW+iOx
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:34 2024 by rpki-client on console-ams.rpki-client.org