Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OXNSqnaZiUo0_V0l1C5lJd96gf4.roa
File: OXNSqnaZiUo0_V0l1C5lJd96gf4.roa (raw, json)
Hash identifier: Gmt4RZvrIWRT13Iw26gyLpgy8RVYHmVdWiTPJaOwWQk=
Subject key identifier: 39:73:52:AA:76:99:89:4A:34:FD:5D:25:D4:2E:65:25:DF:7A:81:FE
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 0190DA2AAB92C0E14BB55C8AF2FB0EEB203D
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OXNSqnaZiUo0_V0l1C5lJd96gf4.roa
Signing time: Mon 22 Jul 2024 11:19:07 +0000
ROA not before: Mon 22 Jul 2024 11:19:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 80.12.71.0/24 maxlen: 32
80.12.76.0/24 maxlen: 24
80.12.79.0/24 maxlen: 24
80.12.96.0/22 maxlen: 24
80.12.96.0/23 maxlen: 24
80.12.98.0/24 maxlen: 24
81.52.128.0/21 maxlen: 24
81.52.136.0/22 maxlen: 24
81.52.140.0/23 maxlen: 24
81.52.160.0/24 maxlen: 24
81.52.166.0/23 maxlen: 24
81.52.168.0/23 maxlen: 24
81.52.176.0/20 maxlen: 24
81.52.190.0/24 maxlen: 24
81.52.202.0/24 maxlen: 24
81.52.236.0/22 maxlen: 24
90.84.48.0/20 maxlen: 24
90.84.128.0/20 maxlen: 24
90.84.148.0/24 maxlen: 24
90.84.151.0/24 maxlen: 24
90.84.255.0/24 maxlen: 24
193.251.128.0/19 maxlen: 24
193.251.148.0/23 maxlen: 23
193.251.160.0/20 maxlen: 24
193.251.169.0/24 maxlen: 24
193.251.220.0/22 maxlen: 24
193.251.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:2a:ab:92:c0:e1:4b:b5:5c:8a:f2:fb:0e:eb:20:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jul 22 11:19:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=397352aa7699894a34fd5d25d42e6525df7a81fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:69:8b:12:0b:3b:d7:f1:c3:3f:3e:91:a3:
df:38:fe:8c:70:06:6d:aa:15:20:6a:88:63:0b:11:
2e:c7:fd:be:1a:f8:96:c4:b1:f3:9a:26:19:06:a1:
99:2b:f8:ae:1f:be:11:64:79:e8:94:d2:47:8d:c4:
27:bb:f8:81:b6:80:3b:6a:79:d3:c7:e7:ff:52:ca:
8a:a3:ac:1a:ff:8c:a0:c7:bd:05:62:d0:ac:bf:c3:
be:61:d8:45:cd:95:f3:5e:12:ea:93:0a:4a:0e:a1:
e8:06:3c:4e:e5:e6:1f:20:6a:2d:5f:da:dc:d0:54:
cd:4b:b4:98:bd:22:9a:9c:5d:d2:75:46:59:6a:01:
21:f6:68:a3:2c:41:21:10:29:3c:e1:d9:92:f7:14:
92:f4:cc:bc:7e:fa:b8:4e:74:88:ae:89:85:5a:b8:
7b:dd:aa:19:35:68:a8:cb:7f:05:1c:f0:2f:35:a6:
ce:1e:ae:28:43:83:0e:83:3c:b3:1d:2a:d6:51:ea:
46:ab:db:dc:7b:e4:03:2f:36:cc:c9:54:c8:10:2a:
75:75:4a:63:26:e0:93:85:31:67:d6:8d:73:6c:ee:
22:ff:59:36:2c:46:b7:e7:d8:19:b9:a9:f9:32:b4:
ea:83:ab:41:e0:52:2c:ff:0a:ab:41:4b:24:0b:bc:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:52:AA:76:99:89:4A:34:FD:5D:25:D4:2E:65:25:DF:7A:81:FE
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OXNSqnaZiUo0_V0l1C5lJd96gf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.71.0/24
80.12.76.0/24
80.12.79.0/24
80.12.96.0/22
81.52.128.0-81.52.141.255
81.52.160.0/24
81.52.166.0-81.52.169.255
81.52.176.0/20
81.52.202.0/24
81.52.236.0/22
90.84.48.0/20
90.84.128.0/20
90.84.148.0/24
90.84.151.0/24
90.84.255.0/24
193.251.128.0-193.251.175.255
193.251.220.0/22
193.251.240.0/20
Signature Algorithm: sha256WithRSAEncryption
83:be:c7:25:c8:89:2e:e0:08:df:b1:06:94:fd:63:30:69:d1:
22:51:d7:33:c4:a4:83:29:20:b7:7d:b8:d1:b6:98:3c:35:5b:
99:1f:8f:0e:06:02:25:7c:83:93:c5:96:2d:8f:70:ae:22:81:
9a:df:fb:9b:10:01:9e:3d:f6:46:86:be:4e:60:63:f9:64:8a:
82:fe:bc:7a:84:6c:2a:75:0d:4b:09:74:12:ef:75:f6:5a:95:
ed:37:63:66:a3:53:9e:50:e5:61:aa:cc:52:1a:29:4c:35:17:
4d:53:3c:93:c5:4c:95:94:fc:33:cc:f7:63:b4:84:85:6e:af:
e2:ba:9c:12:4c:99:36:f2:4c:61:b9:79:5e:be:7a:9c:78:b9:
c2:64:e5:d9:27:92:3a:95:ac:6f:f3:17:a3:3b:c2:83:46:3a:
4e:33:3f:76:c7:f2:6c:b9:ad:30:fc:e3:68:5b:c7:88:d3:7b:
17:33:ba:e0:1c:3e:d1:69:d2:e9:bb:be:ac:dc:35:d5:5f:40:
91:ef:ee:1e:35:a0:3c:75:8a:31:31:7b:01:91:f9:48:8b:06:
ee:52:4f:f5:ff:e4:d8:b9:f2:03:89:b2:bd:5f:5d:bf:af:66:
17:3a:78:fd:4e:66:6d:50:a6:e4:a2:cf:30:63:06:6f:25:0e:
95:a5:a7:c2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZDaKquSwOFLtVyK8vsO6yA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjQwNzIyMTExOTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTczNTJhYTc2OTk4OTRhMzRmZDVkMjVkNDJlNjUyNWRmN2E4MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKJpixILO9fxwz8+kaPfOP6McAZt
qhUgaohjCxEux/2+GviWxLHzmiYZBqGZK/iuH74RZHnolNJHjcQnu/iBtoA7annT
x+f/UsqKo6wa/4ygx70FYtCsv8O+YdhFzZXzXhLqkwpKDqHoBjxO5eYfIGotX9rc
0FTNS7SYvSKanF3SdUZZagEh9mijLEEhECk84dmS9xSS9My8fvq4TnSIromFWrh7
3aoZNWioy38FHPAvNabOHq4oQ4MOgzyzHSrWUepGq9vce+QDLzbMyVTIECp1dUpj
JuCThTFn1o1zbO4i/1k2LEa359gZuan5MrTqg6tB4FIs/wqrQUskC7zorwIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFDlzUqp2mYlKNP1dJdQuZSXfeoH+MB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvT1hOU3FuYVppVW8wX1YwbDFDNWxKZDk2Z2Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBABQ
DEcDBABQDEwDBABQDE8DBAJQDGAwDAMEB1E0gAMEAVE0jAMEAFE0oDAMAwQBUTSm
AwQBUTSoAwQEUTSwAwQAUTTKAwQCUTTsAwQEWlQwAwQEWlSAAwQAWlSUAwQAWlSX
AwQAWlT/MAwDBAfB+4ADBATB+6ADBALB+9wDBATB+/AwDQYJKoZIhvcNAQELBQAD
ggEBAIO+xyXIiS7gCN+xBpT9YzBp0SJR1zPEpIMpILd9uNG2mDw1W5kfjw4GAiV8
g5PFli2PcK4igZrf+5sQAZ499kaGvk5gY/lkioL+vHqEbCp1DUsJdBLvdfZale03
Y2ajU55Q5WGqzFIaKUw1F01TPJPFTJWU/DPM92O0hIVur+K6nBJMmTbyTGG5eV6+
epx4ucJk5dknkjqVrG/zF6M7woNGOk4zP3bH8my5rTD842hbx4jTexczuuAcPtFp
0um7vqzcNdVfQJHv7h41oDx1ijExewGR+UiLBu5ST/X/5Ni58gOJsr1fXb+vZhc6
eP1OZm1QpuSizzBjBm8lDpWlp8I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:39 2024 by rpki-client on console-ams.rpki-client.org