Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MOlwbMT7qvoZvBQpDWufvEmBYY4.roa
File: MOlwbMT7qvoZvBQpDWufvEmBYY4.roa (raw, json)
Hash identifier: 9TB3Umwsrw2RfsswndWbkp8u/QCEpvt4cVsLGxJEAU8=
Subject key identifier: 30:E9:70:6C:C4:FB:AA:FA:19:BC:14:29:0D:6B:9F:BC:49:81:61:8E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EA3E4CEC6F8C0FCDB972A38C293677A58
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MOlwbMT7qvoZvBQpDWufvEmBYY4.roa
Signing time: Wed 03 Apr 2024 12:17:45 +0000
ROA not before: Wed 03 Apr 2024 12:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 82.153.225.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
89.213.131.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:e4:ce:c6:f8:c0:fc:db:97:2a:38:c2:93:67:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 3 12:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30e9706cc4fbaafa19bc14290d6b9fbc4981618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:71:3b:0f:45:92:8b:5d:18:69:96:1b:a3:
80:7b:2d:7d:2f:b4:8b:36:df:06:f1:4f:18:f2:4d:
c0:34:a9:3c:08:d6:4e:c3:0c:c8:7c:56:6e:74:15:
08:67:55:e1:15:ab:e9:c0:9e:7f:ac:e4:25:47:01:
ba:6d:ed:78:1f:02:8e:76:2c:ad:9c:7b:93:4e:98:
dd:47:7c:87:3d:14:2a:51:38:2f:7b:ca:2b:1c:05:
32:af:00:df:d0:c3:2b:64:b4:cf:3f:d9:8f:f0:f7:
fe:bd:94:c6:ea:bd:71:47:35:a8:bd:e7:1d:e7:c2:
ea:86:48:98:d4:22:5f:6e:2c:e6:4d:c6:f5:ee:d2:
88:54:ea:95:ab:a2:75:cf:0c:a3:26:3e:38:ed:e2:
24:b5:e3:6a:38:be:3f:2c:e9:b2:0a:f8:ac:c8:ff:
c1:68:c0:fe:5a:19:9d:38:17:fd:06:38:7c:f8:26:
47:f0:c1:cc:7f:e0:a7:7c:ad:1a:05:e3:20:33:81:
cd:57:ae:72:4f:11:f0:f8:7f:7d:05:0a:b8:0a:3f:
ba:7e:69:d2:02:7e:5e:01:bc:ba:45:4f:c3:8c:6d:
61:44:07:89:b8:10:58:c1:d8:b7:09:b0:da:d7:da:
12:cc:13:9f:f5:37:27:e6:80:35:8d:1d:8b:b1:6a:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E9:70:6C:C4:FB:AA:FA:19:BC:14:29:0D:6B:9F:BC:49:81:61:8E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MOlwbMT7qvoZvBQpDWufvEmBYY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.225.0/24
89.213.43.0/24
89.213.99.0/24
89.213.131.0/24
89.213.145.0-89.213.146.255
109.176.200.0/24
213.130.155.0/24
213.218.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5d:31:2e:f2:a6:2f:15:69:ad:86:69:7c:ef:34:c7:80:83:
02:9b:a5:61:e5:4a:93:8a:a6:2c:6e:0b:31:86:ce:37:f9:4e:
80:94:d8:8c:ba:07:e6:47:40:11:02:bf:3f:93:73:12:b5:4f:
b3:72:af:b4:94:e6:7c:e7:ae:44:e1:ab:95:2f:36:ae:68:8a:
8d:da:7b:2c:71:cf:2f:f3:75:cb:a5:79:fe:b7:5e:d0:ae:61:
d3:f5:c8:25:11:df:67:ef:b2:34:fb:87:c0:28:8c:34:0c:bb:
b5:a4:92:9d:3c:93:b2:c9:5a:88:40:10:36:62:92:e3:87:5c:
1e:b7:3a:47:b1:5f:9a:c0:01:cf:4a:ac:b2:3a:46:92:a6:e0:
e8:37:78:e4:b4:42:13:a0:37:df:7e:1e:15:c6:9a:62:3a:96:
95:8e:10:9f:73:f3:8c:ea:1b:72:24:09:7d:9b:77:48:31:f1:
44:ac:5f:38:78:5c:c0:99:63:ad:e9:b6:8b:aa:9d:76:95:68:
95:e9:c8:ba:5a:da:2a:c4:ab:05:e3:cf:ab:84:c7:54:89:6c:
6e:05:69:1f:6e:fd:66:32:8d:83:1c:f8:cb:01:e1:bf:59:d4:
be:ba:30:b6:91:01:6d:ab:bd:1e:06:4d:74:91:20:6a:5f:3c:
e6:97:01:ef
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAY6j5M7G+MD825cqOMKTZ3pYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDAzMTIxNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGU5NzA2Y2M0ZmJhYWZhMTliYzE0MjkwZDZiOWZiYzQ5ODE2MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEdxOw9FkotdGGmWG6OAey19L7SL
Nt8G8U8Y8k3ANKk8CNZOwwzIfFZudBUIZ1XhFavpwJ5/rOQlRwG6be14HwKOdiyt
nHuTTpjdR3yHPRQqUTgve8orHAUyrwDf0MMrZLTPP9mP8Pf+vZTG6r1xRzWovecd
58LqhkiY1CJfbizmTcb17tKIVOqVq6J1zwyjJj447eIkteNqOL4/LOmyCvisyP/B
aMD+WhmdOBf9Bjh8+CZH8MHMf+CnfK0aBeMgM4HNV65yTxHw+H99BQq4Cj+6fmnS
An5eAby6RU/DjG1hRAeJuBBYwdi3CbDa19oSzBOf9Tcn5oA1jR2LsWpdbwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFDDpcGzE+6r6GbwUKQ1rn7xJgWGOMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTU9sd2JNVDdxdm9adkJRcERXdWZ2RW1CWVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAUpnhAwQA
WdUrAwQAWdVjAwQAWdWDMAwDBABZ1ZEDBABZ1ZIDBABtsMgDBADVgpsDBADV2uEw
DQYJKoZIhvcNAQELBQADggEBACxdMS7ypi8Vaa2GaXzvNMeAgwKbpWHlSpOKpixu
CzGGzjf5ToCU2Iy6B+ZHQBECvz+TcxK1T7Nyr7SU5nznrkThq5UvNq5oio3aeyxx
zy/zdculef63XtCuYdP1yCUR32fvsjT7h8AojDQMu7Wkkp08k7LJWohAEDZikuOH
XB63OkexX5rAAc9KrLI6RpKm4Og3eOS0QhOgN99+HhXGmmI6lpWOEJ9z84zqG3Ik
CX2bd0gx8USsXzh4XMCZY63ptouqnXaVaJXpyLpa2irEqwXjz6uEx1SJbG4FaR9u
/WYyjYMc+MsB4b9Z1L66MLaRAW2rvR4GTXSRIGpfPOaXAe8=
-----END CERTIFICATE-----
Generated at Fri May 3 18:29:18 2024 by rpki-client on console-ams.rpki-client.org