Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/HOB6-18tD2swUY9EtuFRzL_sLdY.roa
File: HOB6-18tD2swUY9EtuFRzL_sLdY.roa (raw, json)
Hash identifier: w/8SgOKzEOesE766Hno8YZl2SGhQEU2WkfdATymt/B4=
Subject key identifier: 1C:E0:7A:FB:5F:2D:0F:6B:30:51:8F:44:B6:E1:51:CC:BF:EC:2D:D6
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 018CC86F120DC537FD6C83D7AE1B71C4A7D6
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/HOB6-18tD2swUY9EtuFRzL_sLdY.roa
Signing time: Tue 02 Jan 2024 04:29:31 +0000
ROA not before: Tue 02 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51942
IP address blocks: 91.235.174.0/24 maxlen: 24
195.88.202.0/23 maxlen: 23
195.69.225.0/24 maxlen: 24
188.227.204.0/22 maxlen: 22
185.38.103.0/24 maxlen: 24
2a02:7f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:12:0d:c5:37:fd:6c:83:d7:ae:1b:71:c4:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jan 2 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ce07afb5f2d0f6b30518f44b6e151ccbfec2dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:cc:b1:6f:9d:da:b8:ec:71:cd:11:7f:58:
03:f1:b6:58:3c:e9:7a:b3:38:85:00:31:e9:81:68:
a8:5e:f3:a0:01:74:12:e5:c5:f1:03:7a:70:ac:8c:
68:f1:cc:13:7c:d5:d3:c2:15:27:45:2c:65:22:1f:
e6:4e:f8:a3:0c:fb:a4:e1:6b:25:86:39:ba:38:07:
2b:66:75:b3:85:e7:38:f3:4c:34:97:98:af:f0:31:
6b:54:d5:d6:71:7d:fe:62:6d:84:70:ea:4f:5c:1b:
89:1a:4c:d9:0d:2f:f1:21:ca:9a:77:37:71:a0:3c:
5d:c4:a4:9d:f2:b5:1b:ff:fc:f8:0c:82:6b:33:60:
19:de:4d:98:2c:e0:23:43:88:44:42:de:36:b2:48:
6f:bd:22:37:57:62:fd:16:b2:2f:95:f1:09:51:8b:
4e:b8:f6:8f:df:3a:f4:df:e2:4a:5e:50:b2:57:94:
d5:2c:94:a6:29:c5:8c:e3:0e:ee:98:b0:a1:fb:7b:
03:98:e4:95:82:14:2f:89:f4:e0:5b:fb:7b:1e:99:
9a:a8:aa:6e:74:51:4c:ce:a7:8e:a0:ba:69:9a:fd:
65:e5:6d:71:95:ac:72:c3:db:5a:11:d5:d5:a7:53:
de:e1:7b:8a:5f:2a:80:6c:7e:3d:39:fb:46:cb:26:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E0:7A:FB:5F:2D:0F:6B:30:51:8F:44:B6:E1:51:CC:BF:EC:2D:D6
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/HOB6-18tD2swUY9EtuFRzL_sLdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.174.0/24
185.38.103.0/24
188.227.204.0/22
195.69.225.0/24
195.88.202.0/23
IPv6:
2a02:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:7a:35:d3:29:dd:b4:69:d3:64:56:26:20:a2:01:d7:3c:e3:
43:3a:f1:5b:d2:ef:20:7b:b8:1f:f7:5d:f9:74:6b:26:cc:4c:
80:57:0b:b4:2f:d7:c1:8a:24:4c:c1:64:76:8c:cf:e8:f3:2a:
5d:2f:53:84:a0:28:9e:06:8a:3e:33:fb:d2:8f:e7:fd:e1:42:
35:2f:2e:eb:f5:3f:e6:5c:df:ca:7a:54:c8:7d:17:ef:88:cb:
03:31:8f:fd:49:94:fe:d4:d1:4f:74:48:dd:80:a4:54:60:c6:
fe:d7:ff:e4:53:9e:d2:8e:f8:c2:5d:82:f9:2f:f0:c4:f9:23:
2a:dd:72:84:67:d0:a1:0c:18:b2:59:46:75:8b:7f:0c:80:92:
94:47:ad:27:14:46:b9:99:5a:a5:a9:45:28:dd:50:90:0e:6b:
b9:02:30:94:92:b8:cf:76:88:a3:44:82:ea:cb:80:b7:86:a0:
31:ac:a5:c5:50:e4:6e:63:f8:c9:85:cd:a4:ae:0a:1f:a1:aa:
13:91:af:d7:23:85:34:02:f3:25:f9:9a:81:eb:a7:4d:d3:6f:
fb:c5:3b:ca:d8:90:5d:8d:b8:8d:2d:8a:3f:00:0f:7f:57:dc:
b8:13:99:c4:42:00:1e:19:95:e8:e3:80:84:45:e8:13:18:49:
79:60:c8:b6
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYzIbxINxTf9bIPXrhtxxKfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YmExNWQ0N2JhNGY0NDgyNzY0NDcyZDhkOTcxNDZhMWVi
YmJmODYwHhcNMjQwMTAyMDQyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2UwN2FmYjVmMmQwZjZiMzA1MThmNDRiNmUxNTFjY2JmZWMyZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSPMsW+d2rjscc0Rf1gD8bZYPOl6
sziFADHpgWioXvOgAXQS5cXxA3pwrIxo8cwTfNXTwhUnRSxlIh/mTvijDPuk4Wsl
hjm6OAcrZnWzhec480w0l5iv8DFrVNXWcX3+Ym2EcOpPXBuJGkzZDS/xIcqadzdx
oDxdxKSd8rUb//z4DIJrM2AZ3k2YLOAjQ4hEQt42skhvvSI3V2L9FrIvlfEJUYtO
uPaP3zr03+JKXlCyV5TVLJSmKcWM4w7umLCh+3sDmOSVghQvifTgW/t7HpmaqKpu
dFFMzqeOoLppmv1l5W1xlaxyw9taEdXVp1Pe4XuKXyqAbH49OftGyybXCwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBzgevtfLQ9rMFGPRLbhUcy/7C3WMB8GA1UdIwQY
MBaAFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAt
ZmUzYjkxOGMzMDk3LzEvSE9CNi0xOHREMnN3VVk5RXR1RlJ6TF9zTGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAtZmUzYjkxOGMzMDk3
LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW+uuAwQA
uSZnAwQCvOPMAwQAw0XhAwQBw1jKMA0EAgACMAcDBQMqAn+AMA0GCSqGSIb3DQEB
CwUAA4IBAQBLejXTKd20adNkViYgogHXPONDOvFb0u8ge7gf9135dGsmzEyAVwu0
L9fBiiRMwWR2jM/o8ypdL1OEoCieBoo+M/vSj+f94UI1Ly7r9T/mXN/KelTIfRfv
iMsDMY/9SZT+1NFPdEjdgKRUYMb+1//kU57SjvjCXYL5L/DE+SMq3XKEZ9ChDBiy
WUZ1i38MgJKUR60nFEa5mVqlqUUo3VCQDmu5AjCUkrjPdoijRILqy4C3hqAxrKXF
UORuY/jJhc2krgofoaoTka/XI4U0AvMl+ZqB66dN02/7xTvK2JBdjbiNLYo/AA9/
V9y4E5nEQgAeGZXo44CERegTGEl5YMi2
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:04:39 2024 by rpki-client on console-fra.rpki-client.org