Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OwkBmjH90fGkGwX1OhM3N47OldU.roa
File: OwkBmjH90fGkGwX1OhM3N47OldU.roa (raw, json)
Hash identifier: sXRCSrql/NmjvVn2v2OAGpKbiWmeEqFsifqXvuap0E8=
Subject key identifier: 3B:09:01:9A:31:FD:D1:F1:A4:1B:05:F5:3A:13:37:37:8E:CE:95:D5
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D1B978723492198EAC5B5668CE4DB0F38
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OwkBmjH90fGkGwX1OhM3N47OldU.roa
Signing time: Thu 18 Jan 2024 08:02:11 +0000
ROA not before: Thu 18 Jan 2024 08:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6813
IP address blocks: 80.58.201.0/24 maxlen: 24
80.58.252.0/24 maxlen: 24
81.45.26.0/23 maxlen: 23
81.45.156.0/22 maxlen: 22
194.179.98.0/23 maxlen: 23
194.224.158.0/24 maxlen: 24
195.55.74.0/24 maxlen: 24
195.235.59.0/24 maxlen: 24
195.235.232.0/24 maxlen: 24
195.235.234.0/23 maxlen: 23
212.170.30.0/23 maxlen: 23
212.170.34.0/23 maxlen: 23
212.170.227.0/24 maxlen: 24
212.170.232.0/24 maxlen: 24
213.4.28.0/24 maxlen: 24
213.4.82.0/23 maxlen: 23
213.4.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:97:87:23:49:21:98:ea:c5:b5:66:8c:e4:db:0f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 18 08:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b09019a31fdd1f1a41b05f53a1337378ece95d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:2d:00:a2:7b:40:ed:27:ec:6b:7f:14:30:
84:4e:f9:36:0b:48:35:69:7c:07:d2:12:02:17:ec:
0a:a6:f6:6a:5e:ec:9e:7c:41:64:3c:4c:d4:ec:8c:
b6:d9:76:a6:c7:a0:fe:4c:92:25:98:7c:37:cb:0a:
88:5a:67:7d:02:99:b5:d6:3b:ae:cf:ae:16:bb:c8:
36:98:ac:80:eb:00:9d:78:e6:e6:ce:30:1f:88:52:
d4:78:df:d0:a3:67:49:8f:68:7c:89:5d:f2:89:10:
80:48:e8:f6:60:80:5d:05:55:f4:24:75:1f:3e:3d:
05:20:eb:3a:90:3a:ca:0a:ca:e4:e3:78:58:c5:ee:
b8:7b:38:06:e3:29:48:4a:24:84:a1:1a:ae:2f:0e:
47:e4:af:c9:25:13:60:7b:5e:7d:09:6e:bc:aa:4b:
95:0b:1e:0a:6c:ab:03:41:84:f3:a0:36:41:f5:ae:
11:cf:04:ec:98:39:cc:a8:16:03:c0:7e:38:79:8f:
9b:1d:16:bf:98:74:ed:9b:f4:a3:c0:08:a6:08:36:
4a:c9:f4:ca:70:58:35:bd:14:ba:5a:4d:f9:32:04:
f1:4a:a8:03:b2:4e:f3:d5:59:64:8a:a9:b1:a5:c0:
bf:1c:31:9f:3a:a2:17:9d:97:a4:64:05:f2:2b:ab:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:01:9A:31:FD:D1:F1:A4:1B:05:F5:3A:13:37:37:8E:CE:95:D5
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OwkBmjH90fGkGwX1OhM3N47OldU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.58.201.0/24
80.58.252.0/24
81.45.26.0/23
81.45.156.0/22
194.179.98.0/23
194.224.158.0/24
195.55.74.0/24
195.235.59.0/24
195.235.232.0/24
195.235.234.0/23
212.170.30.0/23
212.170.34.0/23
212.170.227.0/24
212.170.232.0/24
213.4.28.0/24
213.4.82.0/23
213.4.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e6:6d:72:a5:0e:b8:1a:ad:c3:38:cc:e3:f0:72:8b:b6:08:
f2:ad:79:4f:96:df:c6:d9:da:b7:fa:32:8a:66:73:07:01:89:
d4:f6:47:78:90:04:14:c1:3b:5a:f6:db:94:86:0c:25:ed:03:
98:3f:15:56:98:b7:5e:1f:d0:2e:b7:27:36:79:b4:24:e0:c3:
42:2f:df:77:76:9f:98:3a:80:a5:eb:77:7b:50:3a:8c:70:d0:
16:c0:ec:b4:82:ae:06:b5:fa:33:30:48:86:b4:b7:ee:0e:14:
22:f4:46:88:b3:2d:06:3b:bc:20:41:89:79:07:f2:5b:af:7b:
24:02:77:25:27:0f:0a:b1:30:a4:51:93:6b:ae:65:d4:9d:92:
1c:97:19:ed:87:8d:5f:c9:0b:0b:be:da:48:20:35:1c:23:f3:
40:c4:50:01:08:71:30:e2:84:cc:c6:45:af:61:20:0c:32:bd:
b8:40:c1:5c:e3:c1:44:14:1b:60:a4:73:56:88:f5:1b:52:4c:
9c:cd:a8:0e:4f:f0:28:90:99:40:f3:62:f4:6f:a5:be:7a:10:
6e:32:3d:a8:61:0d:98:b9:b6:64:f8:8c:7f:bf:a9:69:de:47:
e6:48:a8:a2:39:89:72:fa:ee:44:ae:84:cf:d5:ef:57:36:d1:
c1:df:d0:ae
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAY0bl4cjSSGY6sW1Zozk2w84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMTE4MDgwMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjA5MDE5YTMxZmRkMWYxYTQxYjA1ZjUzYTEzMzczNzhlY2U5NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkYtAKJ7QO0n7Gt/FDCETvk2C0g1
aXwH0hICF+wKpvZqXuyefEFkPEzU7Iy22Xamx6D+TJIlmHw3ywqIWmd9Apm11juu
z64Wu8g2mKyA6wCdeObmzjAfiFLUeN/Qo2dJj2h8iV3yiRCASOj2YIBdBVX0JHUf
Pj0FIOs6kDrKCsrk43hYxe64ezgG4ylISiSEoRquLw5H5K/JJRNge159CW68qkuV
Cx4KbKsDQYTzoDZB9a4RzwTsmDnMqBYDwH44eY+bHRa/mHTtm/SjwAimCDZKyfTK
cFg1vRS6Wk35MgTxSqgDsk7z1VlkiqmxpcC/HDGfOqIXnZekZAXyK6u4owIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFDsJAZox/dHxpBsF9ToTNzeOzpXVMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvT3drQm1qSDkwZkdrR3dYMU9oTTNONDdPbGRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAUDrJAwQA
UDr8AwQBUS0aAwQCUS2cAwQBwrNiAwQAwuCeAwQAwzdKAwQAw+s7AwQAw+voAwQB
w+vqAwQB1KoeAwQB1KoiAwQA1KrjAwQA1KroAwQA1QQcAwQB1QRSAwQA1QRiMA0G
CSqGSIb3DQEBCwUAA4IBAQAa5m1ypQ64Gq3DOMzj8HKLtgjyrXlPlt/G2dq3+jKK
ZnMHAYnU9kd4kAQUwTta9tuUhgwl7QOYPxVWmLdeH9Autyc2ebQk4MNCL993dp+Y
OoCl63d7UDqMcNAWwOy0gq4GtfozMEiGtLfuDhQi9EaIsy0GO7wgQYl5B/Jbr3sk
AnclJw8KsTCkUZNrrmXUnZIclxnth41fyQsLvtpIIDUcI/NAxFABCHEw4oTMxkWv
YSAMMr24QMFc48FEFBtgpHNWiPUbUkyczagOT/AokJlA82L0b6W+ehBuMj2oYQ2Y
ubZk+Ix/v6lp3kfmSKiiOYly+u5EroTP1e9XNtHB39Cu
-----END CERTIFICATE-----
Generated at Mon Jun 17 10:33:38 2024 by rpki-client on console-fra.rpki-client.org