Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/FpLDIpDE-3wK79PeXiPqBlLS3Fk.roa
File: FpLDIpDE-3wK79PeXiPqBlLS3Fk.roa (raw, json)
Hash identifier: HlNIPckpo4ZlIvBNz+mqLcFU57maq/GT6mIxiZhP5S4=
Subject key identifier: 16:92:C3:22:90:C4:FB:7C:0A:EF:D3:DE:5E:23:EA:06:52:D2:DC:59
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 018FA61C96DF4C47415EC9A3A0A5F3AA3B87
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/FpLDIpDE-3wK79PeXiPqBlLS3Fk.roa
Signing time: Thu 23 May 2024 15:40:42 +0000
ROA not before: Thu 23 May 2024 15:40:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63902
IP address blocks: 185.238.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:1c:96:df:4c:47:41:5e:c9:a3:a0:a5:f3:aa:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: May 23 15:40:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1692c32290c4fb7c0aefd3de5e23ea0652d2dc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:c9:ae:8a:59:fa:8a:09:78:21:9f:1c:dc:
cc:59:2f:9f:07:55:b3:63:66:51:63:04:c7:ef:1a:
82:0d:2c:bb:cb:f8:74:dd:12:6e:50:43:bd:8d:ea:
1a:fb:74:43:85:41:b6:33:de:d0:2e:07:11:95:08:
91:f4:49:b3:0a:74:b6:5f:2d:ee:ba:60:34:e5:27:
9e:d8:ee:8b:1f:68:04:a6:89:7c:89:21:29:67:e6:
f4:52:62:85:20:d8:ff:d0:bc:db:2e:02:cc:5c:05:
f6:55:83:52:9e:ec:1b:fd:d1:40:5e:49:62:66:ed:
94:b6:4f:10:32:7a:79:a7:e2:64:52:dd:62:f1:07:
a0:c6:70:ca:1a:59:cf:71:58:66:1b:ed:8d:77:7c:
a5:71:d8:fd:31:80:65:61:70:52:1c:8d:85:7d:0c:
ea:89:d8:e8:ee:9e:ac:3e:05:a5:40:82:7c:6e:20:
22:a5:f7:bc:13:19:0c:67:2e:8d:10:31:b8:cc:11:
00:75:8e:92:10:49:93:9a:9c:f4:3f:02:64:9e:92:
f5:4e:de:dc:5e:3a:d1:31:e6:93:93:22:5e:c7:3a:
b9:5f:d1:6a:0f:ff:4e:97:b0:2c:95:6d:bc:5d:1f:
a1:06:48:dc:12:08:36:72:c8:bc:b8:61:72:d2:dc:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:C3:22:90:C4:FB:7C:0A:EF:D3:DE:5E:23:EA:06:52:D2:DC:59
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/FpLDIpDE-3wK79PeXiPqBlLS3Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:32:61:9f:c4:7f:a1:0a:7e:43:5b:97:ae:69:1a:7d:f0:2c:
ef:18:53:04:f2:a5:2f:66:0f:92:89:99:7a:3a:c2:c6:7d:01:
f4:87:f6:9b:34:3f:99:bf:70:98:cb:d4:d9:13:1d:db:7f:ed:
35:26:c4:62:2a:c9:b1:58:16:96:9b:f2:05:48:a1:7f:b4:97:
9a:92:78:98:0b:fc:ea:cc:59:c4:58:b3:1e:19:ae:cf:db:41:
8c:59:09:6f:6c:95:44:f2:ad:ee:e0:28:42:04:36:c5:8c:1d:
c6:09:e0:80:c7:b5:e3:fe:1c:73:07:ed:d7:4e:bf:e5:45:5c:
8f:2a:bb:21:41:67:d4:03:fc:36:aa:9c:a4:d3:1b:77:54:e6:
a7:9a:48:69:0e:90:7b:22:32:23:0a:e3:ea:1b:cb:7f:22:a5:
5b:2f:d9:88:99:1c:f7:5a:71:3b:b2:a0:62:26:41:b8:56:6c:
35:88:cd:37:91:90:51:f8:36:3b:f4:90:52:42:e8:9e:2d:18:
8e:c7:3b:32:25:26:92:10:b0:c9:25:e2:b9:a8:19:22:ed:72:
1d:4a:c4:b6:b7:91:43:0d:b9:4a:0f:01:de:6d:b9:ea:3c:ef:
4f:b2:04:2d:39:dc:39:2a:dc:8b:fd:8a:82:7b:3b:c2:38:28:
76:09:67:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+mHJbfTEdBXsmjoKXzqjuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5
NjdhMTkwHhcNMjQwNTIzMTU0MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjkyYzMyMjkwYzRmYjdjMGFlZmQzZGU1ZTIzZWEwNjUyZDJkYzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiDJropZ+ooJeCGfHNzMWS+fB1Wz
Y2ZRYwTH7xqCDSy7y/h03RJuUEO9jeoa+3RDhUG2M97QLgcRlQiR9EmzCnS2Xy3u
umA05See2O6LH2gEpol8iSEpZ+b0UmKFINj/0LzbLgLMXAX2VYNSnuwb/dFAXkli
Zu2Utk8QMnp5p+JkUt1i8QegxnDKGlnPcVhmG+2Nd3ylcdj9MYBlYXBSHI2FfQzq
idjo7p6sPgWlQIJ8biAipfe8ExkMZy6NEDG4zBEAdY6SEEmTmpz0PwJknpL1Tt7c
XjrRMeaTkyJexzq5X9FqD/9Ol7AslW28XR+hBkjcEgg2csi8uGFy0tz71QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBaSwyKQxPt8Cu/T3l4j6gZS0txZMB8GA1UdIwQY
MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt
YmQ2ZTNiMDI2YzM3LzEvRnBMRElwREUtM3dLNzlQZVhpUHFCbExTM0ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3
LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue7UMA0G
CSqGSIb3DQEBCwUAA4IBAQAsMmGfxH+hCn5DW5euaRp98CzvGFME8qUvZg+SiZl6
OsLGfQH0h/abND+Zv3CYy9TZEx3bf+01JsRiKsmxWBaWm/IFSKF/tJeakniYC/zq
zFnEWLMeGa7P20GMWQlvbJVE8q3u4ChCBDbFjB3GCeCAx7Xj/hxzB+3XTr/lRVyP
KrshQWfUA/w2qpyk0xt3VOanmkhpDpB7IjIjCuPqG8t/IqVbL9mImRz3WnE7sqBi
JkG4Vmw1iM03kZBR+DY79JBSQuieLRiOxzsyJSaSELDJJeK5qBki7XIdSsS2t5FD
DblKDwHebbnqPO9PsgQtOdw5KtyL/YqCezvCOCh2CWc2
-----END CERTIFICATE-----
Generated at Thu Jun 20 12:04:30 2024 by rpki-client on console-fra.rpki-client.org