Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/Fs3_RAKnwuI-tvUYu_2_bLiXJEI.roa
File: Fs3_RAKnwuI-tvUYu_2_bLiXJEI.roa (raw, json)
Hash identifier: OuevnC/q/QLfRode5EfJYJJTOBEYrx1xAJOJlwJRu/U=
Subject key identifier: 16:CD:FF:44:02:A7:C2:E2:3E:B6:F5:18:BB:FD:BF:6C:B8:97:24:42
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 018CC5013EADA6DC35B106A60DE6BC7A892D
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/Fs3_RAKnwuI-tvUYu_2_bLiXJEI.roa
Signing time: Mon 01 Jan 2024 12:30:42 +0000
ROA not before: Mon 01 Jan 2024 12:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8469
IP address blocks: 195.82.80.0/24 maxlen: 24
5.61.80.0/21 maxlen: 24
195.94.64.0/19 maxlen: 24
195.135.128.0/18 maxlen: 24
62.40.0.0/19 maxlen: 24
80.87.160.0/20 maxlen: 24
195.227.0.0/16 maxlen: 24
195.82.64.0/19 maxlen: 24
185.32.32.0/22 maxlen: 24
212.237.160.0/21 maxlen: 24
2a00:5f40::/29 maxlen: 29
2001:1440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3e:ad:a6:dc:35:b1:06:a6:0d:e6:bc:7a:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 1 12:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16cdff4402a7c2e23eb6f518bbfdbf6cb8972442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4a:1a:d9:74:67:ae:62:98:cc:2e:e5:f4:cb:
4f:91:c4:9f:92:50:8c:dc:9b:5e:c7:50:36:f1:a6:
30:ff:dc:c8:43:37:17:b8:24:5f:f3:ab:fc:8d:14:
9c:c0:5d:48:85:98:0e:c8:4d:e3:c3:a3:58:3d:a9:
22:36:ba:b1:14:bd:47:13:fe:29:5e:d5:68:45:10:
df:db:a9:6b:5b:34:a4:cc:90:99:38:2a:0e:a4:28:
36:b8:bd:55:40:7c:b0:9a:3c:28:e1:2c:21:e3:c2:
41:9e:c8:6c:c8:a0:e9:a8:a9:f2:af:65:51:0f:98:
a8:64:42:dc:ca:b1:52:f7:25:79:48:4d:cd:0c:2d:
3e:b0:fc:7c:2c:20:b4:48:6f:7b:94:2e:49:7c:e7:
48:ce:39:f5:db:ea:57:c4:2b:ef:9e:2b:d1:93:5e:
ef:6c:95:af:aa:9c:29:b5:52:ee:1a:ef:8c:77:a2:
82:e9:44:d8:6d:b1:66:01:17:51:9e:98:16:3d:03:
8f:90:a1:eb:2f:c9:7c:09:4f:ba:17:ce:92:b0:d4:
7b:e5:4c:f4:71:1f:5d:3c:d6:dc:b7:f4:06:da:67:
74:25:6f:65:b1:38:b2:c7:34:f5:38:2a:f4:7c:48:
0e:d7:12:6e:21:2b:ae:7d:ad:45:90:1b:83:db:c6:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CD:FF:44:02:A7:C2:E2:3E:B6:F5:18:BB:FD:BF:6C:B8:97:24:42
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/Fs3_RAKnwuI-tvUYu_2_bLiXJEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.80.0/21
62.40.0.0/19
80.87.160.0/20
185.32.32.0/22
195.82.64.0/19
195.94.64.0/19
195.135.128.0/18
195.227.0.0/16
212.237.160.0/21
IPv6:
2001:1440::/32
2a00:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:ab:0b:db:22:80:68:75:09:25:c1:d6:a1:f7:f8:0e:42:be:
20:7b:a7:2f:e4:2b:9a:93:4a:79:b5:98:6b:34:29:79:ef:14:
5b:87:84:91:06:11:a7:a6:0e:36:ab:07:4b:58:c8:74:09:30:
11:db:80:68:2c:21:e4:12:78:49:ea:a4:c4:49:7e:23:dc:21:
73:19:b8:4b:73:22:fe:5f:2a:3a:ca:9c:92:e3:4d:04:a6:a1:
5b:4d:5a:44:ed:d9:ed:8e:b5:26:2f:ba:99:a1:77:fc:6a:95:
a8:bb:b8:9a:d3:be:01:98:09:bc:e7:d9:31:0d:a4:d1:1e:0f:
a9:0e:14:4a:58:0b:c1:d9:d2:a9:45:4e:22:f9:e7:40:bd:b9:
29:60:6d:e7:10:40:6c:57:25:be:4f:da:e0:8d:2a:cf:3f:b9:
4c:a8:79:9d:99:d3:7f:d4:7e:1d:71:bd:47:11:1e:2a:30:05:
59:07:ab:e4:ed:52:90:0c:4f:6b:c6:f7:f1:8b:9a:5b:48:12:
f1:27:23:9f:d0:5c:35:5b:3f:4a:06:52:94:dd:4a:f4:b8:6d:
c7:dc:6f:ce:1d:4b:e7:91:56:17:9e:09:ea:4c:8f:d4:48:69:
4c:78:ad:df:7a:30:22:2b:c0:d4:86:52:bf:52:5b:61:59:20:
10:57:21:9f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYzFAT6tptw1sQamDea8eoktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh
N2Q2MmMwHhcNMjQwMTAxMTIzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmNkZmY0NDAyYTdjMmUyM2ViNmY1MThiYmZkYmY2Y2I4OTcyNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70oa2XRnrmKYzC7l9MtPkcSfklCM
3Jtex1A28aYw/9zIQzcXuCRf86v8jRScwF1IhZgOyE3jw6NYPakiNrqxFL1HE/4p
XtVoRRDf26lrWzSkzJCZOCoOpCg2uL1VQHywmjwo4Swh48JBnshsyKDpqKnyr2VR
D5ioZELcyrFS9yV5SE3NDC0+sPx8LCC0SG97lC5JfOdIzjn12+pXxCvvnivRk17v
bJWvqpwptVLuGu+Md6KC6UTYbbFmARdRnpgWPQOPkKHrL8l8CU+6F86SsNR75Uz0
cR9dPNbct/QG2md0JW9lsTiyxzT1OCr0fEgO1xJuISuufa1FkBuD28bh+wIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFBbN/0QCp8LiPrb1GLv9v2y4lyRCMB8GA1UdIwQY
MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt
ZDA3NDY0YjliMzc4LzEvRnMzX1JBS253dUktdHZVWXVfMl9iTGlYSkVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4
LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzA7BAIAATA1AwQDBT1QAwQF
PigAAwQEUFegAwQCuSAgAwQFw1JAAwQFw15AAwQGw4eAAwMAw+MDBAPU7aAwFAQC
AAIwDgMFACABFEADBQMqAF9AMA0GCSqGSIb3DQEBCwUAA4IBAQAOqwvbIoBodQkl
wdah9/gOQr4ge6cv5Cuak0p5tZhrNCl57xRbh4SRBhGnpg42qwdLWMh0CTAR24Bo
LCHkEnhJ6qTESX4j3CFzGbhLcyL+Xyo6ypyS400EpqFbTVpE7dntjrUmL7qZoXf8
apWou7ia074BmAm859kxDaTRHg+pDhRKWAvB2dKpRU4i+edAvbkpYG3nEEBsVyW+
T9rgjSrPP7lMqHmdmdN/1H4dcb1HER4qMAVZB6vk7VKQDE9rxvfxi5pbSBLxJyOf
0Fw1Wz9KBlKU3Ur0uG3H3G/OHUvnkVYXngnqTI/USGlMeK3fejAiK8DUhlK/Ulth
WSAQVyGf
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:40:11 2024 by rpki-client on console-fra.rpki-client.org