Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/FnfosLnOnqnT3tPyh1ECfm4MONw.roa
File: FnfosLnOnqnT3tPyh1ECfm4MONw.roa (raw, json)
Hash identifier: faH9U+PcxZMEIG7KpU7BPGiNLGQTPwLR48/E6P3Kn34=
Subject key identifier: 16:77:E8:B0:B9:CE:9E:A9:D3:DE:D3:F2:87:51:02:7E:6E:0C:38:DC
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 018CC86F0B2A61D903ABE909086386F38EE8
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/FnfosLnOnqnT3tPyh1ECfm4MONw.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 185.251.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0b:2a:61:d9:03:ab:e9:09:08:63:86:f3:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1677e8b0b9ce9ea9d3ded3f28751027e6e0c38dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:70:e7:69:bb:f9:36:21:12:b3:09:db:30:
18:42:02:6a:6c:c7:fd:29:8c:86:49:7e:95:13:40:
a7:3f:77:af:a9:5b:25:4b:d3:95:21:18:39:af:b0:
47:b9:27:1f:1f:78:c5:1c:7e:27:ec:25:b1:fd:7b:
41:54:eb:cb:2b:21:f2:5f:2e:d6:91:9d:20:42:02:
02:d1:39:5b:92:f6:31:3b:a5:9a:d7:11:8c:ff:3b:
cd:f6:da:a1:e7:da:55:73:cc:39:14:40:24:0c:c4:
80:d6:ef:02:4f:5b:a5:ca:3f:46:3d:e5:c8:ec:d9:
1e:f2:52:e5:48:41:ae:ff:8f:d3:a0:bb:b4:0e:80:
19:36:15:71:9f:d4:d9:3e:e2:92:a3:2a:5e:90:80:
0a:59:35:77:66:92:bf:d5:c0:e5:37:bc:9c:92:cb:
0b:64:49:e7:78:22:d0:6e:21:df:3c:44:f3:9a:56:
ec:ca:c7:79:03:8b:a0:3d:67:4e:aa:49:1a:9b:6a:
3c:ff:3d:8e:f2:ce:c9:8d:cc:3b:8d:17:5f:1b:64:
70:5f:e4:06:50:4c:e1:ca:ee:25:fe:a6:dd:0b:a4:
38:61:c1:8c:ea:8d:d3:5d:81:cb:14:fe:dc:d5:dd:
32:e8:93:8d:b5:06:77:a8:3d:13:ad:15:21:d8:93:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:E8:B0:B9:CE:9E:A9:D3:DE:D3:F2:87:51:02:7E:6E:0C:38:DC
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/FnfosLnOnqnT3tPyh1ECfm4MONw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:37:de:fd:cc:2a:7f:0b:73:d2:4e:24:3e:23:aa:fd:2e:88:
44:c3:26:08:6a:f3:fb:f2:f7:56:cc:b2:a3:49:5e:7f:91:8e:
51:4f:b3:05:21:d8:7e:01:0f:d6:8e:f1:cd:1e:91:4c:82:1c:
3e:4f:dd:b3:df:6f:91:10:da:e8:8d:14:4f:b5:5c:24:bb:02:
26:55:0d:f7:81:99:f5:a1:dd:2e:e3:57:85:d7:b4:98:88:10:
17:17:52:1e:8f:d4:75:3f:fb:9c:47:1e:55:a2:10:04:89:9d:
b5:d6:df:ee:cf:16:90:6d:7c:04:e2:e2:fb:78:4a:fc:a2:1b:
87:77:f3:83:ca:78:71:7d:ba:92:8f:5d:7b:c9:a9:bb:53:fa:
bf:4d:b0:cd:7a:ca:ce:56:15:2e:2b:d8:82:6b:14:ad:e2:e8:
8b:b7:27:c5:fb:b2:51:6a:b2:82:51:4d:c8:e1:6d:67:ce:32:
06:89:05:a0:d9:f9:4a:d0:4d:d3:80:04:de:3c:2d:6b:d8:72:
36:c7:4c:be:65:0c:02:a9:b8:11:b3:b9:0c:70:27:ad:85:12:
fd:2c:48:09:9b:7e:0b:6f:7c:c2:2f:e9:de:71:cd:f7:a1:d2:
8e:e8:78:19:76:df:27:8b:cc:db:8f:0f:58:72:ac:63:34:46:
dd:e7:1d:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbwsqYdkDq+kJCGOG847oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjQwMTAyMDQyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjc3ZThiMGI5Y2U5ZWE5ZDNkZWQzZjI4NzUxMDI3ZTZlMGMzOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq5w52m7+TYhErMJ2zAYQgJqbMf9
KYyGSX6VE0CnP3evqVslS9OVIRg5r7BHuScfH3jFHH4n7CWx/XtBVOvLKyHyXy7W
kZ0gQgIC0TlbkvYxO6Wa1xGM/zvN9tqh59pVc8w5FEAkDMSA1u8CT1ulyj9GPeXI
7Nke8lLlSEGu/4/ToLu0DoAZNhVxn9TZPuKSoypekIAKWTV3ZpK/1cDlN7yckssL
ZEnneCLQbiHfPETzmlbsysd5A4ugPWdOqkkam2o8/z2O8s7Jjcw7jRdfG2RwX+QG
UEzhyu4l/qbdC6Q4YcGM6o3TXYHLFP7c1d0y6JONtQZ3qD0TrRUh2JPUwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZ36LC5zp6p097T8odRAn5uDDjcMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvRm5mb3NMbk9ucW5UM3RQeWgxRUNmbTRNT053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufsVMA0G
CSqGSIb3DQEBCwUAA4IBAQAfN979zCp/C3PSTiQ+I6r9LohEwyYIavP78vdWzLKj
SV5/kY5RT7MFIdh+AQ/WjvHNHpFMghw+T92z32+RENrojRRPtVwkuwImVQ33gZn1
od0u41eF17SYiBAXF1Iej9R1P/ucRx5VohAEiZ211t/uzxaQbXwE4uL7eEr8ohuH
d/ODynhxfbqSj117yam7U/q/TbDNesrOVhUuK9iCaxSt4uiLtyfF+7JRarKCUU3I
4W1nzjIGiQWg2flK0E3TgATePC1r2HI2x0y+ZQwCqbgRs7kMcCethRL9LEgJm34L
b3zCL+necc33odKO6HgZdt8ni8zbjw9YcqxjNEbd5x1x
-----END CERTIFICATE-----
Generated at Wed May 22 20:41:19 2024 by rpki-client on console-ams.rpki-client.org