Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa
File: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (raw, json)
Hash identifier: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=
Subject key identifier: 16:64:3C:D2:5D:1D:61:71:C9:FD:8B:33:5C:EC:93:70:CB:35:31:35
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 01941FFAB3C39C8C25A31568305DFB6641E3
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215324
IP address blocks: 185.140.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:c3:9c:8c:25:a3:15:68:30:5d:fb:66:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16643cd25d1d6171c9fd8b335cec9370cb353135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:3a:89:97:cf:9a:d3:a9:67:92:ae:d6:d2:
e3:0e:1b:e4:4c:68:5e:5f:f3:c1:64:32:f7:a5:8a:
86:aa:ba:c5:12:36:24:69:7e:25:33:ee:98:d9:40:
0e:ab:68:03:d1:1d:f0:c9:7d:33:a4:44:7b:9b:80:
4f:c9:86:eb:2b:de:c6:b1:07:4c:4e:55:76:ad:69:
91:30:96:55:1d:c7:a0:ee:a3:46:4d:18:65:25:de:
e1:e8:04:50:ba:a7:cd:65:5c:1c:28:25:fa:b0:1a:
54:53:7b:48:23:fb:41:0d:55:89:8d:7d:a4:d7:37:
6d:d4:1c:5d:96:6a:ae:bb:17:ca:a8:08:6d:a8:69:
cc:83:1d:f8:98:6a:aa:bb:66:05:a6:82:72:a9:53:
83:b4:6b:b4:f6:ce:68:5f:f0:3e:9d:e7:15:c3:43:
4b:0c:ed:a0:0b:0b:2d:3c:d3:74:2c:ef:ff:2e:26:
24:6f:d9:70:23:29:7e:6b:6b:c5:a2:10:1c:81:06:
e1:7e:10:22:8b:bb:9c:e7:90:3c:fa:b6:db:fd:e1:
9a:78:b1:6f:d6:ff:36:a2:c5:eb:df:45:42:a0:3c:
86:05:b3:9c:32:1a:e4:e3:63:91:db:9d:b7:b5:ae:
77:8f:fe:d4:89:70:96:d8:e9:c0:2b:7b:ff:b0:27:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:3C:D2:5D:1D:61:71:C9:FD:8B:33:5C:EC:93:70:CB:35:31:35
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c4:a4:08:18:f6:e8:d5:85:33:3f:5f:2b:85:7e:36:47:cb:
43:24:c5:7a:7e:cb:b6:3b:14:bc:cd:12:39:53:a1:83:bb:87:
42:97:99:9e:88:63:10:71:78:a6:08:27:b5:fb:2d:bc:61:40:
88:45:a9:4e:10:b6:ac:e7:f7:0d:b6:02:10:3a:e9:97:22:f6:
9a:cc:73:78:91:e0:55:b1:6e:2c:f4:c4:cc:97:f3:36:ce:6d:
23:3a:14:e1:70:67:bf:2f:cb:f6:54:43:14:b6:83:dd:0d:03:
02:fa:b7:b0:81:48:ba:78:0a:6c:0b:31:84:f3:d2:0a:d6:f2:
f3:ce:e5:2d:7e:cc:88:f4:d8:48:6e:e1:fa:af:88:28:6d:f4:
4a:dd:8f:ef:72:df:72:f2:e9:a6:df:f6:fa:96:88:17:bc:39:
06:15:29:0d:d9:c0:58:e0:2f:3a:24:a3:fb:44:12:7b:9e:74:
a0:56:ee:c7:96:be:6d:d7:7c:4b:ca:2d:61:cc:fa:57:b5:62:
44:c7:e4:7d:40:92:c7:a4:ef:d1:4d:8c:b7:51:f6:50:3b:52:
32:88:71:78:f5:1f:f6:35:2d:4b:93:15:b3:58:9b:81:bd:48:
97:7b:4e:be:b7:5f:fa:56:84:eb:7b:46:b3:4a:77:1f:f8:54:
b4:d2:b4:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+rPDnIwloxVoMF37ZkHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz
OGM1YjMwHhcNMjUwMTAxMDM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjY0M2NkMjVkMWQ2MTcxYzlmZDhiMzM1Y2VjOTM3MGNiMzUzMTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCQ6iZfPmtOpZ5Ku1tLjDhvkTGhe
X/PBZDL3pYqGqrrFEjYkaX4lM+6Y2UAOq2gD0R3wyX0zpER7m4BPyYbrK97GsQdM
TlV2rWmRMJZVHceg7qNGTRhlJd7h6ARQuqfNZVwcKCX6sBpUU3tII/tBDVWJjX2k
1zdt1BxdlmquuxfKqAhtqGnMgx34mGqqu2YFpoJyqVODtGu09s5oX/A+necVw0NL
DO2gCwstPNN0LO//LiYkb9lwIyl+a2vFohAcgQbhfhAii7uc55A8+rbb/eGaeLFv
1v82osXr30VCoDyGBbOcMhrk42OR2523ta53j/7UiXCW2OnAK3v/sCcbfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZkPNJdHWFxyf2LM1zsk3DLNTE1MB8GA1UdIwQY
MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct
ZTk3ODIwNDFjYzI0LzEvRm1RODBsMGRZWEhKX1lzelhPeVRjTXMxTVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0
LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYw1MA0G
CSqGSIb3DQEBCwUAA4IBAQCOxKQIGPbo1YUzP18rhX42R8tDJMV6fsu2OxS8zRI5
U6GDu4dCl5meiGMQcXimCCe1+y28YUCIRalOELas5/cNtgIQOumXIvaazHN4keBV
sW4s9MTMl/M2zm0jOhThcGe/L8v2VEMUtoPdDQMC+rewgUi6eApsCzGE89IK1vLz
zuUtfsyI9NhIbuH6r4gobfRK3Y/vct9y8umm3/b6logXvDkGFSkN2cBY4C86JKP7
RBJ7nnSgVu7Hlr5t13xLyi1hzPpXtWJEx+R9QJLHpO/RTYy3UfZQO1IyiHF49R/2
NS1LkxWzWJuBvUiXe06+t1/6VoTre0azSncf+FS00rQT
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:26 2025 by rpki-client