Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/FBJQvS2d6aPtDmBC26dMXvcwKF0.roa
File: FBJQvS2d6aPtDmBC26dMXvcwKF0.roa (raw, json)
Hash identifier: oCRUCnSPOCTMgmLQuFKvPgwJ36wIdbWFOaouIs5Wjng=
Subject key identifier: 14:12:50:BD:2D:9D:E9:A3:ED:0E:60:42:DB:A7:4C:5E:F7:30:28:5D
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018CC500385412535CB0C5B76B53D6F9B3AF
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/FBJQvS2d6aPtDmBC26dMXvcwKF0.roa
Signing time: Mon 01 Jan 2024 12:29:35 +0000
ROA not before: Mon 01 Jan 2024 12:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209127
IP address blocks: 31.192.211.0/24 maxlen: 24
2a03:2100:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:38:54:12:53:5c:b0:c5:b7:6b:53:d6:f9:b3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 12:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=141250bd2d9de9a3ed0e6042dba74c5ef730285d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:57:fd:96:60:31:69:7a:c8:3b:53:b3:39:
1c:c9:58:c7:2e:fc:90:59:f7:e5:47:0b:46:b0:4a:
95:d0:d4:16:09:01:6e:c3:76:1c:ef:06:13:9c:ef:
09:06:5a:6a:5d:fc:f7:5f:ab:cf:55:7f:ee:00:83:
69:da:89:f1:8c:cf:ea:f6:c8:b0:4a:14:60:b9:7f:
e6:33:25:d7:0d:0f:59:7c:67:dc:7a:f6:cc:17:e7:
9e:06:59:bc:23:1e:d9:f1:12:7a:4e:61:c3:81:99:
aa:6a:0f:37:a4:61:35:ff:04:44:4b:bf:f6:82:56:
85:89:14:7b:c6:4e:71:0f:f4:72:b3:6b:90:1d:78:
6c:08:18:50:40:76:32:e6:e3:3d:7a:17:5f:58:d0:
d7:a0:ff:a5:8b:4d:be:93:dd:1b:a4:12:78:f5:cb:
a4:56:42:f3:a9:bf:c5:d6:01:48:a5:ed:f2:91:4d:
f7:93:d2:23:c5:0a:36:6c:5f:a6:80:c1:bc:b6:8a:
b7:26:40:d0:89:f3:2e:35:a6:41:af:5d:6d:32:88:
53:34:8c:46:74:c4:9a:90:81:cd:7f:be:e5:c9:a0:
79:19:62:5a:3c:54:75:de:ff:ac:2d:8f:2e:ee:e7:
3d:27:b1:c4:e9:32:2a:92:20:1b:82:eb:52:65:9d:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:12:50:BD:2D:9D:E9:A3:ED:0E:60:42:DB:A7:4C:5E:F7:30:28:5D
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/FBJQvS2d6aPtDmBC26dMXvcwKF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.211.0/24
IPv6:
2a03:2100:31::/48
Signature Algorithm: sha256WithRSAEncryption
1e:73:75:7a:28:aa:d7:f4:52:12:6d:fc:24:2d:81:f5:91:9c:
8b:44:3d:72:bd:7b:d0:92:36:1a:ce:2e:a2:97:53:6c:8e:d7:
2a:b0:89:fc:60:6d:33:8b:2f:b3:7d:d5:4e:6b:17:e9:16:88:
c3:53:6d:eb:f0:9a:54:84:32:36:f0:71:d5:2d:b7:26:cd:c1:
23:74:01:4a:36:dc:8c:d1:8b:d4:df:9d:ba:25:1f:79:b6:c8:
68:71:7c:00:df:e0:e2:83:a4:ef:0f:71:3a:24:11:7a:42:c6:
35:f5:91:a5:82:c8:88:bc:6f:fa:eb:4f:a0:85:8d:6a:22:fd:
fd:11:f1:df:08:e9:e9:1e:c8:95:ad:3c:46:5a:80:b5:c5:66:
0f:3b:5a:1f:89:ed:eb:86:72:29:53:b8:08:f6:06:9b:e4:82:
3f:65:0d:1a:bf:45:0a:ed:62:2b:b6:23:39:11:10:62:41:c0:
7f:f3:a1:1a:22:07:65:d2:d9:d2:3c:c8:fc:5f:bf:61:85:4e:
eb:8e:69:8d:b7:8c:15:7d:5a:3b:6e:c6:50:17:8f:46:10:4f:
22:95:65:3e:61:76:4a:e6:b2:2c:57:0b:c5:93:78:0e:ac:e0:
5e:f9:46:b7:14:61:9e:06:1e:fb:d9:59:08:8e:f5:aa:91:6b:
ca:b5:95:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzFADhUElNcsMW3a1PW+bOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjQwMTAxMTIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDEyNTBiZDJkOWRlOWEzZWQwZTYwNDJkYmE3NGM1ZWY3MzAyODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23BX/ZZgMWl6yDtTszkcyVjHLvyQ
WfflRwtGsEqV0NQWCQFuw3Yc7wYTnO8JBlpqXfz3X6vPVX/uAINp2onxjM/q9siw
ShRguX/mMyXXDQ9ZfGfcevbMF+eeBlm8Ix7Z8RJ6TmHDgZmqag83pGE1/wRES7/2
glaFiRR7xk5xD/Rys2uQHXhsCBhQQHYy5uM9ehdfWNDXoP+li02+k90bpBJ49cuk
VkLzqb/F1gFIpe3ykU33k9IjxQo2bF+mgMG8toq3JkDQifMuNaZBr11tMohTNIxG
dMSakIHNf77lyaB5GWJaPFR13v+sLY8u7uc9J7HE6TIqkiAbgutSZZ3qXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBQSUL0tnemj7Q5gQtunTF73MChdMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvRkJKUXZTMmQ2YVB0RG1CQzI2ZE1YdmN3S0YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAH8DTMA8E
AgACMAkDBwAqAyEAADEwDQYJKoZIhvcNAQELBQADggEBAB5zdXooqtf0UhJt/CQt
gfWRnItEPXK9e9CSNhrOLqKXU2yO1yqwifxgbTOLL7N91U5rF+kWiMNTbevwmlSE
MjbwcdUttybNwSN0AUo23IzRi9TfnbolH3m2yGhxfADf4OKDpO8PcTokEXpCxjX1
kaWCyIi8b/rrT6CFjWoi/f0R8d8I6ekeyJWtPEZagLXFZg87Wh+J7euGcilTuAj2
Bpvkgj9lDRq/RQrtYiu2IzkREGJBwH/zoRoiB2XS2dI8yPxfv2GFTuuOaY23jBV9
WjtuxlAXj0YQTyKVZT5hdkrmsixXC8WTeA6s4F75RrcUYZ4GHvvZWQiO9aqRa8q1
las=
-----END CERTIFICATE-----
Generated at Sun May 19 23:14:41 2024 by rpki-client on console-ams.rpki-client.org