
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/FLCT51ZJwMwx0vO_c1Crc2b8m68.roa
File: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (raw, json)
Hash identifier: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=
Subject key identifier: 14:B0:93:E7:56:49:C0:CC:31:D2:F3:BF:73:50:AB:73:66:FC:9B:AF
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 0194221F57225D1742D95B3E5CEF6B8B0AC3
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/FLCT51ZJwMwx0vO_c1Crc2b8m68.roa
Signing time: Wed 01 Jan 2025 13:47:46 +0000
ROA not before: Wed 01 Jan 2025 13:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199235
IP address blocks: 37.143.72.0/22 maxlen: 22
89.147.124.0/22 maxlen: 22
185.83.224.0/22 maxlen: 22
2a02:6f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:57:22:5d:17:42:d9:5b:3e:5c:ef:6b:8b:0a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jan 1 13:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14b093e75649c0cc31d2f3bf7350ab7366fc9baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:e3:54:76:54:9a:27:5e:45:d9:9a:d9:9f:
2c:8f:88:83:e8:50:fc:d2:db:18:58:10:5d:f9:a6:
ab:68:31:75:2d:52:8b:a6:67:2e:07:bb:00:f2:62:
be:a5:26:b8:9b:e1:e0:83:5a:ef:6b:c0:43:cd:50:
00:4c:37:34:ea:9c:ab:f4:39:b8:24:9c:b8:93:7c:
9a:c3:c0:78:ec:56:7b:88:86:14:73:62:5d:38:63:
30:98:e1:93:fc:ae:31:93:9d:e9:86:40:ef:1c:e6:
be:0c:d5:b9:e1:3a:06:60:37:95:9a:c7:b7:c4:01:
95:91:69:e5:3b:e9:90:0c:cc:53:88:50:18:7e:05:
0e:60:62:1f:f1:5c:69:47:88:ef:14:5f:57:9d:5e:
03:b3:8f:42:ba:01:dc:99:46:c4:10:94:ad:a8:6e:
2c:eb:ae:2e:58:e2:b0:f5:3a:76:e9:36:29:30:1f:
03:d9:2e:15:a3:44:7f:0d:2b:b0:71:f5:b1:4a:ae:
de:8c:5b:03:73:bf:59:12:de:5a:83:26:01:90:77:
b8:0d:5b:fc:57:01:d4:a7:41:7d:cf:8f:c8:e8:90:
fe:67:6f:df:f6:d0:6f:42:19:eb:4e:c0:1c:ab:f4:
98:b6:d5:34:7e:20:0f:32:c1:c3:b9:4d:0b:70:83:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B0:93:E7:56:49:C0:CC:31:D2:F3:BF:73:50:AB:73:66:FC:9B:AF
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/FLCT51ZJwMwx0vO_c1Crc2b8m68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.72.0/22
89.147.124.0/22
185.83.224.0/22
IPv6:
2a02:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
16:69:d4:ec:c3:f7:e3:50:ef:83:bb:32:07:36:0f:e0:54:3a:
ba:45:82:12:69:4f:6b:c8:ec:a3:5c:cc:ec:3b:72:fb:35:12:
43:b9:8e:39:49:bf:88:78:06:cd:b8:eb:aa:eb:bf:73:1c:aa:
f2:06:97:56:b1:26:77:0b:37:7a:50:c5:ba:4e:84:61:a3:c5:
e5:9b:3d:8b:13:48:62:f0:2a:12:f4:e7:0c:74:0a:c7:89:c4:
23:cd:e5:0d:98:ec:64:ca:f7:96:d5:3c:df:ff:6a:cf:d4:78:
30:c6:54:d0:44:83:03:cd:31:61:1c:0f:d9:19:91:03:2f:60:
37:51:22:3a:52:0d:cd:bb:be:0f:e9:58:19:70:28:b5:bd:2e:
3d:92:0a:9a:2f:c4:f4:5d:04:b8:68:eb:d7:a1:26:60:aa:9d:
3d:3f:45:f4:07:77:ad:4a:11:53:2d:0c:08:20:5a:6b:cf:66:
b8:9c:8c:d2:59:e1:26:4b:3e:3e:eb:28:fe:84:0a:58:fe:a9:
1c:f0:78:d4:cf:cb:da:ea:45:4d:72:7c:c7:05:8f:79:d6:3c:
af:2a:28:3c:07:4f:58:3d:a1:d1:fe:f8:e0:61:c2:ca:c0:39:
f6:c8:6e:a5:fc:07:eb:7d:eb:ed:7f:e6:8e:fe:42:0a:67:5d:
17:11:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:53 2025 by rpki-client