Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/FLCQQ5hkUmCoTkUJAW0us0pAmr0.roa
File: FLCQQ5hkUmCoTkUJAW0us0pAmr0.roa (raw, json)
Hash identifier: GRtO4Lur5s+mtEZy5keIqwTlBpg94IpbFfEDuKGSUOo=
Subject key identifier: 14:B0:90:43:98:64:52:60:A8:4E:45:09:01:6D:2E:B3:4A:40:9A:BD
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 018CC5DC422839A79BB3B554FEE9E8EB36BD
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/FLCQQ5hkUmCoTkUJAW0us0pAmr0.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.154.161.0/24 maxlen: 24
185.154.160.0/24 maxlen: 24
185.154.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:42:28:39:a7:9b:b3:b5:54:fe:e9:e8:eb:36:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14b0904398645260a84e4509016d2eb34a409abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:8c:a4:21:59:55:b1:6d:62:6a:fe:70:4e:
42:b9:da:dd:13:d6:f5:27:44:da:4a:57:38:b4:ff:
5a:25:41:2b:a5:6c:19:fd:b0:64:04:c8:f1:4e:d9:
ec:9a:6d:a9:ee:89:71:f3:01:37:38:51:e4:7f:ff:
72:e9:b8:8a:d0:b4:ae:3e:57:bf:40:05:21:a9:ba:
96:80:3b:98:bb:8b:93:1f:58:f2:42:46:58:34:d9:
cf:12:eb:06:bc:05:93:f1:11:81:64:a1:8c:bc:19:
47:f9:ef:b7:f8:11:a7:92:12:85:2a:83:89:03:7c:
7d:14:47:c1:48:38:d9:ae:bf:00:31:98:be:87:07:
ca:68:85:74:ab:92:8f:09:63:3f:63:11:4b:7e:76:
e6:ba:3f:cf:f1:e2:8d:ee:aa:15:42:27:88:40:8a:
a1:53:31:a3:c0:05:49:dd:02:64:da:01:81:9c:12:
c4:2b:88:b0:65:8f:bc:8d:64:2a:8f:01:8c:ac:22:
ac:d3:c2:94:39:31:57:9d:d7:8a:24:70:fb:2b:10:
57:ba:48:61:aa:9d:e3:26:80:08:26:89:29:bb:dd:
d6:1e:5e:5a:6d:50:16:6c:c9:ce:f4:fc:d4:24:bd:
af:05:3e:7f:8d:e6:3f:02:f4:33:81:6b:4d:de:00:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B0:90:43:98:64:52:60:A8:4E:45:09:01:6D:2E:B3:4A:40:9A:BD
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/FLCQQ5hkUmCoTkUJAW0us0pAmr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.160.0-185.154.162.255
Signature Algorithm: sha256WithRSAEncryption
bf:8d:6c:4b:0d:63:1c:b8:aa:80:af:c6:28:c0:79:4e:0d:4c:
23:e1:77:e8:f6:a8:f9:d4:6c:40:82:4a:35:a9:62:30:e3:ac:
5b:8f:d0:b8:64:39:9f:97:57:e0:f3:77:29:b5:a5:96:39:31:
6a:26:d5:db:b7:8e:31:4e:3e:24:9a:dd:01:e3:09:2a:31:32:
fa:12:92:65:29:a7:f3:75:4b:f1:71:4e:d9:80:ee:c8:ac:44:
c0:28:1b:bd:6f:cb:e9:d4:72:c5:d5:79:dc:26:0b:b9:f2:09:
2d:e3:78:6d:19:9a:52:9f:a1:5a:64:0b:97:13:a7:42:ec:11:
d1:ca:d1:e3:6b:a9:15:36:a7:ea:bc:da:a6:36:f3:f1:c3:0b:
4b:95:75:3f:f8:16:77:28:88:a8:fa:ce:45:d4:d7:87:84:ab:
ae:7b:e8:50:03:87:da:72:92:22:6c:b6:09:bd:c2:30:b4:78:
b5:b4:4d:36:72:71:cf:b2:f7:d3:d5:05:12:83:e0:f1:2e:bb:
9d:24:f9:4d:bd:49:60:3f:7d:c0:3d:8e:b5:00:05:e1:3e:f0:
aa:a7:cb:bc:fd:13:11:98:95:dc:2b:63:55:48:b9:91:a3:6f:
e7:b4:b9:80:08:c8:2a:0a:36:26:b7:ee:7c:64:c1:77:5c:da:
de:2f:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:48:56 2024 by rpki-client on console-ams.rpki-client.org