Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UNJyDlgYC5lD_zN8pgiDA4xlUvA.roa
File: UNJyDlgYC5lD_zN8pgiDA4xlUvA.roa (raw, json)
Hash identifier: izIa8ghFrVV0QXClpSCFdFi1ds3FEKUcAViC0bujevI=
Subject key identifier: 50:D2:72:0E:58:18:0B:99:43:FF:33:7C:A6:08:83:03:8C:65:52:F0
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018F4396074C89722A2B2D229EC90866E709
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UNJyDlgYC5lD_zN8pgiDA4xlUvA.roa
Signing time: Sat 04 May 2024 12:30:56 +0000
ROA not before: Sat 04 May 2024 12:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/21 maxlen: 24
85.142.80.0/20 maxlen: 24
85.142.96.0/22 maxlen: 24
85.142.100.0/23 maxlen: 24
85.142.112.0/22 maxlen: 24
85.142.128.0/20 maxlen: 24
85.142.212.0/22 maxlen: 24
85.142.240.0/23 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.244.0/23 maxlen: 24
85.142.246.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.142.252.0/22 maxlen: 24
85.143.40.0/21 maxlen: 24
85.143.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:96:07:4c:89:72:2a:2b:2d:22:9e:c9:08:66:e7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: May 4 12:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50d2720e58180b9943ff337ca60883038c6552f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:86:17:2c:7b:19:d8:c2:ef:1d:6f:cd:c8:
77:84:8e:03:b1:e3:68:fc:d6:87:91:49:7a:15:5c:
da:dc:ad:6e:96:77:23:32:a2:16:32:dd:63:7a:2b:
23:b8:36:34:d5:9e:9d:57:c2:cb:d4:1d:13:a9:7b:
33:cc:d3:6f:58:1c:cb:31:f2:0a:18:1f:48:19:dd:
d6:26:f2:54:9a:3e:89:1d:c6:e6:8f:f1:2e:3a:f1:
a8:67:8d:26:22:c7:6b:d7:a4:d2:91:b3:49:9c:50:
4c:93:84:01:1b:c7:36:4f:f2:6a:62:e2:b6:66:22:
e4:48:23:fb:13:dd:a0:a0:92:53:74:87:03:b8:10:
e8:e9:88:bb:cb:a1:bb:fd:17:ab:ac:fa:1f:35:b2:
e6:e9:3c:48:ea:bd:ff:1c:33:fe:6d:bb:e3:19:9c:
dd:df:a9:3a:6b:c8:da:4d:a0:aa:00:40:23:03:eb:
dc:8c:12:d0:f3:0f:34:6e:1e:69:2d:f0:50:8a:73:
77:63:50:1c:6c:85:7b:bb:ef:74:d8:f9:aa:a7:e2:
65:81:4e:e2:a1:b4:a7:43:45:3b:f9:af:91:0f:82:
df:cf:33:f0:73:90:7d:02:9b:a4:aa:ae:79:e7:3d:
1f:15:a0:87:60:40:4f:ea:9a:e1:26:b8:62:6e:15:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:72:0E:58:18:0B:99:43:FF:33:7C:A6:08:83:03:8C:65:52:F0
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UNJyDlgYC5lD_zN8pgiDA4xlUvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0-85.142.101.255
85.142.112.0/22
85.142.128.0/20
85.142.212.0/22
85.142.240.0-85.142.242.255
85.142.244.0-85.142.246.255
85.142.250.0/24
85.142.252.0/22
85.143.40.0-85.143.63.255
Signature Algorithm: sha256WithRSAEncryption
2b:3c:f7:84:c5:b6:c3:5a:ba:de:9c:67:0c:96:9d:52:bc:69:
ff:81:cc:22:c5:f6:a2:d0:5e:9e:11:8d:e6:4c:2a:26:a1:4d:
4b:85:a3:94:01:c0:6d:93:89:37:da:27:f6:d3:6c:ca:d1:30:
66:3f:46:1e:ad:cf:80:61:7f:2a:3f:86:d9:35:0d:96:da:7b:
bb:3a:2d:32:7b:f9:41:72:ab:2e:1b:38:5a:20:30:89:16:29:
9a:fc:fd:0e:09:0a:05:ca:96:9d:2f:af:32:2a:8c:f1:d6:8a:
65:f1:ec:44:da:fe:5e:29:74:0a:d2:a9:37:af:0f:f7:03:87:
ee:cb:fb:bf:7f:11:b8:47:14:7c:25:22:60:64:1b:6a:a2:91:
2f:ed:b3:e4:18:03:d3:ea:2e:8f:4e:90:4c:ce:23:ff:dc:1d:
85:48:e5:12:74:84:57:71:28:2c:55:74:77:96:c3:64:dd:68:
85:d0:2e:dc:5b:eb:7d:59:6d:20:9f:e5:07:dd:dd:9a:91:40:
33:fa:54:10:cb:fe:ed:ab:ba:76:e6:26:7c:26:66:bf:6b:95:
e8:30:72:23:31:b7:42:0b:81:cb:28:5e:af:09:c9:35:1d:66:
6f:6d:e7:bb:07:01:c5:30:db:00:7d:ff:cd:90:59:d6:79:0e:
c1:c0:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:39:31 2024 by rpki-client on console-fra.rpki-client.org