Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UFzHCW5tGN4vwEsfoJkUY1dyE9g.roa
File: UFzHCW5tGN4vwEsfoJkUY1dyE9g.roa (raw, json)
Hash identifier: CTAqSUstYb3IiAoZh+XcBmT1xb6djEqTM98ARc5OvII=
Subject key identifier: 50:5C:C7:09:6E:6D:18:DE:2F:C0:4B:1F:A0:99:14:63:57:72:13:D8
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56DFF56330780C2F1D5B9ADCEE79DC0
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UFzHCW5tGN4vwEsfoJkUY1dyE9g.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35277
IP address blocks: 5.189.219.0/24 maxlen: 24
5.189.218.0/24 maxlen: 24
5.189.217.0/24 maxlen: 24
5.189.216.0/24 maxlen: 24
5.188.50.0/24 maxlen: 24
5.101.44.0/24 maxlen: 24
5.101.47.0/24 maxlen: 24
5.101.46.0/24 maxlen: 24
5.101.45.0/24 maxlen: 24
5.188.202.0/24 maxlen: 24
5.188.201.0/24 maxlen: 24
5.188.200.0/24 maxlen: 24
91.243.40.0/24 maxlen: 24
91.243.43.0/24 maxlen: 24
5.189.253.0/24 maxlen: 24
5.189.252.0/24 maxlen: 24
5.189.255.0/24 maxlen: 24
5.189.254.0/24 maxlen: 24
5.8.44.0/24 maxlen: 24
5.8.47.0/24 maxlen: 24
5.8.46.0/24 maxlen: 24
5.8.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ff:56:33:07:80:c2:f1:d5:b9:ad:ce:e7:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=505cc7096e6d18de2fc04b1fa0991463577213d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:0a:67:0c:0f:6f:04:6c:02:f0:a2:a0:ed:
8d:a7:af:b6:68:4d:46:19:16:70:d9:1b:7b:1a:77:
98:22:20:c9:43:0e:84:86:8d:06:03:e5:2f:86:71:
f7:02:32:e4:0f:da:f0:e9:9a:f2:1f:92:a2:0a:ea:
be:e0:e6:17:b3:2f:84:b7:02:d9:0d:9f:c6:cf:d8:
fa:db:40:0b:5d:fb:e4:c0:fb:0c:1e:ed:95:5f:ff:
dc:b0:ab:a5:63:61:ac:1b:7a:a3:0f:a9:49:82:ec:
f3:15:cc:32:f7:e6:cf:d8:9b:44:eb:61:46:c6:21:
43:d0:13:e4:3e:02:42:67:8d:6e:e6:8a:06:da:4e:
37:c9:b0:16:6e:65:ba:6c:29:9b:a8:bc:1b:12:d1:
22:5f:bd:b8:25:e9:6c:ea:91:c2:c2:d4:20:a6:33:
c5:99:5b:ad:d0:e6:92:61:07:4f:ff:8d:61:f7:ad:
74:f0:f5:34:fa:88:86:b9:45:7c:d8:8c:c9:a0:7d:
65:f6:1c:ad:22:fd:18:76:43:a5:7d:51:70:2f:50:
d7:4e:e9:25:79:08:0b:24:67:18:f8:9d:76:bd:e1:
37:d7:79:31:a1:fd:3d:6e:a1:96:dd:b2:c1:4a:67:
40:c7:e6:14:89:3d:e4:b7:02:95:26:c9:5a:ea:e9:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:C7:09:6E:6D:18:DE:2F:C0:4B:1F:A0:99:14:63:57:72:13:D8
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UFzHCW5tGN4vwEsfoJkUY1dyE9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.44.0/22
5.101.44.0/22
5.188.50.0/24
5.188.200.0-5.188.202.255
5.189.216.0/22
5.189.252.0/22
91.243.40.0/24
91.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0a:7a:c1:61:d7:69:5a:bd:bf:43:9c:e5:c1:e0:73:ee:59:
62:e2:94:43:7d:8d:6a:0f:17:d7:38:97:95:8e:d7:47:4a:e5:
6f:a0:46:08:94:15:e5:58:98:4e:1d:40:97:48:a7:ec:0e:e8:
47:47:a0:2e:ed:9e:d1:6e:ee:d4:15:3e:a5:46:40:92:4b:d1:
1d:e6:87:60:b0:4e:da:3a:5d:23:19:f8:a5:74:c8:24:dd:80:
42:6c:f2:f1:db:43:e2:04:21:38:08:62:b1:90:be:7b:ee:55:
e3:c4:75:a4:47:cb:eb:02:82:0a:a8:58:b4:44:9c:9a:40:00:
2e:8f:23:76:12:32:de:10:b7:34:cb:83:ff:ad:0e:1a:e6:2e:
e0:55:52:a0:db:ff:4a:b5:82:98:ae:8f:3f:02:db:25:47:b4:
e6:66:9b:91:7c:bb:93:74:e1:83:bd:91:99:43:98:58:3c:81:
b7:f7:50:74:c7:52:d1:81:7d:d7:15:f1:ba:b2:46:48:2e:8c:
6b:c6:76:c7:69:57:96:c6:d9:e1:f0:f1:5b:ec:e3:d0:07:e7:
1c:11:c1:b1:18:0b:5d:65:a7:cc:2b:65:b4:db:3c:69:02:bd:
04:c1:fc:d4:d8:c9:dd:f9:61:d7:c7:ac:7f:48:0f:0a:b5:c3:
c7:5d:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 09:56:38 2024 by rpki-client on console-ams.rpki-client.org