Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/UnJ04U3SJwe6VBmcct3g7hlvHKE.roa
File: UnJ04U3SJwe6VBmcct3g7hlvHKE.roa (raw, json)
Hash identifier: s6ZoLWNGsu/E8uWyy3cHNFo+7R4CXpp0WabjZf1+VMc=
Subject key identifier: 52:72:74:E1:4D:D2:27:07:BA:54:19:9C:72:DD:E0:EE:19:6F:1C:A1
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC801366D608B5F71B60B8A32A374168E
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/UnJ04U3SJwe6VBmcct3g7hlvHKE.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31100
IP address blocks: 85.93.69.0/24 maxlen: 24
85.93.72.0/24 maxlen: 24
85.93.77.0/24 maxlen: 24
212.40.190.0/24 maxlen: 24
85.93.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:36:6d:60:8b:5f:71:b6:0b:8a:32:a3:74:16:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=527274e14dd22707ba54199c72dde0ee196f1ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:16:ff:f7:52:9f:2d:4d:ed:cc:c5:69:fc:
aa:6e:d4:9a:39:b3:df:a5:7c:b7:17:24:3d:3c:a0:
17:61:1e:78:6f:22:3f:99:bb:6b:91:3d:26:ef:a2:
79:6f:9c:76:97:99:6f:5c:1d:f5:cf:95:29:91:6b:
52:45:c6:15:38:f4:bd:4d:58:ba:03:d2:b4:10:72:
d2:54:41:62:19:69:c1:a1:a3:4a:39:4a:8c:ef:47:
4a:65:1d:b4:52:6b:94:44:46:75:64:5b:6e:8b:cd:
ef:63:6f:a9:ad:e2:b2:f6:68:44:ce:eb:fa:a3:3a:
2e:0b:4c:14:b0:32:dd:74:34:f6:bc:e1:90:09:b9:
03:bf:f3:f7:5c:33:53:49:a4:28:57:e8:c8:37:2e:
a6:54:19:ce:ad:80:67:00:9b:91:c2:aa:bc:f7:dd:
ed:ad:17:dd:a8:30:9f:24:6e:3a:8d:7f:38:e2:91:
c8:96:d2:0e:ea:d9:17:42:88:19:5c:28:e9:5d:6d:
69:89:0e:c3:78:03:0a:11:56:c3:dc:d2:ad:10:18:
43:9c:3d:cb:4b:2d:5f:d9:ee:a6:38:71:40:84:ff:
a0:65:d8:f3:60:90:12:a1:d4:1c:e7:31:dc:83:2a:
ef:82:ba:f1:7b:fb:21:5f:78:a9:9d:81:45:c0:dc:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:74:E1:4D:D2:27:07:BA:54:19:9C:72:DD:E0:EE:19:6F:1C:A1
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/UnJ04U3SJwe6VBmcct3g7hlvHKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.64.0/24
85.93.69.0/24
85.93.72.0/24
85.93.77.0/24
212.40.190.0/24
Signature Algorithm: sha256WithRSAEncryption
15:46:cc:a3:7e:9e:aa:ac:8c:8b:34:9a:0e:ce:86:f5:20:e2:
f2:bb:fa:48:df:d2:9d:cf:9b:61:23:ac:94:4f:ab:fa:8e:84:
0f:53:74:ba:ca:12:9d:ae:33:bf:83:e4:58:70:45:f3:24:41:
cf:5f:21:7e:a9:18:e8:d9:af:47:d7:b6:5a:89:33:37:97:d8:
d7:08:8a:68:06:5f:ff:cb:93:c8:19:de:a3:5e:42:8d:12:d1:
23:b6:9a:5d:fc:61:2c:c1:84:01:d3:4d:f0:f0:f0:fa:69:46:
1a:fd:a9:6b:4a:61:df:ce:14:de:16:ae:82:9f:63:ba:69:80:
b7:5f:df:f1:cc:94:43:c2:d2:06:c1:d2:6a:01:e3:5f:b9:35:
c4:0e:68:63:d4:47:96:48:9b:83:8f:89:d2:98:cf:73:68:9b:
96:81:59:1c:48:72:6d:2a:a9:ee:45:b7:68:df:cc:12:29:1b:
41:fb:4d:a7:43:62:94:05:46:21:52:7e:5e:b1:1a:ff:07:33:
39:60:c7:db:63:5c:53:37:71:0e:83:67:18:fc:2c:18:ff:8d:
4b:b3:da:60:34:0b:09:9d:7e:56:e8:b5:36:5d:63:c4:ab:b9:
7b:a1:ca:d5:13:a2:da:72:da:d1:a3:34:28:5a:2c:01:08:73:
95:85:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:37:00 2024 by rpki-client on console-fra.rpki-client.org