Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/UE38ewqN7mH2-FdBgI3rRa_w11I.roa
File: UE38ewqN7mH2-FdBgI3rRa_w11I.roa (raw, json)
Hash identifier: mg/VPZ4ICLhYibqNNIrfv7wxzMmY3tjTor27KEsspNU=
Subject key identifier: 50:4D:FC:7B:0A:8D:EE:61:F6:F8:57:41:80:8D:EB:45:AF:F0:D7:52
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 018CC72573E9403048F8429DCB6B49B1D9A8
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/UE38ewqN7mH2-FdBgI3rRa_w11I.roa
Signing time: Mon 01 Jan 2024 22:29:29 +0000
ROA not before: Mon 01 Jan 2024 22:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209886
IP address blocks: 85.235.90.0/23 maxlen: 23
85.235.88.0/23 maxlen: 23
85.235.88.0/22 maxlen: 22
2a10:1ac0::/30 maxlen: 30
2a10:1ac4::/30 maxlen: 30
2a10:1ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:73:e9:40:30:48:f8:42:9d:cb:6b:49:b1:d9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jan 1 22:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=504dfc7b0a8dee61f6f85741808deb45aff0d752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:c2:79:15:33:9d:a4:8d:cb:8f:01:a3:4d:
24:c3:5a:1f:52:a1:93:f1:65:ed:b4:5a:4b:e2:02:
dd:56:29:a5:d7:b9:2d:d9:8e:24:a6:55:41:e6:b0:
e3:05:42:ea:0c:6d:7c:bf:5c:6d:07:ea:6e:69:86:
fb:1a:8f:2d:6d:6f:75:04:a7:66:3f:2a:91:a8:a9:
1a:a7:95:d0:f6:0b:8a:e8:38:fe:0c:75:85:d4:35:
3e:fd:68:ee:f1:8d:44:67:3c:61:2f:33:04:01:4b:
38:d6:17:cd:8c:93:58:c4:6c:f2:08:ca:db:54:49:
8f:ba:a2:ee:88:9f:2c:b7:d6:31:4a:56:36:3c:01:
d6:e2:55:ec:91:4d:5c:cd:a9:75:e2:9a:dc:f7:eb:
e1:3c:b9:90:27:bf:48:c8:65:09:29:0b:47:fc:c6:
53:12:5b:78:82:b9:74:68:dc:3e:cd:1e:2b:09:c7:
a1:0b:f7:1c:1b:43:0f:b9:8f:2e:f7:80:d6:da:cd:
98:35:5d:c3:02:b1:25:46:ff:d7:cb:37:45:11:52:
79:38:a0:5a:ab:1b:73:11:47:d0:d1:cd:3c:e2:ef:
d5:d9:f9:a5:f1:32:c2:ee:80:ba:9c:6e:f1:b1:32:
9e:a6:a0:ea:90:13:30:20:28:53:d6:42:f3:56:80:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:FC:7B:0A:8D:EE:61:F6:F8:57:41:80:8D:EB:45:AF:F0:D7:52
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/UE38ewqN7mH2-FdBgI3rRa_w11I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.88.0/22
IPv6:
2a10:1ac0::/29
Signature Algorithm: sha256WithRSAEncryption
b8:b6:d8:e5:a2:b2:51:fb:7d:2b:9d:cd:85:38:a8:f5:d1:4f:
36:42:c4:16:da:f6:85:a0:09:49:af:3e:3d:66:94:7e:69:b5:
94:c9:23:4c:5a:e0:8a:4c:db:52:73:11:09:58:b2:63:a0:46:
1c:e9:90:8f:9f:29:cb:e8:7a:23:5f:88:cd:27:a0:57:1e:b8:
e1:5c:a1:23:f0:08:ac:cb:80:b7:e9:83:db:64:64:cb:88:f7:
4a:76:f5:67:02:f9:80:80:cf:02:cb:01:f4:45:c5:30:d3:dc:
93:39:db:30:f9:9a:8e:57:5b:d7:8c:61:0d:b9:ea:98:d1:fa:
d3:a1:a1:a3:ad:b2:3c:60:c6:70:71:08:d2:64:62:72:b0:28:
1b:45:c9:88:e6:57:bf:2c:57:c3:65:88:ad:e8:b1:11:c9:e5:
90:62:5a:8a:80:21:d8:95:40:03:c5:c3:43:cd:a8:e9:64:89:
10:0f:18:83:7c:ef:c2:cb:22:8c:8b:6c:17:eb:3c:ed:9f:1b:
49:f4:19:4f:27:1b:0b:97:87:78:35:ab:7d:33:c0:50:be:bb:
71:7d:53:c6:18:d6:4c:28:2d:b1:ee:39:66:14:a4:dc:2e:47:
8c:ca:5d:39:25:5a:fc:51:2d:13:4f:6c:f0:90:ab:3b:c1:35:
c5:2b:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:46:46 2024 by rpki-client on console-fra.rpki-client.org