Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/uMLIY3enpT0IFF7ktEPBSA642fE.roa
File: uMLIY3enpT0IFF7ktEPBSA642fE.roa (raw, json)
Hash identifier: 8E92O7aQcxy1N6shYIcIPECWPZl1AAa9fhPdt/olKFY=
Subject key identifier: B8:C2:C8:63:77:A7:A5:3D:08:14:5E:E4:B4:43:C1:48:0E:B8:D9:F1
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 018CC72740B85A60293A4141B80857E9A5AF
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/uMLIY3enpT0IFF7ktEPBSA642fE.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8767
IP address blocks: 185.110.32.0/22 maxlen: 24
45.84.24.0/22 maxlen: 24
213.170.216.0/22 maxlen: 24
185.68.156.0/22 maxlen: 24
185.47.44.0/22 maxlen: 24
45.66.28.0/22 maxlen: 24
5.182.88.0/22 maxlen: 24
93.88.16.0/22 maxlen: 24
193.168.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:40:b8:5a:60:29:3a:41:41:b8:08:57:e9:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8c2c86377a7a53d08145ee4b443c1480eb8d9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:14:9d:38:fe:47:d1:da:5a:41:1d:74:9b:
49:a1:fe:65:a8:e1:fd:01:79:e5:52:d5:06:46:9f:
83:2c:87:0a:a6:53:b0:73:42:a1:55:f6:10:00:b3:
0f:76:36:e7:6a:97:69:6f:7e:08:11:2d:5a:b6:80:
a2:e9:2e:5f:c5:20:97:09:ba:6f:ab:3a:37:9f:ce:
ad:7c:c8:02:ac:5d:79:a8:b8:26:40:d7:22:03:49:
fd:10:b5:d5:10:2d:cf:d6:c3:f0:49:79:71:5c:bb:
b3:31:7f:4c:76:5e:1c:ff:97:0e:91:6d:25:d8:ad:
79:cb:d2:a6:04:c8:09:53:e0:5a:4b:35:c5:9c:90:
24:a5:83:80:11:54:76:f3:88:62:9a:b6:96:5b:80:
8b:16:a9:f6:60:07:4c:76:97:2f:42:d1:50:8b:04:
82:68:f8:a5:eb:85:9e:7e:6c:4b:08:22:dd:b5:ce:
84:fc:b8:31:7d:df:16:f2:fb:b3:03:d1:13:14:3f:
2b:d4:4b:eb:64:d9:4b:51:ea:12:fa:5d:f8:48:62:
6f:04:e5:e9:e4:92:49:de:9f:bb:50:46:3e:d6:9d:
3a:27:05:9c:56:05:9c:d9:86:cc:00:70:d2:b9:bc:
d5:9e:30:5e:2d:45:bb:c5:40:ea:8f:48:c5:43:b0:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C2:C8:63:77:A7:A5:3D:08:14:5E:E4:B4:43:C1:48:0E:B8:D9:F1
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/uMLIY3enpT0IFF7ktEPBSA642fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.88.0/22
45.66.28.0/22
45.84.24.0/22
93.88.16.0/22
185.47.44.0/22
185.68.156.0/22
185.110.32.0/22
193.168.248.0/22
213.170.216.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b7:2b:72:f4:16:53:d2:e6:90:67:3c:44:f8:a3:2d:58:ba:
5e:09:51:06:f6:c6:50:2d:09:7a:60:60:d4:8b:38:ac:ae:9d:
cb:83:04:45:c8:f7:5c:e7:4f:c4:ef:84:f8:68:1c:31:e5:14:
59:5c:4d:9f:22:a0:5d:8b:57:b6:b0:b1:cb:1e:5b:18:49:a9:
61:3b:b1:c6:87:65:53:eb:9a:b1:e5:0a:18:5d:18:65:4d:e5:
29:6b:a9:9b:f2:dc:cd:ca:8b:2d:eb:92:62:88:81:94:fa:b3:
01:5e:e6:48:35:7f:4a:db:46:d2:4e:65:d6:b4:64:63:5c:6b:
ef:b0:c7:87:97:e4:2c:e3:12:c1:2d:3a:dd:3f:50:35:b0:94:
b3:dc:84:7e:1f:1e:df:0d:83:d6:36:a1:2a:ee:78:f6:25:67:
84:29:5c:4e:b8:67:f4:44:0a:64:e8:29:16:bf:fe:c5:aa:61:
cd:7c:be:06:b0:04:f9:0f:08:7f:19:c0:6d:9d:ce:c2:ea:af:
4d:06:24:35:f4:70:6c:9c:b7:b8:59:50:f9:6c:9e:6b:68:d9:
bc:76:87:1f:d9:80:b4:4c:12:10:e6:0b:d3:c1:57:16:eb:c0:
e0:1c:23:83:f9:1d:55:5f:c1:ea:f5:d3:08:45:32:c4:68:d6:
f8:29:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 16:36:28 2024 by rpki-client on console-fra.rpki-client.org