Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/UWAMNR5KhGSPKzscgL0aGpxkak4.roa
File: UWAMNR5KhGSPKzscgL0aGpxkak4.roa (raw, json)
Hash identifier: wlj1g7umNQlPitClRaDTEymU2E/9qeziWrGfR45sTXo=
Subject key identifier: 51:60:0C:35:1E:4A:84:64:8F:2B:3B:1C:80:BD:1A:1A:9C:64:6A:4E
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F08861A67DC5EB41B9CFDB14D37DF
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/UWAMNR5KhGSPKzscgL0aGpxkak4.roa
Signing time: Mon 01 Jan 2024 14:30:37 +0000
ROA not before: Mon 01 Jan 2024 14:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211526
IP address blocks: 85.14.56.0/24 maxlen: 24
85.14.57.0/24 maxlen: 24
89.252.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:08:86:1a:67:dc:5e:b4:1b:9c:fd:b1:4d:37:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51600c351e4a84648f2b3b1c80bd1a1a9c646a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8e:41:75:b8:ac:18:71:56:c6:4c:b0:c1:42:
98:f2:83:df:f2:2c:67:95:27:10:c5:0f:fc:49:5e:
e3:24:02:78:95:a8:a5:4f:e4:e4:45:78:43:32:f2:
6b:d9:8a:87:df:11:70:65:ef:91:7b:38:5f:6d:cd:
47:02:99:b0:42:7d:45:ed:9f:51:89:25:85:c6:25:
2f:a2:19:d3:90:9b:81:64:56:04:2d:d3:b3:a9:02:
a8:85:63:03:84:cf:06:3b:5f:e4:2b:5f:b6:98:fe:
f0:3e:e9:d0:be:5c:de:b6:80:54:66:6a:0f:5c:ca:
b3:66:a5:45:dd:54:ef:7d:c6:9e:3b:05:c9:6a:71:
90:a6:59:d6:f4:26:14:c0:1f:4d:b0:5e:f9:51:2e:
18:8e:b8:1b:23:60:a7:c3:00:2e:6a:ec:8f:5c:91:
64:9b:3d:09:5f:c1:c5:c7:5f:98:f8:ba:36:09:52:
e2:6a:0c:15:10:c3:4d:18:a4:8a:5a:a1:69:34:47:
aa:45:8f:99:45:4d:c6:60:3b:c4:ac:57:80:d9:93:
c2:a7:1e:4b:68:8e:cc:08:a6:33:38:60:7d:ae:28:
ff:4e:8b:50:3d:6d:f3:f6:1e:d4:9f:9f:bc:8c:05:
62:34:2a:dc:af:2a:d2:e9:06:82:33:00:eb:57:25:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:60:0C:35:1E:4A:84:64:8F:2B:3B:1C:80:BD:1A:1A:9C:64:6A:4E
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/UWAMNR5KhGSPKzscgL0aGpxkak4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.56.0/23
89.252.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cd:cd:27:e5:aa:6d:0c:2d:73:b3:46:4e:77:38:42:71:72:
ea:e3:61:4c:30:35:2f:db:fd:0b:40:7f:d2:b2:90:e9:65:f3:
aa:0f:59:e4:a7:db:c0:f2:60:19:29:6c:d1:f9:66:4f:9b:15:
66:ab:71:c2:d7:df:b7:0f:05:78:ef:26:88:7e:e1:93:3b:18:
26:ef:12:83:97:3d:c4:3f:da:ac:43:13:d8:da:cd:eb:30:8b:
84:a1:01:51:13:9c:cc:14:7e:42:b3:f6:77:e2:03:4c:99:32:
70:ed:01:2d:fe:24:21:f3:53:ae:e0:de:80:5c:39:ff:70:4c:
e9:6a:22:84:c1:eb:7b:3c:b3:80:85:fd:2c:1f:bf:b1:74:bd:
9c:8c:f1:77:d1:3e:fa:5b:ab:13:4a:1c:d9:93:e2:90:c0:00:
ae:d1:35:6c:5f:7a:21:a3:7f:89:3f:70:28:84:9e:22:ce:6b:
59:d9:23:95:5b:b2:56:84:ce:45:25:67:50:0c:b4:ef:35:bf:
01:a4:80:72:50:75:b8:e7:bc:72:bc:bb:8d:87:24:a4:41:0e:
ef:fa:86:23:d0:16:0a:70:b0:e8:73:94:c5:1d:f8:f4:5e:96:
ac:a7:fe:3f:2b:f7:85:05:2a:25:1b:ed:d1:16:14:fc:45:8b:
7f:cb:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:15 2024 by rpki-client on console-fra.rpki-client.org