Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/4X6g6U6pPuoPvMaOFM3V8Hrh-B4.roa
File: 4X6g6U6pPuoPvMaOFM3V8Hrh-B4.roa (raw, json)
Hash identifier: Pq4T6iQVhTt4qvdUMvmFPGsBC+fYa925sr1vlF4LtL0=
Subject key identifier: E1:7E:A0:E9:4E:A9:3E:EA:0F:BC:C6:8E:14:CD:D5:F0:7A:E1:F8:1E
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 018CC26D0736DDEFE1F53442C02F28DC155A
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/4X6g6U6pPuoPvMaOFM3V8Hrh-B4.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12727
IP address blocks: 185.39.140.0/22 maxlen: 24
213.166.192.0/19 maxlen: 21
130.185.184.0/21 maxlen: 24
188.64.240.0/21 maxlen: 21
31.24.240.0/21 maxlen: 21
2a03:d604::/31 maxlen: 31
2a03:d600::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:36:dd:ef:e1:f5:34:42:c0:2f:28:dc:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e17ea0e94ea93eea0fbcc68e14cdd5f07ae1f81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:88:3a:ff:4e:4b:e3:35:25:e0:f4:1b:bb:
b8:64:3e:b3:f5:76:c5:d3:65:e8:e5:13:c8:77:c8:
99:56:d5:6a:4d:8a:21:47:b6:ba:12:88:33:dd:ec:
1e:7f:dc:f5:07:49:00:d5:37:5f:45:49:22:39:15:
d0:2c:c9:1f:09:fb:4b:01:f1:70:91:17:38:ca:cb:
75:22:ca:e9:89:18:ee:d1:90:e1:49:c8:58:27:ea:
b8:f5:f8:9a:47:50:4d:f5:29:af:85:7b:d8:d3:b5:
08:82:93:43:9f:7d:4d:9b:44:22:6a:e9:ec:12:70:
25:80:1a:1e:ec:0a:d4:9a:13:9e:49:d5:d8:ee:41:
e1:be:d5:95:12:f4:19:22:56:34:f3:1f:e8:03:63:
ef:e4:31:a7:61:4d:98:dd:7e:13:fa:45:f8:ff:5c:
74:b2:d6:90:24:70:27:0f:05:18:72:1c:dd:7b:56:
89:2d:d2:6e:d8:de:3e:6f:03:48:16:52:2b:23:8c:
b7:bb:f5:cf:0b:e4:f8:d9:14:50:7b:01:6e:2a:82:
1f:f8:3e:8e:3f:1e:d9:ce:73:94:b7:8b:7b:20:af:
e3:10:46:ce:4a:fb:5d:d5:e3:76:fe:d9:38:b7:af:
b9:a0:82:4d:e5:6a:75:6d:65:5f:42:90:b8:7c:54:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:A0:E9:4E:A9:3E:EA:0F:BC:C6:8E:14:CD:D5:F0:7A:E1:F8:1E
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/4X6g6U6pPuoPvMaOFM3V8Hrh-B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.240.0/21
130.185.184.0/21
185.39.140.0/22
188.64.240.0/21
213.166.192.0/19
IPv6:
2a03:d600::/31
2a03:d604::/31
Signature Algorithm: sha256WithRSAEncryption
11:d0:a9:d0:08:a5:83:32:45:49:94:c6:45:7e:e3:bb:15:1f:
e7:dd:26:f6:6b:18:7f:ac:da:26:22:8b:45:a2:4b:39:da:f8:
1e:38:05:87:d7:0a:34:11:6a:8b:9d:d9:b6:c0:ac:d5:28:b3:
49:e9:d2:f8:d6:64:37:64:30:09:05:be:11:14:3e:9e:b2:f4:
c4:02:31:ad:fd:05:37:ef:26:3a:a7:df:39:3a:49:fc:4c:1c:
f5:c9:2c:ee:a2:d5:a5:d8:2b:0f:6f:07:74:1c:df:2a:34:be:
a1:98:8a:3d:7d:e3:f1:2d:66:81:a6:a2:17:dd:eb:dc:13:fd:
94:de:a6:81:9d:26:ad:b6:4d:0f:f6:7b:2b:ba:8b:ad:4f:1b:
f1:d0:77:02:29:1a:8e:57:63:23:ed:48:d1:20:d6:3f:6c:55:
3f:92:55:c9:79:fc:f2:b8:48:7e:e1:e2:4b:d2:a8:88:f1:fc:
e0:ea:3d:49:e1:51:c4:c2:18:19:27:c3:ea:cf:b9:09:5a:a2:
7f:fc:16:74:42:15:fb:f2:a3:ef:4e:81:13:18:aa:07:6d:44:
e3:bf:23:d0:5c:00:d8:17:65:76:94:d7:20:4c:aa:90:5f:e0:
d5:86:d0:60:b0:4f:60:e3:f4:7f:b0:83:d2:1b:94:9f:aa:1c:
29:a9:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:32:03 2024 by rpki-client on console-ams.rpki-client.org