Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/x4Q6RBG_jc_y3zTuyuDp2gToF6Q.roa
File: x4Q6RBG_jc_y3zTuyuDp2gToF6Q.roa (raw, json)
Hash identifier: Y3z4i/dS+YwGyns7WeBKT/PCWum9XA49PyLbS1TvIOA=
Subject key identifier: C7:84:3A:44:11:BF:8D:CF:F2:DF:34:EE:CA:E0:E9:DA:04:E8:17:A4
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 018CC26D1B1FC39D5DA034BB72D9212D923A
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/x4Q6RBG_jc_y3zTuyuDp2gToF6Q.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59909
IP address blocks: 185.67.111.0/24 maxlen: 24
185.67.110.0/24 maxlen: 24
185.67.109.0/24 maxlen: 24
185.67.108.0/24 maxlen: 24
185.67.108.0/22 maxlen: 24
2a05:e40:1000::/38 maxlen: 38
2a05:e40:2000::/38 maxlen: 38
2a05:e40::/29 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1b:1f:c3:9d:5d:a0:34:bb:72:d9:21:2d:92:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7843a4411bf8dcff2df34eecae0e9da04e817a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:ea:ce:6f:b0:0a:fc:61:8b:de:08:b1:ec:
e0:86:b3:fc:14:73:48:e4:88:67:af:9f:6e:fe:46:
6f:8d:c7:c4:df:b0:d4:65:9a:80:a0:37:93:7d:cb:
97:fe:a2:cc:66:f5:a9:16:13:52:aa:11:bb:c6:72:
25:34:fe:e3:1b:7e:78:fd:33:8b:2c:02:1b:cd:98:
bf:fd:5e:3f:27:d8:fb:27:16:cf:f5:3c:12:49:14:
b4:9d:aa:fe:e7:f9:fa:8c:16:3d:a6:f7:7c:19:8c:
5d:82:6c:01:e0:ad:08:88:0a:51:c9:f5:e0:6d:71:
a7:87:ab:b5:e1:4b:a6:a8:6a:7a:2b:4d:9e:ca:d2:
17:ef:7e:17:9f:c4:6e:a8:19:b2:08:76:9a:3c:7b:
8c:e8:fa:54:15:f8:c3:a2:20:8e:4c:4a:51:54:2d:
fe:6f:b3:cf:2e:2b:6e:38:35:6f:dc:99:f1:37:8c:
fa:f9:de:23:7e:4b:9e:17:8b:da:1b:06:4e:2a:04:
d4:8c:51:72:b0:ed:cb:a2:21:76:57:39:ac:8f:f4:
74:19:94:aa:2d:77:33:d3:7c:a1:bf:de:63:00:68:
6e:36:94:b5:5e:d7:d1:c1:5a:e1:44:ee:37:e7:93:
89:a6:79:12:46:7c:c7:7f:8a:04:ab:e2:6d:1b:65:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:3A:44:11:BF:8D:CF:F2:DF:34:EE:CA:E0:E9:DA:04:E8:17:A4
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/x4Q6RBG_jc_y3zTuyuDp2gToF6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.108.0/22
IPv6:
2a05:e40::/29
Signature Algorithm: sha256WithRSAEncryption
3b:66:50:7e:77:6a:1f:ee:77:ea:9f:0c:34:95:77:4a:d3:b9:
92:8d:58:bb:06:7f:72:3e:22:20:4a:3e:c9:b4:c4:fd:31:45:
f0:44:a0:8b:ec:ca:a4:63:5e:09:3b:8d:16:c5:6b:5c:7e:ea:
17:dc:c1:43:93:c2:d2:66:52:4d:2f:c1:97:ae:75:72:71:01:
5d:ba:82:f9:db:0b:bf:76:3f:46:00:8e:38:16:72:14:73:0e:
96:1a:1a:e4:64:9c:28:17:49:ab:ca:2e:f1:6d:f8:7c:41:f5:
bc:b1:f8:8f:18:ff:c9:09:ab:ea:66:70:8d:3f:f5:16:2e:3c:
5a:c4:fb:5c:31:cf:71:79:99:0d:4c:3e:2d:d5:6c:e3:c7:04:
18:1f:82:ed:ba:a5:3f:9b:a6:b5:dc:62:b9:7b:6a:d2:43:91:
84:e3:97:48:72:5b:32:e5:06:68:cd:36:bf:a9:14:6f:32:4f:
20:be:80:43:6f:08:e7:5c:e2:46:de:26:16:2b:79:7f:d6:55:
87:0a:e6:2d:95:45:f1:83:e2:58:64:16:65:2c:59:a4:0f:81:
1c:ec:45:bc:ab:c5:12:81:3e:99:e7:b3:84:32:8a:3e:7a:e1:
53:c4:ba:2b:cc:48:ca:3b:12:af:6d:2f:13:1c:7e:69:36:d9:
a0:62:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:25:03 2024 by rpki-client on console-fra.rpki-client.org