Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ShdNydUR7-tL6Q1PkReS69JSKCQ.roa
File: ShdNydUR7-tL6Q1PkReS69JSKCQ.roa (raw, json)
Hash identifier: EajJ1gIRqVbyhcSuIY9j3e+aOn8878E1aPhM4Y/Qztc=
Subject key identifier: 4A:17:4D:C9:D5:11:EF:EB:4B:E9:0D:4F:91:17:92:EB:D2:52:28:24
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 018CC425238CE295A4D6104C4B72EBA31EC0
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ShdNydUR7-tL6Q1PkReS69JSKCQ.roa
Signing time: Mon 01 Jan 2024 08:30:17 +0000
ROA not before: Mon 01 Jan 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:23:8c:e2:95:a4:d6:10:4c:4b:72:eb:a3:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a174dc9d511efeb4be90d4f911792ebd2522824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:88:dc:46:fa:2c:5f:15:ca:97:6d:9f:11:
d4:e6:8c:92:5a:29:82:f0:ec:67:12:99:2f:e5:b5:
cb:76:7c:21:67:d9:2d:cf:61:02:46:ea:3d:e7:f7:
0b:2e:c3:f5:0d:eb:4d:f2:d2:da:5f:76:b9:cb:37:
fb:0b:8f:97:21:34:8f:93:0f:0f:aa:00:fd:b2:4f:
48:2e:71:3c:b0:d8:95:d7:bb:2a:5e:70:2c:79:07:
b6:b6:a6:37:51:87:54:2b:ab:8b:63:a4:cb:6e:29:
9f:9f:65:e8:60:25:ca:d4:76:0a:3a:e7:07:39:eb:
0f:5e:f6:b6:73:a7:45:5b:1e:17:71:1f:f1:6f:f8:
68:36:d0:8b:f3:ff:00:40:51:a9:62:b6:72:3a:98:
f6:02:27:f4:07:82:22:08:1b:84:5f:12:d2:38:f5:
25:1a:04:30:05:a8:e2:98:27:cb:06:97:f8:f6:6e:
c4:8a:14:14:eb:4c:1d:fc:3f:e0:ca:fe:a6:dc:d8:
c1:a0:b4:52:79:03:5d:c0:1d:2e:be:f8:de:01:e1:
63:f0:a1:98:92:b4:ca:82:7d:e1:b6:9b:60:be:4c:
ee:ae:0f:49:cc:01:f9:a3:79:c2:6b:53:ba:5a:6d:
f5:4a:92:16:a7:98:af:9f:1a:14:ab:b9:15:a8:4d:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:4D:C9:D5:11:EF:EB:4B:E9:0D:4F:91:17:92:EB:D2:52:28:24
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ShdNydUR7-tL6Q1PkReS69JSKCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:08:e6:9d:b3:16:f6:d7:c8:8d:90:d7:bb:82:5d:24:c0:b2:
1d:08:42:09:ce:98:51:02:02:ae:2b:12:ba:1b:22:b7:b2:7a:
e5:97:bb:4c:48:76:42:86:e8:91:c0:04:3f:b4:b8:6f:a9:77:
32:a7:ca:db:88:2e:97:0d:76:76:e7:3b:7d:5d:af:e1:8d:a4:
df:15:3c:46:af:e0:d4:40:c1:6e:94:a5:e6:38:43:98:e2:fd:
34:b4:39:e4:26:37:be:34:cc:60:3a:bb:58:1d:a7:0d:67:17:
e4:dc:ab:f9:5f:95:49:8d:dc:85:a0:a8:59:20:64:29:56:45:
23:8f:c5:b0:a5:4c:02:fc:04:b1:6c:bc:69:0b:58:56:1c:89:
55:4f:2c:5c:1e:24:83:e8:a3:09:f9:0d:28:fa:76:01:50:73:
82:e3:68:eb:1f:d0:14:5e:3f:a2:79:ca:1f:0c:9b:97:cf:e2:
35:15:f2:15:48:85:55:9b:94:2f:b2:2c:c3:05:42:c7:6b:36:
22:5f:e9:5a:87:80:26:45:aa:99:a0:59:b2:d9:88:b9:35:92:
cf:18:ae:46:12:e1:01:4a:97:50:2c:e3:c5:21:a2:45:76:21:
84:89:bf:d1:e2:89:d9:ea:ca:70:97:49:e6:76:33:6d:19:21:
39:dc:20:a5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzEJSOM4pWk1hBMS3Lrox7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjQwMTAxMDgzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTE3NGRjOWQ1MTFlZmViNGJlOTBkNGY5MTE3OTJlYmQyNTIyODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPaI3Eb6LF8VypdtnxHU5oySWimC
8OxnEpkv5bXLdnwhZ9ktz2ECRuo95/cLLsP1DetN8tLaX3a5yzf7C4+XITSPkw8P
qgD9sk9ILnE8sNiV17sqXnAseQe2tqY3UYdUK6uLY6TLbimfn2XoYCXK1HYKOucH
OesPXva2c6dFWx4XcR/xb/hoNtCL8/8AQFGpYrZyOpj2Aif0B4IiCBuEXxLSOPUl
GgQwBajimCfLBpf49m7EihQU60wd/D/gyv6m3NjBoLRSeQNdwB0uvvjeAeFj8KGY
krTKgn3htptgvkzurg9JzAH5o3nCa1O6Wm31SpIWp5ivnxoUq7kVqE0QQQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEoXTcnVEe/rS+kNT5EXkuvSUigkMB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvU2hkTnlkVVI3LXRMNlExUGtSZVM2OUpTS0NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXblQAwQC
uX2UMA0EAgACMAcDBQMqBrjAMA0GCSqGSIb3DQEBCwUAA4IBAQA7COadsxb218iN
kNe7gl0kwLIdCEIJzphRAgKuKxK6GyK3snrll7tMSHZChuiRwAQ/tLhvqXcyp8rb
iC6XDXZ25zt9Xa/hjaTfFTxGr+DUQMFulKXmOEOY4v00tDnkJje+NMxgOrtYHacN
Zxfk3Kv5X5VJjdyFoKhZIGQpVkUjj8WwpUwC/ASxbLxpC1hWHIlVTyxcHiSD6KMJ
+Q0o+nYBUHOC42jrH9AUXj+iecofDJuXz+I1FfIVSIVVm5QvsizDBULHazYiX+la
h4AmRaqZoFmy2Yi5NZLPGK5GEuEBSpdQLOPFIaJFdiGEib/R4onZ6spwl0nmdjNt
GSE53CCl
-----END CERTIFICATE-----
Generated at Sun Jun 2 20:15:49 2024 by rpki-client on console-fra.rpki-client.org