Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ShMMAR3bZYcUbWM2A8x_LWMr_Hc.roa
File: ShMMAR3bZYcUbWM2A8x_LWMr_Hc.roa (raw, json)
Hash identifier: ih6RYmNVSSJUUTBXDDw6exipfCu29TfEXs1Gb/S+0HU=
Subject key identifier: 4A:13:0C:01:1D:DB:65:87:14:6D:63:36:03:CC:7F:2D:63:2B:FC:77
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348F45C73F83D851005F538B468C238
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ShMMAR3bZYcUbWM2A8x_LWMr_Hc.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8581
IP address blocks: 195.130.112.0/21 maxlen: 21
195.251.192.0/21 maxlen: 21
195.130.120.0/23 maxlen: 23
195.251.200.0/23 maxlen: 23
194.177.199.0/24 maxlen: 24
83.212.184.0/21 maxlen: 21
83.212.192.0/21 maxlen: 21
195.130.74.0/24 maxlen: 24
195.130.72.0/23 maxlen: 23
2001:648:2e01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f4:5c:73:f8:3d:85:10:05:f5:38:b4:68:c2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a130c011ddb6587146d633603cc7f2d632bfc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:14:2e:87:50:a8:df:f1:73:53:b5:a0:27:
f2:e5:73:82:2e:11:c5:d0:0c:99:37:3b:9b:49:25:
8e:c3:51:23:f0:60:d9:0d:22:11:6c:26:b4:6c:4f:
4b:f4:e7:0c:a2:6b:68:6e:8d:25:fd:34:7f:26:65:
28:3e:b4:bc:03:72:25:8a:ee:d5:d0:0b:dd:1c:3f:
61:48:9f:5d:89:f5:c5:a1:24:49:3b:96:ec:ce:7b:
4d:ee:3c:77:a0:08:f1:60:f8:30:05:6d:b5:d7:d4:
0c:e6:4d:3b:c2:ae:90:d1:e5:af:a3:c2:56:9c:c4:
87:6d:04:12:ce:d2:01:d2:b8:55:7c:0c:04:67:91:
41:3c:af:5a:68:80:9b:14:fc:e5:8f:52:1a:75:25:
46:22:0d:96:cb:a1:6a:14:49:e2:ab:a5:9c:c4:c2:
2e:d5:2c:7f:90:b0:a4:90:48:a4:a8:b6:28:1c:d5:
5a:56:c5:bc:1d:57:86:51:5d:50:17:3f:36:13:79:
cd:87:55:1c:e3:6d:1b:27:bf:ce:5e:44:af:0f:9b:
5a:e9:e1:83:8a:8b:71:7d:2c:b7:c0:c4:43:4b:d6:
62:f0:04:71:21:d2:7c:cc:c7:1e:22:17:78:72:2e:
82:35:d5:7e:7b:73:fa:f8:1f:2c:e0:e4:61:fe:ae:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:0C:01:1D:DB:65:87:14:6D:63:36:03:CC:7F:2D:63:2B:FC:77
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ShMMAR3bZYcUbWM2A8x_LWMr_Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.184.0-83.212.199.255
194.177.199.0/24
195.130.72.0-195.130.74.255
195.130.112.0-195.130.121.255
195.251.192.0-195.251.201.255
IPv6:
2001:648:2e01::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ba:2f:90:7a:ed:c9:e2:2c:3f:4a:00:2f:f5:70:5e:75:86:
2d:10:dc:14:67:c8:fa:5d:4d:35:1b:6f:5f:d2:f8:26:40:d3:
55:d1:0d:e9:cc:71:e1:2d:58:a2:4b:7d:de:22:5c:c4:53:6f:
86:59:13:40:a3:4e:f8:ed:da:8f:07:18:4e:05:a5:20:41:fa:
ed:44:e8:bc:b2:c8:3e:69:f7:2d:fd:89:82:12:6d:f6:71:3a:
be:23:a4:be:25:a3:d0:6d:21:57:e4:f4:ca:87:6f:19:19:fd:
3c:89:e6:ba:07:cb:c1:70:71:bc:1b:8b:7a:fc:4b:8c:69:55:
e8:96:de:d6:fa:78:e9:ae:b4:ec:5d:dc:d8:cb:71:72:85:e2:
fe:24:ac:45:84:3b:d3:2c:32:71:9b:4b:8b:c6:a8:7c:bb:45:
e8:c8:14:d6:db:ba:d5:09:54:b7:57:4d:5e:9b:60:d3:b2:eb:
f8:d1:7e:84:ed:db:ec:67:c0:10:a9:ac:c3:8b:f4:0b:61:44:
a9:cd:8b:5b:d9:da:5a:84:60:08:e8:32:37:7f:1a:2a:35:b0:
8b:bc:d5:8f:c1:9b:72:ee:e5:37:14:8a:ce:d5:c8:b6:a1:a7:
7a:52:bb:76:0f:a2:b5:b3:8f:95:1c:e3:c9:46:68:6c:f3:68:
3f:fc:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:33:26 2024 by rpki-client on console-fra.rpki-client.org