Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/KpPVAFo3LCbbCA9b_ScZpctd3Tw.roa
File: KpPVAFo3LCbbCA9b_ScZpctd3Tw.roa (raw, json)
Hash identifier: p4yyLHVkla/rmN7jY6Fd+OAky55Ur0R9QW4Kf9qI800=
Subject key identifier: 2A:93:D5:00:5A:37:2C:26:DB:08:0F:5B:FD:27:19:A5:CB:5D:DD:3C
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 018CCA2A5E616FE9C16687DE7898C23F4435
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/KpPVAFo3LCbbCA9b_ScZpctd3Tw.roa
Signing time: Tue 02 Jan 2024 12:33:43 +0000
ROA not before: Tue 02 Jan 2024 12:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 202.61.192.0/20 maxlen: 22
202.61.224.0/20 maxlen: 24
202.61.240.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5e:61:6f:e9:c1:66:87:de:78:98:c2:3f:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jan 2 12:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a93d5005a372c26db080f5bfd2719a5cb5ddd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:7a:6d:30:bd:88:48:4d:fc:94:7c:5f:d2:
81:0d:d1:05:bb:44:df:21:66:07:9a:fe:01:fd:2a:
67:dc:9c:e1:de:3b:c6:14:f9:fe:eb:dc:43:24:0d:
07:e2:b0:17:df:0d:3e:28:33:a9:1d:20:86:b8:80:
fa:f4:9d:e5:18:71:1d:e0:26:76:70:bd:cf:f7:49:
a2:8e:83:6a:0b:1d:d0:24:a7:85:ba:2d:af:a4:a2:
e6:ef:5a:6e:53:67:03:7f:4f:93:36:80:e5:1b:b8:
9d:50:da:f7:a9:25:b2:28:d0:dc:1c:f7:e1:39:d2:
82:8e:59:28:ab:1c:40:f5:ec:9b:b0:b0:c1:c5:0d:
95:10:c7:47:ad:89:ad:49:0c:15:30:42:93:08:75:
06:3e:46:ac:74:fa:ef:6a:89:a8:7c:66:7f:de:26:
c9:b1:d1:aa:1d:b6:85:5d:c2:95:dc:36:56:46:27:
4a:06:56:59:a7:3b:f7:24:5f:98:e8:00:10:ab:81:
86:87:b6:68:cb:7e:24:c4:4b:88:7f:c8:3b:3a:35:
91:50:0f:8d:8c:6b:09:da:99:e5:6c:45:ed:58:e6:
28:65:53:ca:34:13:ef:7f:37:60:bb:26:77:fb:50:
38:c2:ba:82:b6:f2:74:1d:3e:80:c7:c4:61:93:cb:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:93:D5:00:5A:37:2C:26:DB:08:0F:5B:FD:27:19:A5:CB:5D:DD:3C
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/KpPVAFo3LCbbCA9b_ScZpctd3Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.61.192.0/20
202.61.224.0/19
Signature Algorithm: sha256WithRSAEncryption
30:47:60:cd:f5:8c:1e:44:eb:c3:75:a4:12:db:bd:1b:c0:0b:
4f:13:a4:f2:07:c9:0c:5b:27:3b:1e:d4:0b:ed:34:45:9b:25:
11:4f:df:5e:5c:90:52:c7:75:b2:1f:6b:57:3f:f2:e3:e2:cf:
e8:bf:cb:9f:fa:aa:df:32:6d:10:a2:42:a8:6a:a5:d5:87:97:
70:1f:05:c6:5e:95:e3:8c:17:33:5a:99:90:83:0e:5f:7d:c9:
ca:ab:08:61:d1:95:de:85:dc:0a:b3:83:d5:2d:50:a0:c4:5f:
80:80:4a:94:0a:3f:e6:f9:3d:47:0d:ec:d4:51:14:6d:7c:81:
82:e8:0d:d0:de:7e:66:e8:9f:ff:5b:30:94:fc:e6:ff:3b:ce:
07:ac:b8:99:7b:dc:96:f7:f3:36:8c:6b:f0:00:60:62:89:31:
1a:24:45:89:ae:92:56:1b:a7:1e:60:6a:c9:3a:b8:f9:35:28:
16:ba:d3:ee:2c:b0:4b:de:48:7a:da:81:09:dc:cd:21:d8:98:
ec:3a:eb:a8:80:fa:4f:0b:ae:24:7f:73:bd:16:2c:1c:ea:c1:
58:ae:b4:3b:ed:48:aa:41:f8:42:68:92:75:08:82:cd:54:b1:
01:eb:fd:ee:a8:60:55:57:ad:75:d0:84:e2:55:36:d3:45:d5:
ad:8a:63:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKl5hb+nBZofeeJjCP0Q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy
YjY3M2QwHhcNMjQwMTAyMTIzMzQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTkzZDUwMDVhMzcyYzI2ZGIwODBmNWJmZDI3MTlhNWNiNWRkZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/V6bTC9iEhN/JR8X9KBDdEFu0Tf
IWYHmv4B/Spn3Jzh3jvGFPn+69xDJA0H4rAX3w0+KDOpHSCGuID69J3lGHEd4CZ2
cL3P90mijoNqCx3QJKeFui2vpKLm71puU2cDf0+TNoDlG7idUNr3qSWyKNDcHPfh
OdKCjlkoqxxA9eybsLDBxQ2VEMdHrYmtSQwVMEKTCHUGPkasdPrvaomofGZ/3ibJ
sdGqHbaFXcKV3DZWRidKBlZZpzv3JF+Y6AAQq4GGh7Zoy34kxEuIf8g7OjWRUA+N
jGsJ2pnlbEXtWOYoZVPKNBPvfzdguyZ3+1A4wrqCtvJ0HT6Ax8Rhk8uMdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCqT1QBaNywm2wgPW/0nGaXLXd08MB8GA1UdIwQY
MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt
NmMxY2Y3MjVkOGY3LzEvS3BQVkFGbzNMQ2JiQ0E5Yl9TY1pwY3RkM1R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3
LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEyj3AAwQF
yj3gMA0GCSqGSIb3DQEBCwUAA4IBAQAwR2DN9YweROvDdaQS270bwAtPE6TyB8kM
Wyc7HtQL7TRFmyURT99eXJBSx3WyH2tXP/Lj4s/ov8uf+qrfMm0QokKoaqXVh5dw
HwXGXpXjjBczWpmQgw5ffcnKqwhh0ZXehdwKs4PVLVCgxF+AgEqUCj/m+T1HDezU
URRtfIGC6A3Q3n5m6J//WzCU/Ob/O84HrLiZe9yW9/M2jGvwAGBiiTEaJEWJrpJW
G6ceYGrJOrj5NSgWutPuLLBL3kh62oEJ3M0h2JjsOuuogPpPC64kf3O9Fiwc6sFY
rrQ77UiqQfhCaJJ1CILNVLEB6/3uqGBVV6110ITiVTbTRdWtimPE
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:42:48 2024 by rpki-client on console-ams.rpki-client.org