Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/KGL5MZl-XHrIcVHMvjbOXRMSAMA.roa
File: KGL5MZl-XHrIcVHMvjbOXRMSAMA.roa (raw, json)
Hash identifier: YNg9/pDGej4Qr4ajEQW9CM8Xe0Sn+SaC8Bd051+HRbA=
Subject key identifier: 28:62:F9:31:99:7E:5C:7A:C8:71:51:CC:BE:36:CE:5D:13:12:00:C0
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 018CC56DF0723F4A0807879DE259AAE94324
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/KGL5MZl-XHrIcVHMvjbOXRMSAMA.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205836
IP address blocks: 103.226.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f0:72:3f:4a:08:07:87:9d:e2:59:aa:e9:43:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2862f931997e5c7ac87151ccbe36ce5d131200c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:7b:39:04:04:ef:b7:8c:73:03:44:8b:a3:
66:6a:08:b0:09:e6:21:bb:a9:10:69:32:bf:3d:a7:
ee:d1:3b:a2:49:fe:6e:ce:36:1f:0d:4f:fe:05:9e:
aa:91:5b:28:02:f0:ff:0e:e6:44:2e:d3:4f:40:c3:
dc:10:82:cd:33:ec:71:44:7e:a4:dd:b1:cc:39:c3:
97:40:b8:2a:01:1a:7d:8f:4e:a3:c4:ce:43:90:9b:
87:a7:d4:48:85:15:c4:7b:08:5e:9d:9c:58:08:fe:
99:92:75:d8:00:73:04:c7:ee:7f:d7:1d:46:79:ef:
83:8b:23:37:8e:46:d4:dc:4d:8c:2c:5c:fd:56:3f:
c5:2a:1e:bc:7b:7c:93:4f:75:ba:21:7d:4f:9f:25:
81:1b:65:4f:c2:82:42:58:39:45:c8:93:16:31:fe:
01:28:6f:f4:af:e6:04:37:28:f6:78:2d:08:87:26:
9b:1c:e0:c0:0e:6f:c3:03:1a:18:41:21:ce:bb:49:
44:91:bc:a0:bd:5a:ac:7d:c2:d9:4c:d5:34:82:c3:
a0:49:d2:99:00:c1:2d:fd:ac:b0:8f:59:8d:4b:0e:
9d:08:62:b3:46:7b:e5:7b:fe:e9:07:22:5b:e6:6b:
15:e5:fb:4c:31:24:08:e9:01:50:e6:82:60:a0:4a:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:62:F9:31:99:7E:5C:7A:C8:71:51:CC:BE:36:CE:5D:13:12:00:C0
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/KGL5MZl-XHrIcVHMvjbOXRMSAMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.193.0/24
Signature Algorithm: sha256WithRSAEncryption
69:96:66:b2:aa:2c:ae:9d:27:cf:f5:94:9e:cc:d4:d0:85:48:
4e:60:19:b6:13:6f:28:d0:20:68:de:e3:fb:a1:5c:6c:04:8a:
b9:60:01:2c:c2:a4:60:d9:a5:21:97:8f:81:6c:40:64:59:1a:
3e:86:78:12:30:62:c9:00:cc:60:29:7d:65:e5:0b:f7:d3:3b:
2a:6e:57:a4:fe:d5:90:4e:fe:33:19:e1:cd:82:fd:51:14:83:
4f:cf:d2:81:52:4c:73:da:33:0d:a7:0c:23:f1:d1:47:d2:6c:
23:9b:1d:72:21:73:8d:6e:03:6f:2f:9e:e2:8f:f5:cd:49:59:
0d:99:90:f1:b9:5f:b2:3b:0e:5b:2c:d4:15:4b:7b:13:a6:f4:
21:9b:d5:3a:66:a6:b7:8d:65:ce:4b:6e:b2:91:d7:1f:62:4b:
bd:d0:10:2f:05:1a:04:43:58:15:a5:78:88:81:00:f2:3d:19:
37:34:00:c2:b5:3d:88:16:fa:60:74:7b:a8:ce:66:c6:ff:a5:
52:2b:11:af:bc:02:97:1b:50:f5:5b:d5:50:3b:a7:ed:bd:40:
f4:cb:2c:a0:84:bb:09:4b:7a:e4:5c:40:85:75:15:9f:58:13:
af:2e:2a:2f:c5:e7:19:a8:62:4c:5e:f8:f0:5a:77:50:b0:d7:
bd:7c:c1:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfByP0oIB4ed4lmq6UMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0
NDkwMjcwHhcNMjQwMTAxMTQyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODYyZjkzMTk5N2U1YzdhYzg3MTUxY2NiZTM2Y2U1ZDEzMTIwMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Z7OQQE77eMcwNEi6NmagiwCeYh
u6kQaTK/Pafu0TuiSf5uzjYfDU/+BZ6qkVsoAvD/DuZELtNPQMPcEILNM+xxRH6k
3bHMOcOXQLgqARp9j06jxM5DkJuHp9RIhRXEewhenZxYCP6ZknXYAHMEx+5/1x1G
ee+DiyM3jkbU3E2MLFz9Vj/FKh68e3yTT3W6IX1PnyWBG2VPwoJCWDlFyJMWMf4B
KG/0r+YENyj2eC0IhyabHODADm/DAxoYQSHOu0lEkbygvVqsfcLZTNU0gsOgSdKZ
AMEt/aywj1mNSw6dCGKzRnvle/7pByJb5msV5ftMMSQI6QFQ5oJgoEpZ9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChi+TGZflx6yHFRzL42zl0TEgDAMB8GA1UdIwQY
MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt
MDU0OGQzODk1YTU1LzEvS0dMNU1abC1YSHJJY1ZITXZqYk9YUk1TQU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1
LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+LBMA0G
CSqGSIb3DQEBCwUAA4IBAQBplmayqiyunSfP9ZSezNTQhUhOYBm2E28o0CBo3uP7
oVxsBIq5YAEswqRg2aUhl4+BbEBkWRo+hngSMGLJAMxgKX1l5Qv30zsqblek/tWQ
Tv4zGeHNgv1RFINPz9KBUkxz2jMNpwwj8dFH0mwjmx1yIXONbgNvL57ij/XNSVkN
mZDxuV+yOw5bLNQVS3sTpvQhm9U6Zqa3jWXOS26ykdcfYku90BAvBRoEQ1gVpXiI
gQDyPRk3NADCtT2IFvpgdHuozmbG/6VSKxGvvAKXG1D1W9VQO6ftvUD0yyyghLsJ
S3rkXECFdRWfWBOvLiovxecZqGJMXvjwWndQsNe9fMEx
-----END CERTIFICATE-----
Generated at Sun May 19 00:40:28 2024 by rpki-client on console-ams.rpki-client.org