Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kvvx0PZbb_a9Iv1WeaN5tbUS0lU.roa
File: kvvx0PZbb_a9Iv1WeaN5tbUS0lU.roa (raw, json)
Hash identifier: J7mqwKqzQ+ZGEeKWj7O8/3S4gvPxhHr0qTmommqQ+V4=
Subject key identifier: 92:FB:F1:D0:F6:5B:6F:F6:BD:22:FD:56:79:A3:79:B5:B5:12:D2:55
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 018EA7F6AD3599334F98B04CE3390CE77BBF
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kvvx0PZbb_a9Iv1WeaN5tbUS0lU.roa
Signing time: Thu 04 Apr 2024 07:15:45 +0000
ROA not before: Thu 04 Apr 2024 07:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215189
IP address blocks: 103.69.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:f6:ad:35:99:33:4f:98:b0:4c:e3:39:0c:e7:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Apr 4 07:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92fbf1d0f65b6ff6bd22fd5679a379b5b512d255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:8b:5c:50:72:d9:da:6b:ee:53:e3:65:45:
fd:62:2a:41:51:37:42:42:b5:68:a9:d6:d0:93:b5:
96:ca:69:8b:7b:d5:9e:ac:3f:16:f5:99:7c:93:f5:
8c:e7:24:fb:dd:3d:6a:88:90:4b:6c:f3:1d:38:e7:
2d:09:87:14:a7:e8:9a:0c:05:d7:10:0f:e9:cc:e8:
01:98:c1:17:b9:b0:13:af:b9:0c:3c:19:74:8a:7b:
b8:82:7f:fd:cc:7f:0f:05:a4:06:89:35:2e:ad:6d:
0b:ec:01:7b:98:ca:3f:04:ec:cd:1a:60:31:5d:9a:
41:73:d6:b7:a2:c8:5f:f7:fa:84:34:b4:ba:cf:c4:
1b:ee:32:e4:e9:95:86:7b:76:ee:e3:2b:ec:ea:5a:
f8:6d:2e:ec:bb:d5:2c:8e:53:f5:a0:2e:99:08:76:
82:29:25:07:37:2c:5e:e8:95:59:92:dc:26:43:97:
01:d8:4d:fd:07:dd:7c:03:6e:3a:6b:a7:ef:87:43:
ac:53:bb:8e:e4:9a:f9:ee:2d:4d:76:ea:33:4f:53:
e1:fb:9f:06:23:d4:7b:60:2d:cf:12:b9:17:27:b4:
bc:9e:71:a4:95:aa:39:42:c8:f7:99:2a:2a:86:7f:
9c:b2:ba:dc:31:12:f3:f9:09:3f:24:d7:1d:73:79:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:F1:D0:F6:5B:6F:F6:BD:22:FD:56:79:A3:79:B5:B5:12:D2:55
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kvvx0PZbb_a9Iv1WeaN5tbUS0lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.225.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f0:2e:56:b9:b4:e6:46:f7:31:66:ff:53:34:39:61:af:ae:
21:c8:8a:3f:44:6e:77:eb:e5:c1:81:d2:39:a5:8c:68:4f:f3:
d8:f3:b4:60:a2:f1:48:c7:1f:0d:9c:05:e8:fc:99:75:27:c8:
8e:1c:21:ec:ec:95:04:b8:7e:1b:8c:d6:47:83:ea:83:88:31:
9b:65:d1:6a:a4:f0:c6:99:ba:74:4b:7e:b8:15:f6:3f:b0:28:
9c:89:43:70:1d:a9:59:63:98:e0:2e:4f:5e:e2:6e:4c:9d:c3:
2c:0d:28:6d:15:34:a4:06:7c:dc:ed:79:d2:38:2f:04:1b:10:
25:01:9d:7c:5b:f5:c1:12:c8:a6:e0:f5:0d:aa:4a:74:0e:cc:
06:99:14:be:0e:89:9c:7f:d7:43:52:af:e1:30:ee:a0:33:b3:
d2:aa:6a:5b:ad:8e:aa:41:e8:18:2f:07:8c:38:00:c2:a5:66:
27:c2:23:07:b5:39:d3:7d:82:1d:e6:ec:33:d8:e7:ec:eb:d5:
24:dd:52:3b:d8:01:f9:a5:a5:9b:8f:15:b4:b5:db:c7:07:79:
49:88:26:84:e9:76:a8:81:95:30:41:2f:39:ce:b8:4c:c0:26:
1b:b8:dc:3c:6d:53:ed:32:19:78:87:5f:2b:61:bf:bf:98:57:
72:77:fd:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6n9q01mTNPmLBM4zkM53u/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjQwNDA0MDcxNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmZiZjFkMGY2NWI2ZmY2YmQyMmZkNTY3OWEzNzliNWI1MTJkMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik2LXFBy2dpr7lPjZUX9YipBUTdC
QrVoqdbQk7WWymmLe9WerD8W9Zl8k/WM5yT73T1qiJBLbPMdOOctCYcUp+iaDAXX
EA/pzOgBmMEXubATr7kMPBl0inu4gn/9zH8PBaQGiTUurW0L7AF7mMo/BOzNGmAx
XZpBc9a3oshf9/qENLS6z8Qb7jLk6ZWGe3bu4yvs6lr4bS7su9UsjlP1oC6ZCHaC
KSUHNyxe6JVZktwmQ5cB2E39B918A246a6fvh0OsU7uO5Jr57i1NduozT1Ph+58G
I9R7YC3PErkXJ7S8nnGklao5Qsj3mSoqhn+csrrcMRLz+Qk/JNcdc3ncXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJL78dD2W2/2vSL9VnmjebW1EtJVMB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEva3Z2eDBQWmJiX2E5SXYxV2VhTjV0YlVTMGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0XhMA0G
CSqGSIb3DQEBCwUAA4IBAQAy8C5WubTmRvcxZv9TNDlhr64hyIo/RG536+XBgdI5
pYxoT/PY87RgovFIxx8NnAXo/Jl1J8iOHCHs7JUEuH4bjNZHg+qDiDGbZdFqpPDG
mbp0S364FfY/sCiciUNwHalZY5jgLk9e4m5MncMsDShtFTSkBnzc7XnSOC8EGxAl
AZ18W/XBEsim4PUNqkp0DswGmRS+Domcf9dDUq/hMO6gM7PSqmpbrY6qQegYLweM
OADCpWYnwiMHtTnTfYId5uwz2Ofs69Uk3VI72AH5paWbjxW0tdvHB3lJiCaE6Xao
gZUwQS85zrhMwCYbuNw8bVPtMhl4h18rYb+/mFdyd/1l
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:06:11 2024 by rpki-client on console-fra.rpki-client.org