Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Vk-KwNhKqo-molYQFBeUF-Q1eCY.roa
File: Vk-KwNhKqo-molYQFBeUF-Q1eCY.roa (raw, json)
Hash identifier: D3F7maJPK0EaEI9Jj0wC23odk9cka2NkFhDw669p3Gk=
Subject key identifier: 56:4F:8A:C0:D8:4A:AA:8F:A6:A2:56:10:14:17:94:17:E4:35:78:26
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E13BEB98C5EA325F058F632A96937
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Vk-KwNhKqo-molYQFBeUF-Q1eCY.roa
Signing time: Tue 02 Jan 2024 08:33:06 +0000
ROA not before: Tue 02 Jan 2024 08:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60548
IP address blocks: 43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
37.114.50.0/23 maxlen: 23
37.114.54.0/23 maxlen: 23
37.114.52.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:13:be:b9:8c:5e:a3:25:f0:58:f6:32:a9:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=564f8ac0d84aaa8fa6a2561014179417e4357826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:bf:13:a6:bd:16:00:0b:b5:8b:6b:38:51:
a0:6f:de:9b:e9:a8:7b:97:77:1b:f2:98:4c:24:fc:
51:96:c7:e2:c6:9f:fe:e9:d0:c0:64:88:99:3a:2b:
7f:a4:87:ef:2d:68:bd:3a:28:20:4e:24:e2:23:be:
b7:fb:a3:b2:9f:31:fa:a0:87:64:f8:64:ee:c8:eb:
6d:92:8f:62:86:86:e4:7d:71:b2:ab:dd:a1:e1:dc:
82:15:48:1d:32:5a:73:21:44:83:8e:14:9b:33:a4:
98:29:18:41:49:4b:4b:bd:97:0d:19:e1:eb:53:23:
dd:7b:e9:4f:91:64:f1:c8:5d:38:7b:e1:7d:46:b7:
bc:35:2e:7e:1f:14:6e:ce:ad:ad:a8:03:5d:71:30:
7f:0d:9d:2a:3e:85:99:3a:f8:d3:92:94:3f:10:17:
49:fd:e2:72:a7:ce:e9:df:14:3f:a0:e4:c5:5f:16:
03:d3:77:b6:03:b6:8f:73:75:b2:38:ff:2b:94:d0:
ab:dc:e6:df:31:3b:c8:c5:9e:3f:d2:4a:45:d1:ca:
fa:39:e0:91:37:22:a9:13:07:1c:eb:73:a9:1d:cf:
2d:2c:25:86:ac:b4:f9:7f:99:e4:86:63:64:3c:5d:
ed:7b:0e:97:9a:4b:af:50:27:1c:41:96:0e:be:48:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4F:8A:C0:D8:4A:AA:8F:A6:A2:56:10:14:17:94:17:E4:35:78:26
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Vk-KwNhKqo-molYQFBeUF-Q1eCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.50.0-37.114.52.255
37.114.54.0/23
37.114.63.0/24
43.251.160.0/23
Signature Algorithm: sha256WithRSAEncryption
34:6b:ab:83:ed:00:0c:62:27:24:15:7f:e1:16:26:e5:b3:38:
39:ea:6f:30:ca:a9:c5:a6:b0:64:81:1e:f0:ca:21:f0:ab:f1:
f7:12:48:32:3e:17:fb:85:08:7c:ab:7a:de:0a:79:e6:1b:4c:
1f:55:67:c2:2f:0a:90:48:c1:a4:91:74:8d:11:7b:98:c7:bc:
6b:be:14:b2:a2:4b:e9:4a:86:5e:64:64:2c:26:c4:6c:1b:93:
5a:e7:87:cc:04:17:d6:d6:eb:a7:62:5c:d0:f8:c9:e9:55:bc:
77:6e:ef:b8:b6:f2:8e:44:7c:3f:17:9e:3a:69:03:a2:33:e8:
9e:b0:78:cc:f4:b6:4a:51:7b:aa:9d:74:82:c1:ab:8d:d4:f1:
3c:82:2f:e5:9d:64:a8:d0:aa:b7:14:d4:72:ee:b5:ef:0c:f3:
e0:29:96:d0:1f:a7:c9:28:55:67:5a:3f:5c:57:21:44:d1:9c:
5d:ad:56:7e:97:5a:bc:8c:95:d0:ca:8c:8c:b1:e4:f2:07:ca:
71:41:0d:33:72:e5:21:02:ff:5d:88:21:48:f9:2f:e2:b8:3a:
03:e3:8c:87:6e:77:2c:37:e7:f7:cc:5c:e6:43:ef:ff:2d:ee:
a6:21:23:ed:09:1f:ec:99:7f:57:4d:d8:4b:a3:e9:0a:d2:70:
4e:87:e8:ec
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzJThO+uYxeoyXwWPYyqWk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjQwMTAyMDgzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjRmOGFjMGQ4NGFhYThmYTZhMjU2MTAxNDE3OTQxN2U0MzU3ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRC/E6a9FgALtYtrOFGgb96b6ah7
l3cb8phMJPxRlsfixp/+6dDAZIiZOit/pIfvLWi9OiggTiTiI763+6OynzH6oIdk
+GTuyOttko9ihobkfXGyq92h4dyCFUgdMlpzIUSDjhSbM6SYKRhBSUtLvZcNGeHr
UyPde+lPkWTxyF04e+F9Rre8NS5+HxRuzq2tqANdcTB/DZ0qPoWZOvjTkpQ/EBdJ
/eJyp87p3xQ/oOTFXxYD03e2A7aPc3WyOP8rlNCr3ObfMTvIxZ4/0kpF0cr6OeCR
NyKpEwcc63OpHc8tLCWGrLT5f5nkhmNkPF3tew6XmkuvUCccQZYOvkgFdwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFZPisDYSqqPpqJWEBQXlBfkNXgmMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvVmstS3dOaEtxby1tb2xZUUZCZVVGLVExZUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAElcjID
BAAlcjQDBAElcjYDBAAlcj8DBAEr+6AwDQYJKoZIhvcNAQELBQADggEBADRrq4Pt
AAxiJyQVf+EWJuWzODnqbzDKqcWmsGSBHvDKIfCr8fcSSDI+F/uFCHyret4KeeYb
TB9VZ8IvCpBIwaSRdI0Re5jHvGu+FLKiS+lKhl5kZCwmxGwbk1rnh8wEF9bW66di
XND4yelVvHdu77i28o5EfD8XnjppA6Iz6J6weMz0tkpRe6qddILBq43U8TyCL+Wd
ZKjQqrcU1HLute8M8+ApltAfp8koVWdaP1xXIUTRnF2tVn6XWryMldDKjIyx5PIH
ynFBDTNy5SEC/12IIUj5L+K4OgPjjIdudyw35/fMXOZD7/8t7qYhI+0JH+yZf1dN
2Euj6QrScE6H6Ow=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:56:38 2024 by rpki-client on console-fra.rpki-client.org