Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/sSPtryuCwYup2_L3LlDL36wnQyA.roa
File: sSPtryuCwYup2_L3LlDL36wnQyA.roa (raw, json)
Hash identifier: /CYTSmCG1VHGAUbiawlMB9KIbo3Inz1mGIg/Lr/H5zU=
Subject key identifier: B1:23:ED:AF:2B:82:C1:8B:A9:DB:F2:F7:2E:50:CB:DF:AC:27:43:20
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 0191746F15530CE482B097B2BC6A8FFC912C
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/sSPtryuCwYup2_L3LlDL36wnQyA.roa
Signing time: Wed 21 Aug 2024 10:15:22 +0000
ROA not before: Wed 21 Aug 2024 10:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 37.114.36.0/24 maxlen: 24
37.114.40.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:6f:15:53:0c:e4:82:b0:97:b2:bc:6a:8f:fc:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Aug 21 10:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b123edaf2b82c18ba9dbf2f72e50cbdfac274320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:ac:b8:4b:23:4d:a4:66:df:4d:02:bd:f7:
80:3f:36:f6:06:a5:4b:fc:47:c1:44:16:93:7a:f8:
95:04:d1:93:f0:63:2f:06:98:e7:79:45:96:93:89:
c5:0d:dc:03:20:f7:9e:8b:64:8f:00:02:ad:82:3a:
65:f0:91:77:b4:5a:9f:5d:e6:03:d0:e1:16:89:e6:
fc:83:73:95:f8:78:01:e8:bd:6a:5a:ff:eb:ef:13:
e4:58:c5:3e:d3:ac:c7:3d:e9:45:3a:51:7e:8a:a0:
22:03:d6:96:54:58:21:f6:4c:8a:47:8e:cb:47:e8:
24:0d:14:09:2f:a3:77:a3:33:00:68:cd:7d:8b:57:
70:7b:93:87:2e:10:09:c5:4a:f6:58:89:63:95:0b:
2e:2a:9d:0f:f6:9d:c7:3b:0a:5f:9e:7a:6c:e9:61:
32:e9:ea:87:7c:99:2f:38:7a:56:4c:85:1f:ec:8a:
91:82:13:7a:07:dc:ac:d8:72:bd:6e:cc:92:4e:39:
26:07:0e:0a:39:f6:59:ca:3d:77:79:40:be:5a:31:
25:0b:67:43:28:e1:5c:d6:5b:e9:e6:4a:a6:2e:53:
f0:76:c7:16:8d:60:f4:d3:94:8c:75:ff:e7:90:fd:
2e:30:e7:6e:25:f3:a9:6d:69:81:cb:b4:10:6d:3b:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:23:ED:AF:2B:82:C1:8B:A9:DB:F2:F7:2E:50:CB:DF:AC:27:43:20
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/sSPtryuCwYup2_L3LlDL36wnQyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.36.0/24
37.114.40.0/24
37.114.58.0/24
43.251.160.0/23
Signature Algorithm: sha256WithRSAEncryption
94:60:03:91:e7:92:94:9e:9d:99:50:e7:1f:d9:93:21:ec:c0:
cb:12:37:20:d7:ce:0d:66:ac:7f:f2:cc:4d:cd:e0:a5:e1:a9:
c3:c6:8e:36:9d:f7:37:cb:be:a0:e8:87:0c:53:c3:40:7d:a0:
16:0a:ed:c7:c1:a8:2a:52:6d:fa:a6:94:61:eb:d5:81:ed:bf:
0f:25:dc:38:5f:d5:c4:46:a7:1a:db:b4:07:d4:6d:17:6d:54:
1b:dc:26:8e:17:55:92:f2:cf:14:26:51:37:27:2e:81:43:d1:
e8:8e:a0:b3:85:be:ed:79:0a:6d:ad:08:7f:8a:e8:fc:d9:cd:
cf:c0:3d:0b:76:22:79:43:2d:18:75:9a:53:da:8d:cf:ea:56:
38:7a:6b:2b:42:97:1a:bb:0f:00:e5:40:50:36:1a:50:d5:51:
c1:9d:43:d3:f5:2e:8c:e9:c2:87:c3:1c:bc:00:00:55:6e:6d:
e7:58:74:92:a2:fa:0f:24:8d:86:8b:95:28:80:b9:e5:8a:02:
89:97:ba:f8:7b:5e:ad:31:e8:c6:f8:b8:22:55:26:cb:2d:5a:
31:74:66:3a:4e:2a:87:73:ca:e7:ab:5a:21:38:1a:d3:c7:11:
b5:79:54:89:64:da:fc:07:84:2b:27:b0:0f:c2:34:2c:2d:89:
7c:7a:09:5a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZF0bxVTDOSCsJeyvGqP/JEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjQwODIxMTAxNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTIzZWRhZjJiODJjMThiYTlkYmYyZjcyZTUwY2JkZmFjMjc0MzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE+suEsjTaRm300CvfeAPzb2BqVL
/EfBRBaTeviVBNGT8GMvBpjneUWWk4nFDdwDIPeei2SPAAKtgjpl8JF3tFqfXeYD
0OEWieb8g3OV+HgB6L1qWv/r7xPkWMU+06zHPelFOlF+iqAiA9aWVFgh9kyKR47L
R+gkDRQJL6N3ozMAaM19i1dwe5OHLhAJxUr2WIljlQsuKp0P9p3HOwpfnnps6WEy
6eqHfJkvOHpWTIUf7IqRghN6B9ys2HK9bsySTjkmBw4KOfZZyj13eUC+WjElC2dD
KOFc1lvp5kqmLlPwdscWjWD005SMdf/nkP0uMOduJfOpbWmBy7QQbTtShQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLEj7a8rgsGLqdvy9y5Qy9+sJ0MgMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvc1NQdHJ5dUN3WXVwMl9MM0xsREwzNnduUXlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJXIkAwQA
JXIoAwQAJXI6AwQBK/ugMA0GCSqGSIb3DQEBCwUAA4IBAQCUYAOR55KUnp2ZUOcf
2ZMh7MDLEjcg184NZqx/8sxNzeCl4anDxo42nfc3y76g6IcMU8NAfaAWCu3Hwagq
Um36ppRh69WB7b8PJdw4X9XERqca27QH1G0XbVQb3CaOF1WS8s8UJlE3Jy6BQ9Ho
jqCzhb7teQptrQh/iuj82c3PwD0LdiJ5Qy0YdZpT2o3P6lY4emsrQpcauw8A5UBQ
NhpQ1VHBnUPT9S6M6cKHwxy8AABVbm3nWHSSovoPJI2Gi5UogLnligKJl7r4e16t
MejG+LgiVSbLLVoxdGY6TiqHc8rnq1ohOBrTxxG1eVSJZNr8B4QrJ7APwjQsLYl8
egla
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:57:15 2024 by rpki-client on console-fra.rpki-client.org