Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/k8-_qCaleGVGBTJ9SnNrva0N-YQ.roa
File: k8-_qCaleGVGBTJ9SnNrva0N-YQ.roa (raw, json)
Hash identifier: Ne390Cep1DU4VVcSq8E2aLfRdsuok+Ddk54CTcdbrYA=
Subject key identifier: 93:CF:BF:A8:26:A5:78:65:46:05:32:7D:4A:73:6B:BD:AD:0D:F9:84
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 018CC6B7F1472DBAE2C5A9D2686BF505939D
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/k8-_qCaleGVGBTJ9SnNrva0N-YQ.roa
Signing time: Mon 01 Jan 2024 20:29:52 +0000
ROA not before: Mon 01 Jan 2024 20:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 37.221.72.0/22 maxlen: 24
2a09:ea00::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f1:47:2d:ba:e2:c5:a9:d2:68:6b:f5:05:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Jan 1 20:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93cfbfa826a578654605327d4a736bbdad0df984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:ff:53:7f:76:27:89:0b:da:f4:a6:e2:8a:
a5:bd:56:e5:42:54:07:b3:ec:1e:3c:ed:7f:55:73:
5a:2a:28:25:29:f8:a1:69:44:7f:15:ad:d1:39:96:
c9:cb:7e:59:34:4b:ce:ed:78:ce:d2:b3:a2:7b:ac:
ad:c1:3d:74:25:c8:14:fd:46:5f:25:83:70:d3:8a:
a5:c0:02:45:14:88:99:47:68:d4:7b:2a:c2:26:f8:
4c:20:8b:de:71:cc:ca:9a:fc:2e:4b:f3:4d:b3:b5:
ed:38:9f:4a:08:29:33:0c:b0:d7:8b:d3:1b:c6:39:
9f:41:b9:02:c7:22:e6:b8:f1:8f:df:e2:ab:99:c9:
34:81:45:64:f7:d9:f7:d1:21:7c:cc:de:f9:14:1e:
22:5d:b4:43:18:dc:2a:f0:75:9b:c5:55:6b:8a:3f:
c4:45:9d:b9:71:93:33:f7:b7:0a:b9:72:08:f3:ba:
c0:0c:41:12:e6:b8:a1:89:46:69:43:d2:8c:2e:c2:
8b:7e:44:c7:b0:56:30:d7:c1:24:3c:67:d1:7b:af:
c8:f2:f6:0e:86:31:3e:99:21:37:7a:03:bd:97:3c:
f7:80:c4:bc:a8:bc:77:61:91:dd:54:02:51:56:38:
16:b1:37:88:8b:cd:40:41:ed:12:8c:0d:45:3c:a5:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CF:BF:A8:26:A5:78:65:46:05:32:7D:4A:73:6B:BD:AD:0D:F9:84
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/k8-_qCaleGVGBTJ9SnNrva0N-YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.72.0/22
IPv6:
2a09:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
61:3f:4d:71:fc:17:22:ac:09:86:61:10:d1:c5:cf:72:9a:64:
f0:b7:86:eb:65:d8:74:9f:dd:fc:42:97:e0:28:b6:7b:e0:b0:
31:56:35:f4:65:36:38:65:de:7f:aa:8c:e6:1a:94:c5:02:7a:
60:7e:92:1a:1a:f8:63:ff:51:09:d8:e7:34:54:bc:9a:0d:6a:
f5:ba:79:a2:d4:18:e9:ff:94:fc:4d:87:c1:f4:b6:42:a9:fc:
72:ec:9a:09:f7:4e:3a:b2:51:55:74:61:2a:ad:a8:e6:b3:88:
cc:aa:a1:c9:9d:cf:02:b7:09:e4:df:10:e3:d4:9b:7e:28:c8:
24:2d:8d:6b:dc:85:0f:b8:66:87:d0:0e:56:3c:57:23:be:1f:
72:fb:68:47:09:cc:35:f4:50:b4:1f:b7:8b:7a:33:79:cc:d5:
5b:a5:b6:ab:75:fb:b9:e0:fc:86:6f:13:e9:a7:b7:a5:ac:7d:
67:b8:3c:40:37:40:0b:ee:27:e3:c1:fe:cd:7b:a7:43:ff:15:
29:22:30:ed:41:54:9c:c1:e8:e1:df:56:2a:06:b8:08:e9:57:
c5:5d:8f:27:3a:af:79:b1:e3:49:89:a0:a1:b9:a1:e3:c1:05:
84:b0:d7:ac:2c:00:a6:59:8a:fb:49:70:48:33:57:35:60:a2:
99:f4:2e:cb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzGt/FHLbrixanSaGv1BZOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz
Yzc1M2MwHhcNMjQwMTAxMjAyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2NmYmZhODI2YTU3ODY1NDYwNTMyN2Q0YTczNmJiZGFkMGRmOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRL/U392J4kL2vSm4oqlvVblQlQH
s+wePO1/VXNaKiglKfihaUR/Fa3ROZbJy35ZNEvO7XjO0rOie6ytwT10JcgU/UZf
JYNw04qlwAJFFIiZR2jUeyrCJvhMIIvecczKmvwuS/NNs7XtOJ9KCCkzDLDXi9Mb
xjmfQbkCxyLmuPGP3+Krmck0gUVk99n30SF8zN75FB4iXbRDGNwq8HWbxVVrij/E
RZ25cZMz97cKuXII87rADEES5rihiUZpQ9KMLsKLfkTHsFYw18EkPGfRe6/I8vYO
hjE+mSE3egO9lzz3gMS8qLx3YZHdVAJRVjgWsTeIi81AQe0SjA1FPKVTtwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFJPPv6gmpXhlRgUyfUpza72tDfmEMB8GA1UdIwQY
MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt
YjE4ZGFjMmQyNTliLzEvazgtX3FDYWxlR1ZHQlRKOVNuTnJ2YTBOLVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli
LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCJd1IMA4E
AgACMAgDBgAqCeoAADANBgkqhkiG9w0BAQsFAAOCAQEAYT9NcfwXIqwJhmEQ0cXP
cppk8LeG62XYdJ/d/EKX4Ci2e+CwMVY19GU2OGXef6qM5hqUxQJ6YH6SGhr4Y/9R
CdjnNFS8mg1q9bp5otQY6f+U/E2HwfS2Qqn8cuyaCfdOOrJRVXRhKq2o5rOIzKqh
yZ3PArcJ5N8Q49SbfijIJC2Na9yFD7hmh9AOVjxXI74fcvtoRwnMNfRQtB+3i3oz
eczVW6W2q3X7ueD8hm8T6ae3pax9Z7g8QDdAC+4n48H+zXunQ/8VKSIw7UFUnMHo
4d9WKga4COlXxV2PJzqvebHjSYmgobmh48EFhLDXrCwAplmK+0lwSDNXNWCimfQu
yw==
-----END CERTIFICATE-----
Generated at Thu May 2 10:37:42 2024 by rpki-client on console-ams.rpki-client.org