Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GYCdur9AWFCuy3hQl1_fNgVCDVM.roa
File: GYCdur9AWFCuy3hQl1_fNgVCDVM.roa (raw, json)
Hash identifier: xbMEVppE1t0HWFjARy//jiZA0zZZ/fbqK+hWenlIdCI=
Subject key identifier: 19:80:9D:BA:BF:40:58:50:AE:CB:78:50:97:5F:DF:36:05:42:0D:53
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019276E32BDFDC7301A7ACA0367D0EC7A8FA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GYCdur9AWFCuy3hQl1_fNgVCDVM.roa
Signing time: Thu 10 Oct 2024 14:44:12 +0000
ROA not before: Thu 10 Oct 2024 14:44:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136557
IP address blocks: 163.5.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:e3:2b:df:dc:73:01:a7:ac:a0:36:7d:0e:c7:a8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 10 14:44:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19809dbabf405850aecb7850975fdf3605420d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:30:42:dd:c7:09:c0:01:25:a8:35:eb:d1:
52:bb:ba:4c:fe:f4:83:01:34:c9:3d:12:07:5c:b0:
52:fd:b9:90:b2:52:9a:fb:b4:a0:af:c2:42:b7:41:
c5:e3:12:df:95:d1:8e:21:16:99:4e:1d:da:9a:c5:
19:56:d4:07:f4:fd:8b:db:9a:f7:ed:a0:fb:1d:86:
ca:a0:63:10:16:3b:89:23:33:df:be:c0:4d:e5:a2:
d5:24:0f:1d:12:2b:0c:c0:73:d4:59:28:f8:5d:25:
6d:c2:05:86:00:a1:5b:83:c1:9f:d4:1c:3f:1b:e4:
d8:b4:59:62:e8:cb:f8:ac:63:7a:aa:c9:f2:67:8d:
74:0e:ad:e3:be:e1:3e:9b:32:1a:d3:78:ac:ca:c0:
07:e0:1d:8d:12:2e:68:fb:eb:be:af:ae:50:80:b8:
58:86:a5:ba:d0:46:62:3b:07:39:8a:30:24:ff:f5:
d5:4d:3d:20:af:46:db:fd:5b:cc:5d:c5:b0:60:cb:
6a:82:e7:4b:ce:74:93:ff:b7:c0:1d:c4:6e:44:24:
04:2e:f5:bc:49:7b:b8:4c:77:5a:e0:f6:36:e9:e7:
27:50:8a:d6:d7:47:51:d1:1e:28:0d:ba:3d:f5:5b:
94:d4:fe:ea:9c:97:ee:a6:61:15:d9:23:7a:77:cc:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:80:9D:BA:BF:40:58:50:AE:CB:78:50:97:5F:DF:36:05:42:0D:53
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GYCdur9AWFCuy3hQl1_fNgVCDVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:90:4b:ce:eb:55:2a:cf:ba:4c:c2:55:c7:52:66:4b:ac:a9:
8a:4a:64:3e:29:a1:c2:c8:95:7d:b6:ad:fd:72:a8:58:b6:ee:
f6:ee:6a:67:5c:8e:31:1e:0a:b2:f0:cc:96:60:89:07:6d:fa:
df:b9:a5:60:4e:71:70:d7:c3:35:a6:8b:68:75:ef:54:43:4f:
06:12:36:0d:dc:9f:82:af:79:29:10:1e:98:d2:82:d3:c0:b1:
33:a5:32:c6:80:e4:f0:9b:00:73:fd:e6:2b:87:a2:54:77:d7:
0d:69:58:2c:10:99:ab:f4:77:9a:05:e3:ee:02:d7:27:34:7d:
2a:2e:46:e8:91:8d:f1:70:05:80:81:10:ab:10:0a:9e:a5:4d:
06:8e:2f:91:a9:48:2b:11:75:f9:8f:69:dc:45:14:65:ea:54:
bf:6d:72:33:cd:2e:07:77:f9:20:ad:16:10:48:cf:eb:ef:ce:
ad:ac:7a:d4:76:25:04:54:71:77:88:a9:96:d5:0a:fa:42:27:
3d:6a:1f:d6:98:43:71:b1:78:19:91:98:2a:d0:50:2e:77:76:
8b:f7:83:14:ea:23:08:c1:a6:18:40:af:b3:1d:f1:c2:39:37:
e0:64:84:e5:f4:03:a2:39:aa:b7:a8:bf:33:d6:ad:cc:98:dc:
60:a6:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:25 2024 by rpki-client on console-ams.rpki-client.org