Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/GYBtBjzFTOXOycrTeTTfuH5bCiI.roa
File: GYBtBjzFTOXOycrTeTTfuH5bCiI.roa (raw, json)
Hash identifier: mB9e5geLld4q93zB8sAWowhK/VAm4MOzXMOSJJcglQg=
Subject key identifier: 19:80:6D:06:3C:C5:4C:E5:CE:C9:CA:D3:79:34:DF:B8:7E:5B:0A:22
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018F3AA44B8AC98A8DA7C2593C61BC28CB16
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/GYBtBjzFTOXOycrTeTTfuH5bCiI.roa
Signing time: Thu 02 May 2024 18:49:56 +0000
ROA not before: Thu 02 May 2024 18:49:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7922
IP address blocks: 103.130.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:a4:4b:8a:c9:8a:8d:a7:c2:59:3c:61:bc:28:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 2 18:49:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19806d063cc54ce5cec9cad37934dfb87e5b0a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:4b:b8:dc:22:ef:b2:b9:66:8d:47:4d:18:
df:88:2d:93:48:ae:1c:90:22:1c:a7:35:3f:ce:ce:
e3:e7:2f:32:1f:5f:4c:42:83:81:3a:47:f9:90:9d:
30:2b:ab:22:68:a2:1d:20:b2:ca:45:b6:3a:c0:76:
ec:ba:4a:46:6d:2a:83:c7:cd:cf:78:c1:10:82:bc:
ef:7d:ed:46:c5:0d:91:77:b6:43:c4:0f:41:d8:78:
f9:e6:99:8f:63:ca:1c:37:b8:31:a1:aa:f3:c1:33:
41:24:16:2b:6c:72:4f:35:60:37:2d:af:2d:5c:b8:
f0:3a:b7:64:9d:d0:cf:ee:4a:d0:c8:74:bf:7d:52:
fd:a1:d9:ab:56:12:ce:66:89:2d:39:24:cc:91:b6:
af:59:c8:d6:4a:6f:2e:04:9b:6a:43:eb:3f:fe:89:
6f:ca:89:46:a4:f8:8e:55:6c:6c:85:20:e7:9c:b7:
c5:6d:34:57:95:d9:01:04:9c:9e:b1:2d:ff:1a:58:
a0:0f:e7:1b:98:58:4a:7e:e1:55:02:eb:b7:3a:b7:
a1:d7:82:b8:e9:f9:7a:6a:04:a1:f6:cd:f4:6a:8e:
9d:c8:42:2c:21:d0:c7:de:35:38:1e:74:33:84:44:
92:44:0d:f0:7f:ba:67:46:d0:5e:09:bf:d3:97:95:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:80:6D:06:3C:C5:4C:E5:CE:C9:CA:D3:79:34:DF:B8:7E:5B:0A:22
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/GYBtBjzFTOXOycrTeTTfuH5bCiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1d:32:2d:9b:f0:5e:5a:79:2c:bd:06:0b:8f:21:fb:6b:47:
78:dd:b5:53:25:7c:32:aa:b9:7a:3c:33:c4:18:42:60:bc:40:
e3:2d:b2:56:dd:b2:41:47:0f:85:ef:8c:24:ac:f5:86:30:44:
a5:ff:7e:5c:36:a9:c8:37:98:ec:46:0d:4b:d3:c6:19:12:3d:
0d:13:36:1e:db:5c:4a:0f:85:16:d8:01:c7:44:c8:a4:9d:5a:
c1:d5:ce:6e:62:71:e9:cd:ee:3e:2a:88:34:12:92:dc:52:42:
80:c4:10:51:c4:8e:0b:28:4a:49:89:6a:36:f9:31:70:4f:02:
f3:43:3e:d0:54:36:9c:ee:ba:74:1c:50:cf:46:12:81:14:f7:
ae:eb:cd:e2:ec:a2:91:b7:c0:88:88:1c:67:10:0c:b3:35:2a:
d9:00:d0:12:2e:65:c2:8a:56:fe:c0:5f:c3:a2:c8:e8:6a:51:
1b:be:1a:21:0d:46:7b:c1:e1:2c:4e:e6:32:c5:ee:0e:1c:00:
ae:4e:7a:07:18:1b:52:02:41:04:9a:6e:ff:cd:3b:fa:2c:24:
f3:20:b1:39:41:f5:85:80:c6:e7:3d:27:70:c5:12:58:91:7d:
e6:5c:20:81:8c:fa:0f:06:04:bb:ee:be:c0:51:7f:bb:e3:ac:
14:45:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:51:58 2024 by rpki-client on console-ams.rpki-client.org