Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/PfdeupmmKQ_cfAYYgRHnKLdOLsE.roa
File: PfdeupmmKQ_cfAYYgRHnKLdOLsE.roa (raw, json)
Hash identifier: KORTmSK16kj5G/nFrBwLA6aHfGD2F7A5Ud3Mjsm/zSI=
Subject key identifier: 3D:F7:5E:BA:99:A6:29:0F:DC:7C:06:18:81:11:E7:28:B7:4E:2E:C1
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018F3AA44B3FC75CADA49A54EEC7F3D1CF86
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/PfdeupmmKQ_cfAYYgRHnKLdOLsE.roa
Signing time: Thu 02 May 2024 18:49:56 +0000
ROA not before: Thu 02 May 2024 18:49:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7015
IP address blocks: 31.132.53.0/24 maxlen: 24
103.130.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:a4:4b:3f:c7:5c:ad:a4:9a:54:ee:c7:f3:d1:cf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 2 18:49:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3df75eba99a6290fdc7c06188111e728b74e2ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:fe:fd:ed:ee:9a:ad:32:c8:c9:76:e9:8d:
04:1d:fb:7e:b6:bf:75:09:5b:f1:0d:74:f0:34:76:
97:3f:5c:22:36:db:10:d9:24:97:bf:1a:61:d0:86:
f3:76:2a:3d:12:14:09:b7:1b:45:16:27:7e:63:e5:
26:e1:53:12:74:4d:eb:11:49:34:a1:c0:3e:99:1e:
f4:1c:21:a5:55:91:99:b6:df:d3:04:86:33:fd:0d:
07:61:85:a6:74:73:92:12:aa:ab:14:cf:a8:c9:ea:
4a:b5:7e:45:13:3c:96:a8:c9:a5:18:5e:58:20:09:
a9:cd:f1:96:8f:26:6d:a3:72:c6:b0:b9:43:9f:ce:
d2:57:8c:ea:31:96:6a:1e:a1:69:eb:55:a0:f7:78:
c4:6c:b1:74:b3:03:db:9b:11:72:56:c4:9a:08:da:
fd:b0:23:72:4e:c9:d9:59:3a:92:60:27:0d:6b:df:
1e:c4:82:35:bf:84:ae:a0:c9:cc:2a:a7:0c:f4:77:
3c:92:b2:f6:f4:52:1d:26:56:4f:f8:c3:49:b3:20:
dd:3a:47:75:f8:5c:e0:89:86:26:d9:95:39:1a:8c:
00:ce:3a:c7:2f:c7:36:f2:04:bd:5d:b1:4d:42:b5:
2d:9f:97:c2:1d:ba:8a:fb:06:9e:41:f6:13:1e:54:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:5E:BA:99:A6:29:0F:DC:7C:06:18:81:11:E7:28:B7:4E:2E:C1
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/PfdeupmmKQ_cfAYYgRHnKLdOLsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.53.0/24
103.130.178.0/24
Signature Algorithm: sha256WithRSAEncryption
86:97:9c:4d:a5:7d:b0:f9:c3:ce:c9:6e:6b:61:df:ae:2e:8e:
77:bb:f4:b4:b1:ab:19:cd:b2:1a:a0:ad:c7:2f:59:af:e6:9f:
eb:92:12:66:b5:c2:ee:a9:91:f7:f1:d5:86:10:94:e4:8c:fd:
c5:09:d0:90:47:91:bb:b9:17:ab:89:1a:2c:43:e8:1d:13:68:
c9:4d:06:bb:3d:40:0d:56:28:3a:a3:8c:e0:04:f1:3e:ac:6e:
c2:92:00:0a:ad:68:27:48:6a:64:a3:39:89:83:05:90:52:a8:
a5:86:2c:01:eb:9e:f7:76:fa:4a:b7:1b:fd:70:47:96:8d:2e:
d6:81:0a:40:f4:a8:68:a2:2f:96:8d:a9:7e:7c:6d:68:4f:2a:
f1:57:05:60:33:b3:e3:68:93:11:fc:0b:13:c3:77:28:0a:cb:
98:59:bc:47:ab:08:03:19:78:26:9f:9d:02:89:2f:bf:95:4e:
90:f7:19:8d:0b:77:00:93:02:03:c3:12:6f:6f:6d:9d:39:bc:
5b:34:f7:2f:80:01:69:4e:81:5a:43:63:3a:07:33:b1:2a:1e:
74:83:5c:bd:45:af:59:ca:1d:68:4a:a3:b7:e7:01:91:54:18:
0d:05:7d:3d:62:4f:d6:94:85:12:b5:36:21:e7:59:c1:c0:fd:
55:15:05:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:15:30 2024 by rpki-client on console-fra.rpki-client.org