Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/CAGsaOsw8xFwzyfMzpJrltup8rs.roa
File: CAGsaOsw8xFwzyfMzpJrltup8rs.roa (raw, json)
Hash identifier: wFzGivLfxPWXK5bgGBKoyHpwKFsapu0Y3I5GqgtTeRA=
Subject key identifier: 08:01:AC:68:EB:30:F3:11:70:CF:27:CC:CE:92:6B:96:DB:A9:F2:BB
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC727673345CAB9858DC1BF352A4670B7
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/CAGsaOsw8xFwzyfMzpJrltup8rs.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60869
IP address blocks: 217.153.163.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:67:33:45:ca:b9:85:8d:c1:bf:35:2a:46:70:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0801ac68eb30f31170cf27ccce926b96dba9f2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:56:7f:2a:bf:0e:0b:00:c1:e7:1f:f5:05:
59:62:57:fc:62:1d:39:a2:1c:63:b7:ce:3f:19:67:
3a:06:d1:bf:3d:47:f3:fb:f7:03:4d:0d:e5:48:0c:
02:55:c6:06:33:63:e9:e9:02:ae:70:a2:de:f7:e8:
a9:17:d8:9d:67:d3:3e:3f:44:13:d8:b4:9c:ce:fa:
90:f7:76:b7:cc:58:23:ff:af:7d:09:6d:22:8d:8d:
e6:eb:08:87:22:47:a0:a4:c9:13:35:c8:6d:49:89:
80:f7:73:ca:22:5b:b1:ab:9d:51:12:34:6b:b7:82:
f7:32:05:88:99:25:5a:70:92:48:4e:da:60:1c:ea:
79:09:b0:6a:03:85:e1:88:36:36:47:f4:d7:60:38:
1e:97:30:00:05:a8:a3:82:b3:ca:df:e9:2a:82:0d:
c0:2b:cb:ce:52:a8:ec:e6:e3:24:72:11:a1:cb:f5:
ac:d7:49:ba:18:ac:8e:f8:04:2b:47:13:df:b4:51:
f4:a1:c7:b4:94:df:ed:31:a0:61:1c:e4:34:15:e3:
2f:41:93:75:e2:b1:36:f7:eb:35:92:d1:e8:b1:be:
64:37:c5:26:d8:a1:51:dc:6f:13:bf:5d:26:58:97:
6f:b6:2d:a3:b1:20:82:7b:f8:b6:dc:3d:12:98:e1:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:01:AC:68:EB:30:F3:11:70:CF:27:CC:CE:92:6B:96:DB:A9:F2:BB
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/CAGsaOsw8xFwzyfMzpJrltup8rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.153.163.128/25
Signature Algorithm: sha256WithRSAEncryption
6c:ab:ce:4e:1c:fd:1e:3f:ec:ef:9f:c5:eb:d7:82:e5:8b:99:
53:dc:5e:9d:8a:e1:7b:7c:a0:e4:92:ff:3b:ad:df:f3:b9:ef:
5c:47:f5:87:d4:3f:93:37:c2:76:92:59:9b:07:10:61:07:79:
f8:41:38:d0:98:7e:90:52:2c:96:c3:b1:74:2c:98:25:8c:6e:
85:01:fe:df:0e:9b:80:53:38:8e:9c:45:9c:cc:d3:bf:4d:cc:
6c:1d:0a:8a:c5:58:5d:59:4d:9a:b4:1e:81:50:8e:a9:65:b9:
05:2b:61:59:ef:ab:6c:10:06:2c:06:62:54:94:07:bb:2d:f6:
f1:d8:45:df:29:ac:61:7b:aa:ab:ce:a7:2e:43:fe:64:8b:56:
69:27:e3:cd:18:32:70:4e:77:9a:88:0b:1b:e6:ff:86:c9:2f:
dc:8b:f4:12:75:f2:3b:e4:e1:84:85:13:b6:e5:c3:de:3c:ac:
e1:03:42:67:15:2f:6c:76:04:5d:28:c7:f3:3e:bb:b4:a2:aa:
fe:69:f0:83:9a:4b:ca:fc:6f:f0:a3:33:0f:0d:d2:c3:f0:54:
7b:42:f1:e3:86:f4:c3:31:68:4d:86:60:d7:23:4b:16:4b:07:
7d:9a:2d:93:7f:c2:8c:85:c5:4b:41:d4:38:c9:0c:43:64:c5:
70:41:74:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:08:31 2024 by rpki-client on console-ams.rpki-client.org