Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/EUaiMtyAgaHdToIs5OLwzpTZp4Q.roa
File: EUaiMtyAgaHdToIs5OLwzpTZp4Q.roa (raw, json)
Hash identifier: sLU5XJKxFlmt4ejZiXlkYG7KT9QAQEjoymC+klGd+Ds=
Subject key identifier: 11:46:A2:32:DC:80:81:A1:DD:4E:82:2C:E4:E2:F0:CE:94:D9:A7:84
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276323EC5D383F3E38021C030D16B1
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/EUaiMtyAgaHdToIs5OLwzpTZp4Q.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33895
IP address blocks: 217.153.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:63:23:ec:5d:38:3f:3e:38:02:1c:03:0d:16:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1146a232dc8081a1dd4e822ce4e2f0ce94d9a784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:98:73:91:4c:d0:f1:22:a7:53:ce:9c:72:
77:50:72:be:71:69:bc:45:67:d7:7c:55:11:bd:d0:
a5:a9:1c:a9:a3:53:f8:61:9d:20:26:7c:04:c1:4e:
58:be:4a:65:ef:e4:14:52:31:56:d3:d2:53:74:3f:
87:bb:a1:60:53:f1:5e:7c:83:40:28:e0:0f:b5:f9:
bb:77:bd:a9:74:2c:71:57:1b:e5:54:65:ca:e1:84:
39:17:76:b7:e9:96:3f:a1:9a:b8:12:cf:c4:55:1b:
c3:d9:44:23:be:4d:ae:f5:e6:63:19:ec:c9:df:1a:
0a:2e:46:6e:1e:a8:f4:d8:14:b7:9b:f8:04:9a:5b:
99:48:0e:35:2d:46:8e:dd:20:d0:5f:e9:97:d1:74:
19:24:c8:50:6d:9e:b6:e2:cb:d9:24:b8:0d:da:0d:
a4:c9:7c:88:f8:0c:ca:6e:8e:5b:34:4e:42:03:43:
d9:a4:7a:02:ba:37:a6:f7:99:f3:8b:bd:08:14:2b:
b0:29:d3:31:96:86:d0:50:f9:52:1a:2f:ae:5b:ec:
5b:49:37:0a:e9:5a:7b:ed:c8:07:8b:9b:89:3a:3e:
c4:73:62:e6:2b:d3:13:20:3d:f9:55:18:d4:5c:ed:
0a:ad:bc:14:45:12:a4:9f:a0:40:1b:f6:70:a2:63:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:A2:32:DC:80:81:A1:DD:4E:82:2C:E4:E2:F0:CE:94:D9:A7:84
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/EUaiMtyAgaHdToIs5OLwzpTZp4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.153.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6e:20:7d:2a:00:a2:42:9c:db:a8:f1:40:aa:3a:92:89:28:
ca:c1:86:56:4b:98:bd:f7:2b:1e:9a:be:68:8d:5e:a3:20:0f:
47:11:28:4a:01:4f:26:60:94:09:26:6c:f4:35:8b:aa:04:38:
27:e5:f2:9c:e7:29:75:81:a4:93:a9:2b:f4:03:1c:1e:33:fd:
50:5d:a8:a6:4c:da:09:3d:6f:3c:b8:f1:d5:f8:84:ed:c2:3a:
05:e4:74:8f:5d:ba:b0:a2:4b:74:4a:21:da:1b:7d:e9:89:b3:
d5:24:43:b5:f4:c7:dd:50:f9:70:51:e7:49:9f:a4:a5:92:e6:
0a:62:4f:0c:2e:31:83:69:f5:cc:d0:52:1a:3d:0a:31:40:45:
5c:57:42:6c:2f:17:25:53:98:74:91:07:21:94:a3:ed:33:b5:
60:cb:bc:26:b7:01:d1:fb:39:ae:64:d9:63:eb:bf:d9:a6:66:
5a:3a:a1:29:41:f7:cb:15:cd:a7:46:c1:56:9a:62:19:0a:6c:
1e:87:cf:30:bd:1e:bb:ec:1b:65:9a:36:b3:f0:01:70:f9:1f:
ff:e4:91:57:66:d4:23:b1:a8:f0:c0:49:e7:90:6b:2a:1a:b6:
b6:c0:59:ea:f1:bb:aa:eb:2d:1a:52:a3:5a:42:f6:93:db:03:
98:99:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:08:31 2024 by rpki-client on console-ams.rpki-client.org