Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/KygMgCHcEpkSAg_crkp4ls9iuFc.roa
File: KygMgCHcEpkSAg_crkp4ls9iuFc.roa (raw, json)
Hash identifier: mu3mmJafU4/HwovE9xXT9qGYJXzHvMJ7aYnSklkm7zk=
Subject key identifier: 2B:28:0C:80:21:DC:12:99:12:02:0F:DC:AE:4A:78:96:CF:62:B8:57
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC72767BE98863E33440D55F2B8B7CFB2
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/KygMgCHcEpkSAg_crkp4ls9iuFc.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197600
IP address blocks: 157.25.123.0/24 maxlen: 24
85.219.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:67:be:98:86:3e:33:44:0d:55:f2:b8:b7:cf:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b280c8021dc129912020fdcae4a7896cf62b857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:53:23:95:5a:1d:5c:eb:d5:93:53:6c:0a:
6c:3e:fb:92:86:a5:79:f0:5b:5e:45:6a:a1:30:60:
6e:18:af:c1:00:5c:b1:61:71:b0:f2:02:a0:52:e7:
13:1f:01:be:9a:ac:70:05:a2:da:d5:cd:f8:ff:68:
db:25:c3:72:01:fb:64:ca:a5:00:ec:e6:c2:c8:77:
5d:b6:ef:67:a8:d4:eb:7e:e6:31:b5:e2:aa:e0:6e:
37:5b:2e:47:e4:39:ce:e8:54:b4:04:41:a2:38:21:
d6:0f:3e:6b:a9:4e:10:de:9b:d3:ab:4c:1c:a4:5b:
f5:ac:59:e1:b6:c7:a3:0a:0a:83:26:98:86:9b:49:
1f:91:e3:b0:eb:4f:b7:99:63:4d:a0:d0:d5:92:81:
20:26:b7:70:6d:48:11:f0:e2:e4:83:88:51:33:2a:
69:3d:db:9c:f7:37:78:03:f3:fc:2f:01:89:93:0a:
c9:e9:a0:a3:da:04:1c:f6:6d:ba:65:ac:50:38:99:
5d:ed:58:e9:63:52:d9:b4:18:b0:35:88:e5:d5:10:
f9:d1:b1:30:99:51:fe:60:5e:35:e5:83:a5:7d:58:
5c:3f:bd:3f:39:15:09:6d:2c:a5:0b:67:d8:61:e7:
1f:b6:06:f3:36:bd:7c:c2:01:67:cc:da:30:97:31:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:0C:80:21:DC:12:99:12:02:0F:DC:AE:4A:78:96:CF:62:B8:57
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/KygMgCHcEpkSAg_crkp4ls9iuFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.142.0/24
157.25.123.0/24
Signature Algorithm: sha256WithRSAEncryption
55:94:cf:aa:8c:81:ba:83:d8:8b:eb:f8:3b:72:13:b6:11:71:
23:9d:de:42:fe:24:00:08:b4:0a:38:eb:78:5d:b5:4a:55:00:
c9:a2:62:82:4d:79:18:c8:09:ad:f6:48:c8:c7:04:8d:b7:45:
16:3b:c7:eb:d6:37:ca:8d:b4:aa:49:d2:9f:a2:4e:a8:f1:9f:
5a:e0:4b:d8:0c:8b:cf:8f:0f:15:93:1e:c4:50:97:ed:99:c6:
4d:c1:0a:fb:73:9b:86:5f:29:33:d7:b0:a8:d7:b3:e7:b3:18:
27:58:32:5b:6c:79:10:7e:3e:62:4d:f9:0b:e9:56:be:a3:4e:
8c:bb:3b:9f:cb:1c:68:7f:e9:aa:e8:49:20:96:91:3e:45:90:
e7:04:65:a3:19:9b:bf:ad:5b:dd:d8:fe:70:c6:0e:79:38:a6:
a9:d7:f3:43:73:ae:9a:5c:e8:d9:c3:05:68:e6:77:df:ca:da:
77:e1:71:04:dd:16:f4:b0:cd:d9:c9:f1:32:83:41:39:e9:aa:
77:f5:db:a4:49:6e:81:09:99:b7:45:91:3b:47:a8:85:f2:f8:
2a:76:a2:ab:b2:0b:43:8f:98:b9:42:6a:54:e1:2a:34:bc:55:
0d:18:b1:d9:09:05:33:49:b8:c6:9e:44:e9:b3:d6:0d:d1:2b:
9e:7d:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:43:58 2024 by rpki-client on console-ams.rpki-client.org