Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VIRx2RZraZhN0wLCh4HNpBQc_x0.roa
File: VIRx2RZraZhN0wLCh4HNpBQc_x0.roa (raw, json)
Hash identifier: RIz5g4dDNZ6yPswFJbLj7hb6zWv68NsEwyw7u12NSi0=
Subject key identifier: 54:84:71:D9:16:6B:69:98:4D:D3:02:C2:87:81:CD:A4:14:1C:FF:1D
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018F6C7B1589EF6F78A8A5883AD4F89562C9
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VIRx2RZraZhN0wLCh4HNpBQc_x0.roa
Signing time: Sun 12 May 2024 11:05:56 +0000
ROA not before: Sun 12 May 2024 11:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152672
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6c:7b:15:89:ef:6f:78:a8:a5:88:3a:d4:f8:95:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 12 11:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=548471d9166b69984dd302c28781cda4141cff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:db:b1:d6:c0:d9:1f:e1:45:f5:3b:b0:3f:
ca:77:e3:86:d1:b4:5f:38:71:11:50:4d:f8:ab:81:
02:a8:2e:8c:92:80:f6:47:01:d5:e1:21:29:4e:18:
df:4c:26:78:24:30:13:8f:0c:71:98:c7:9d:60:c7:
b1:42:1a:40:35:a4:83:31:ac:6f:9a:49:94:f3:cd:
c4:22:9e:df:ff:58:dc:d7:65:e4:b0:2f:52:2f:3a:
fe:00:db:ed:a7:fb:4e:69:16:88:8a:ba:e5:af:b5:
d5:5d:4b:97:20:fa:11:7f:76:9b:9a:45:15:db:0d:
7c:af:b5:a2:88:22:3b:e5:70:a4:29:55:e9:f6:79:
10:ee:ab:60:2a:27:1c:d8:28:b1:96:ee:47:07:17:
97:b4:7c:3c:c1:2d:85:eb:ae:25:bf:58:6a:c8:a3:
4d:d9:a6:8c:ba:be:4e:a5:f1:58:de:10:fb:df:3e:
42:b1:5c:df:85:05:f9:4a:10:9d:ad:5c:54:32:f4:
18:c7:c4:b0:08:84:da:71:9e:00:b6:ac:28:b8:0c:
2a:22:41:43:dd:f8:7e:02:89:37:9e:c0:e4:4c:24:
6f:cf:f7:12:03:c5:eb:bc:a0:e3:6f:2c:3c:ac:b2:
77:d4:cd:3a:24:d9:34:4a:be:be:b2:df:fa:27:d2:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:84:71:D9:16:6B:69:98:4D:D3:02:C2:87:81:CD:A4:14:1C:FF:1D
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VIRx2RZraZhN0wLCh4HNpBQc_x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
00:ee:f4:bf:ab:86:2e:00:de:7e:65:44:4f:83:42:38:06:8d:
b9:00:25:57:da:17:1a:92:ed:11:b7:ab:04:c5:8b:ea:85:83:
66:22:d1:6a:b4:de:1f:a2:17:bd:af:a1:89:ec:22:11:a7:fb:
fc:be:b7:e2:3a:ba:a5:f7:0e:24:2c:8d:c5:a7:56:c0:7b:8e:
a7:d1:d1:0f:3a:69:41:ff:7b:10:eb:47:ab:b5:ad:2f:61:15:
c0:45:1d:57:28:9b:09:4f:d0:ff:fe:c7:c5:f8:bb:6a:a4:46:
f7:ef:ba:72:ca:25:45:ae:bd:a5:ff:33:75:d4:a7:11:12:f4:
05:16:02:be:db:e2:bd:f6:b7:a7:c3:2b:16:fb:4a:af:33:d0:
7d:f8:44:8a:23:c9:dd:bb:36:fe:43:f1:ec:19:c8:bf:cd:63:
14:28:59:e4:61:6a:ef:70:98:6d:35:25:51:35:30:4d:ef:6a:
c8:a8:86:94:90:bb:09:5f:53:48:68:d9:75:b6:da:83:04:f9:
fb:f1:59:3b:0d:5b:a7:46:01:7d:98:db:44:20:79:9c:9f:aa:
37:a4:66:9a:60:93:7e:6a:76:3d:4c:db:f7:97:e7:39:9d:bf:
ff:b3:e1:6c:01:96:2a:35:20:9e:1c:1e:4b:ee:9b:9b:5e:d4:
95:a2:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:31:23 2024 by rpki-client on console-ams.rpki-client.org