Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/54XKK0_1dFCyAOBw9DbXkt-VDwg.roa
File: 54XKK0_1dFCyAOBw9DbXkt-VDwg.roa (raw, json)
Hash identifier: JO0LlaEMVqBnCLn/vL9uUqo4iAvULqFlqUuLQQr7Yfk=
Subject key identifier: E7:85:CA:2B:4F:F5:74:50:B2:00:E0:70:F4:36:D7:92:DF:95:0F:08
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 01900B94484C521B2E1B56BB59DA179D01D2
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/54XKK0_1dFCyAOBw9DbXkt-VDwg.roa
Signing time: Wed 12 Jun 2024 08:33:05 +0000
ROA not before: Wed 12 Jun 2024 08:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3169
IP address blocks: 155.133.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:94:48:4c:52:1b:2e:1b:56:bb:59:da:17:9d:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jun 12 08:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e785ca2b4ff57450b200e070f436d792df950f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:77:a1:5a:0c:27:60:fb:a5:ae:77:a8:47:
eb:fc:2a:c2:37:94:e3:7b:fa:cd:19:37:d4:e8:70:
58:14:64:73:48:3b:e5:5a:8f:4b:a9:11:e7:d4:0d:
96:31:0a:62:01:e0:00:4d:7d:d1:19:bf:36:e4:2b:
d8:d9:12:6c:2f:66:51:14:da:d5:5c:3f:05:ec:94:
2d:5e:2d:0f:0e:df:da:f1:4e:30:1e:2e:87:0e:a5:
bd:2c:32:6c:38:54:c5:5b:f6:a9:9e:21:09:1b:50:
3a:8c:6c:7f:a6:a7:42:89:94:b0:90:54:5b:d7:ba:
33:c5:c4:77:67:ab:3a:1a:1f:32:88:8d:24:33:f8:
9d:75:5d:95:2b:40:d4:2b:30:90:29:c8:54:d6:a9:
c4:0d:d0:c9:51:72:a1:7a:fb:f2:2e:22:2a:72:71:
a5:df:b0:b5:58:2d:3d:7a:24:3d:3b:e8:38:18:28:
e3:ff:3b:03:4e:28:59:e9:11:5c:ca:fd:1f:eb:21:
36:fe:fa:4e:14:53:6e:64:ab:13:e4:dd:ec:f3:c3:
48:1c:a6:ad:cc:4f:ed:1b:e4:11:a0:c6:82:a3:7f:
ee:61:f7:f1:18:da:56:e3:1f:60:5c:e5:19:6c:1b:
68:5f:c4:d6:f5:83:e0:75:5c:a9:55:08:f1:83:e3:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:CA:2B:4F:F5:74:50:B2:00:E0:70:F4:36:D7:92:DF:95:0F:08
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/54XKK0_1dFCyAOBw9DbXkt-VDwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.62.0/23
Signature Algorithm: sha256WithRSAEncryption
10:cf:5b:fb:d0:78:a7:51:4f:8d:84:dd:fb:80:49:05:1d:a2:
39:e1:01:34:a1:1a:23:89:e4:b7:13:4f:7d:8a:aa:53:ae:41:
0e:37:20:b6:61:0f:4a:e9:1c:22:14:9f:01:f0:ab:e1:55:78:
07:83:ee:8e:28:ef:46:7c:c8:22:ea:47:f4:dc:ed:c6:0c:68:
e9:77:66:e2:73:c2:80:c5:96:ae:5e:00:c6:1c:d2:07:0b:70:
8f:ce:cc:31:5f:a0:1e:02:e8:d5:3b:ef:a6:fb:16:1b:f2:0c:
83:6c:23:63:3e:d9:04:61:b1:bf:ff:7b:46:b4:18:aa:60:d4:
3d:4c:e4:95:37:c1:b1:70:40:38:2c:6f:38:ce:b8:1a:5d:42:
06:88:41:b8:21:ab:9c:63:dc:e4:ea:6a:c3:12:db:1c:ee:1e:
6e:75:63:2c:c5:16:3b:20:ee:6d:5f:93:85:3f:88:80:fd:54:
c3:93:6b:7f:ec:25:cf:3d:cb:30:e3:40:0b:10:24:b4:9c:c5:
56:10:89:95:7b:7c:92:e2:c0:5d:d9:e4:51:7f:97:44:08:0e:
25:41:f5:95:b8:66:3d:24:63:fb:c1:e1:c3:c0:bd:b9:5f:5d:
44:86:0a:a3:c8:08:be:f3:70:62:16:60:43:e8:a9:fc:eb:5b:
e5:4f:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:21:38 2024 by rpki-client on console-ams.rpki-client.org