Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/VHz0HM9yTMHCigSFC6UoCWeqS7w.roa
File: VHz0HM9yTMHCigSFC6UoCWeqS7w.roa (raw, json)
Hash identifier: LlNqUNkS8DsUAPhNolyj6JyBswE5/PLHEJa+HxSBnbM=
Subject key identifier: 54:7C:F4:1C:CF:72:4C:C1:C2:8A:04:85:0B:A5:28:09:67:AA:4B:BC
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 018CC50097B80C0D6358A1D6EEEF57599787
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/VHz0HM9yTMHCigSFC6UoCWeqS7w.roa
Signing time: Mon 01 Jan 2024 12:29:59 +0000
ROA not before: Mon 01 Jan 2024 12:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.54.124.0/24 maxlen: 24
185.54.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:97:b8:0c:0d:63:58:a1:d6:ee:ef:57:59:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Jan 1 12:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=547cf41ccf724cc1c28a04850ba5280967aa4bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ef:38:5a:6d:56:47:b9:ab:f0:09:23:9d:9d:
2d:07:55:b1:e5:2a:14:3f:a1:bb:f9:5c:0b:47:d7:
48:04:68:e2:ca:3d:13:7a:a6:26:03:06:66:26:f0:
7d:bf:75:d8:0c:a1:14:e5:7c:11:f3:e8:08:13:49:
18:71:53:3b:9e:47:5f:d5:a4:03:b8:95:20:70:0d:
01:39:61:0c:f7:b4:a7:c2:2f:ee:5c:b9:23:8f:a9:
05:0e:1f:e5:d3:f6:f0:72:d2:e6:0d:75:7d:ae:a3:
5f:e8:f9:fb:1a:d6:c1:74:28:4e:2f:03:a7:b0:1d:
b6:62:e4:63:06:cd:75:19:75:85:a7:60:77:84:6f:
76:5c:53:41:c3:38:d7:55:91:5b:ca:92:91:63:e1:
99:4d:21:d1:d3:67:90:57:8a:c1:5b:fd:d9:de:6d:
d7:06:3e:b1:02:da:c9:6f:62:d4:56:74:12:4b:27:
5d:31:a6:af:98:4e:a0:9a:7d:67:d8:3e:20:55:04:
5c:7e:b0:49:98:16:b4:63:13:95:d1:48:91:c9:21:
0c:2d:1e:ba:62:d7:3c:5e:d2:c7:8d:83:2f:d4:b6:
ae:82:b1:01:cc:6f:ec:5f:22:d0:ec:1f:f7:46:bf:
ef:bd:fd:08:26:1c:d3:b0:bb:18:04:83:6e:9b:f5:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:F4:1C:CF:72:4C:C1:C2:8A:04:85:0B:A5:28:09:67:AA:4B:BC
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/VHz0HM9yTMHCigSFC6UoCWeqS7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.124.0/24
185.54.126.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5a:83:87:ec:88:44:03:26:97:21:2a:77:bd:3b:c6:dc:88:
08:c2:91:e5:07:a4:ff:b8:ce:b9:da:bb:58:d1:e5:39:d0:77:
14:ba:56:c3:f6:ef:56:f0:0c:68:4e:d4:34:83:c5:72:db:21:
fa:18:f8:d6:83:65:f6:a8:09:9d:ed:23:c4:71:03:ca:16:31:
68:86:ce:c7:bb:00:ab:ca:3c:73:6a:a7:f3:9f:28:b5:20:bc:
c5:cd:d1:3c:99:71:85:eb:7d:53:3c:c2:f9:9a:f9:ad:c2:86:
98:43:34:13:38:80:9c:91:61:d7:c8:5d:48:fd:b3:80:2c:0b:
e2:f3:7d:d4:cc:08:ff:cf:e2:e2:ca:bc:21:3c:f0:13:fb:60:
b7:1e:ba:94:94:2f:63:15:a4:7e:62:de:f9:a6:9c:51:4c:55:
42:04:88:63:1e:17:70:62:6b:b7:99:93:2a:89:cb:d6:fc:87:
91:62:fe:37:79:48:b4:44:d2:cd:5a:35:e9:f4:5c:96:62:e5:
94:78:5a:90:6f:6a:42:eb:00:38:b6:5a:8f:a5:34:17:47:97:
78:20:75:0e:04:6a:39:86:d1:5b:3e:42:42:18:4d:a3:cc:3d:
d2:91:bd:a0:ff:db:3a:89:7d:a3:84:fc:f1:c2:f2:9f:75:55:
d8:f7:ae:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:35:50 2024 by rpki-client on console-ams.rpki-client.org