Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/54qil-gtsg-VmWMUKBbSoP89Sh4.roa
File: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (raw, json)
Hash identifier: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=
Subject key identifier: E7:8A:A2:97:E8:2D:B2:0F:95:99:63:14:28:16:D2:A0:FF:3D:4A:1E
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 0196AF4C87BE823758E59B0BBE525887B83B
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/54qil-gtsg-VmWMUKBbSoP89Sh4.roa
Signing time: Thu 08 May 2025 09:49:10 +0000
ROA not before: Thu 08 May 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205550
IP address blocks: 193.29.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:4c:87:be:82:37:58:e5:9b:0b:be:52:58:87:b8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: May 8 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e78aa297e82db20f959963142816d2a0ff3d4a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:65:d6:3e:ee:ab:e8:6c:a7:62:33:53:7d:
6a:34:07:71:4f:81:39:17:12:b9:15:ba:01:5c:e4:
6a:a8:2d:f7:59:b1:09:c5:5c:ae:71:82:86:b4:55:
97:5f:7d:d2:1c:75:82:50:10:05:83:0a:5d:18:e6:
e5:46:6f:46:79:3c:ed:38:7c:35:b2:f8:6b:ec:ad:
8b:12:57:90:7d:af:e5:6d:f1:ef:23:43:40:1f:a4:
c1:cd:41:0b:12:54:11:31:f1:c1:0f:6c:42:33:7b:
b7:45:e9:4b:01:d1:d5:f2:0b:72:78:ea:d2:61:b7:
7c:b9:f3:cd:cf:20:c0:b1:22:4b:0b:e8:e6:b7:b2:
bf:75:24:96:aa:79:ac:01:19:a3:b7:fe:fc:d0:a7:
11:d2:e4:84:d7:d9:19:59:72:fe:c9:24:6a:be:26:
26:e1:30:ea:e9:31:67:7f:77:a2:d0:be:4f:fb:d7:
77:4d:9f:f9:9d:dd:c6:30:af:00:66:40:dc:91:bc:
75:e5:71:4f:92:97:34:74:c9:96:0b:4b:2f:44:1b:
68:39:c9:e6:01:f9:6a:ad:bb:f1:34:5c:6d:c7:91:
2d:d2:aa:2a:dc:d4:6a:a4:14:06:76:d3:78:3b:9f:
9d:42:29:b2:b0:78:87:0c:53:2f:a4:d6:f1:79:b3:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:A2:97:E8:2D:B2:0F:95:99:63:14:28:16:D2:A0:FF:3D:4A:1E
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/54qil-gtsg-VmWMUKBbSoP89Sh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.50.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cc:f5:4e:ec:93:5f:db:cb:5c:d5:48:51:63:11:8e:dd:89:
38:0b:ed:a5:53:ed:75:34:01:eb:0e:e3:c1:a5:e5:fa:32:f3:
64:5c:1e:01:fe:33:90:d7:83:5f:0b:cf:34:fb:cd:ef:0f:6b:
ba:6e:3c:c5:78:59:59:f5:f8:cb:88:d0:a3:b3:be:40:64:4a:
70:29:cc:66:66:58:ae:eb:8b:7f:20:2c:30:a7:3c:2a:0c:e6:
87:a9:ed:b9:66:33:c1:1f:31:70:1c:08:a4:e1:22:44:5b:2f:
fa:bc:59:78:2e:83:6f:be:d8:37:ea:94:0b:fe:c2:d9:82:da:
57:69:56:d9:53:d3:56:59:62:1b:26:05:78:80:b5:03:17:c6:
68:2a:5b:ab:c6:b8:81:a7:d3:62:12:8f:16:b2:55:07:bd:7a:
bf:b8:93:32:8d:9d:a8:7d:f8:15:45:94:c2:6c:62:f4:43:db:
fd:68:d7:f4:81:36:83:d1:c1:a0:96:75:1b:fc:6a:9e:b4:08:
d2:50:a4:ff:95:50:34:1b:dd:0a:ae:51:49:f7:36:34:32:51:
11:07:97:2f:28:c2:d2:05:1b:36:65:70:93:58:10:73:cf:d6:
02:fa:a9:8d:f3:27:dd:11:78:af:bc:7a:89:38:fe:d3:5f:76:
0f:62:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:49:19 2025 by rpki-client