Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/tejhqyIYcfJnZD52AowM2BpZATQ.roa
File: tejhqyIYcfJnZD52AowM2BpZATQ.roa (raw, json)
Hash identifier: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=
Subject key identifier: B5:E8:E1:AB:22:18:71:F2:67:64:3E:76:02:8C:0C:D8:1A:59:01:34
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 019421B185D4F4443549B1487FE37E0F2EF6
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/tejhqyIYcfJnZD52AowM2BpZATQ.roa
Signing time: Wed 01 Jan 2025 11:47:49 +0000
ROA not before: Wed 01 Jan 2025 11:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:85:d4:f4:44:35:49:b1:48:7f:e3:7e:0f:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Jan 1 11:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e8e1ab221871f267643e76028c0cd81a590134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a2:b9:8d:a5:6e:cf:d8:2a:f3:7d:70:73:ac:
ad:6e:c8:99:fa:e4:79:6b:a2:da:31:0d:af:27:e1:
83:66:69:25:45:b2:b2:56:71:42:7f:4c:dd:52:aa:
f0:68:d9:18:dc:44:3b:85:94:57:3e:ab:21:74:6b:
a8:7c:5a:ae:19:73:8e:e2:dc:3a:05:7f:d1:86:24:
bc:71:3b:a1:55:57:ba:30:f9:6d:33:96:24:6f:40:
cc:5a:64:69:0a:c7:f2:3a:57:19:a7:27:2d:c8:ea:
f7:e5:73:64:58:23:46:65:5c:9a:23:c2:10:a5:d1:
b4:b3:66:a8:32:74:d5:49:a3:b6:0e:16:cc:51:e7:
55:2a:2c:f7:f3:e9:f1:8b:2e:9d:4c:05:e7:bb:52:
c4:68:b6:15:46:6e:01:67:5b:91:16:2e:81:05:cb:
dc:a7:f7:5a:08:12:c7:f2:56:40:13:c2:a8:2c:01:
41:7a:b3:98:cb:54:c0:8a:1a:ae:9f:24:1a:86:6d:
f0:df:50:be:a8:2c:d5:d8:95:67:70:0f:b0:5e:b5:
74:92:5d:0f:a5:19:5c:db:90:7f:e0:12:88:6b:c6:
57:00:2b:a9:55:e5:1f:e9:91:6e:90:5a:c6:15:06:
1b:de:d2:83:96:eb:f8:3a:03:85:42:e2:9c:54:73:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:E1:AB:22:18:71:F2:67:64:3E:76:02:8C:0C:D8:1A:59:01:34
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/tejhqyIYcfJnZD52AowM2BpZATQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:33:72:0a:98:be:39:03:b6:0e:49:44:b4:ec:e6:61:c9:42:
da:c8:c6:0b:eb:57:bb:19:1a:e3:fb:f7:a9:aa:d0:df:b5:6c:
2f:b7:8d:c7:12:67:0e:b9:7f:24:69:18:bb:01:e3:fa:54:bf:
fa:4f:2f:e0:45:c9:60:29:da:4e:93:a7:a8:9c:69:48:4d:f3:
61:d5:43:6b:47:c2:d0:71:5f:a8:7e:9e:ca:e5:11:87:0c:74:
6a:b2:f5:d1:2f:c5:d7:2d:b9:37:f5:15:fc:6a:d8:ce:62:18:
da:dc:2a:35:cb:68:54:0e:22:e4:f2:17:73:54:f0:f7:71:32:
c1:6d:17:3f:c6:cd:37:f9:d1:27:fc:2e:e1:92:75:cd:81:c8:
f7:a4:9a:6c:50:5b:c1:58:87:6b:46:6d:ea:16:80:31:4f:03:
25:60:7a:95:62:1d:7a:d2:fe:17:18:39:c3:77:f0:af:da:18:
9c:18:ae:7e:8a:8b:82:1d:9f:72:88:38:e6:05:f4:58:4a:0d:
9e:e8:b5:e5:b9:d4:8e:ec:e6:49:73:bf:92:2b:a3:21:f3:2f:
ca:66:3d:b2:c7:b2:52:15:25:1a:54:33:21:16:8e:c4:1b:20:
f9:1e:1d:08:5f:fc:a2:22:2d:21:93:d5:1c:0e:5c:c1:b6:da:
06:60:53:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsYXU9EQ1SbFIf+N+Dy72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy
Njg2YmYwHhcNMjUwMTAxMTE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWU4ZTFhYjIyMTg3MWYyNjc2NDNlNzYwMjhjMGNkODFhNTkwMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqK5jaVuz9gq831wc6ytbsiZ+uR5
a6LaMQ2vJ+GDZmklRbKyVnFCf0zdUqrwaNkY3EQ7hZRXPqshdGuofFquGXOO4tw6
BX/RhiS8cTuhVVe6MPltM5Ykb0DMWmRpCsfyOlcZpyctyOr35XNkWCNGZVyaI8IQ
pdG0s2aoMnTVSaO2DhbMUedVKiz38+nxiy6dTAXnu1LEaLYVRm4BZ1uRFi6BBcvc
p/daCBLH8lZAE8KoLAFBerOYy1TAihqunyQahm3w31C+qCzV2JVncA+wXrV0kl0P
pRlc25B/4BKIa8ZXACupVeUf6ZFukFrGFQYb3tKDluv4OgOFQuKcVHMkTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLXo4asiGHHyZ2Q+dgKMDNgaWQE0MB8GA1UdIwQY
MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt
ODlhOTAyMzI2MWYxLzEvdGVqaHF5SVljZkpuWkQ1MkFvd00yQnBaQVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx
LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmaBMA0G
CSqGSIb3DQEBCwUAA4IBAQCaM3IKmL45A7YOSUS07OZhyULayMYL61e7GRrj+/ep
qtDftWwvt43HEmcOuX8kaRi7AeP6VL/6Ty/gRclgKdpOk6eonGlITfNh1UNrR8LQ
cV+ofp7K5RGHDHRqsvXRL8XXLbk39RX8atjOYhja3Co1y2hUDiLk8hdzVPD3cTLB
bRc/xs03+dEn/C7hknXNgcj3pJpsUFvBWIdrRm3qFoAxTwMlYHqVYh160v4XGDnD
d/Cv2hicGK5+iouCHZ9yiDjmBfRYSg2e6LXludSO7OZJc7+SK6Mh8y/KZj2yx7JS
FSUaVDMhFo7EGyD5Hh0IX/yiIi0hk9UcDlzBttoGYFPF
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:39 2025 by rpki-client