Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/jTMPeohgGOxcMFZVU8z0ehshce0.roa
File: jTMPeohgGOxcMFZVU8z0ehshce0.roa (raw, json)
Hash identifier: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=
Subject key identifier: 8D:33:0F:7A:88:60:18:EC:5C:30:56:55:53:CC:F4:7A:1B:21:71:ED
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF349716463EAF4442D002994F98A
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/jTMPeohgGOxcMFZVU8z0ehshce0.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43463
IP address blocks: 82.135.156.0/23 maxlen: 23
82.135.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:49:71:64:63:ea:f4:44:2d:00:29:94:f9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d330f7a886018ec5c30565553ccf47a1b2171ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:78:20:68:47:be:72:a1:fa:b0:9b:fd:df:
1c:9f:33:40:68:18:16:49:90:6b:78:a1:c8:52:29:
3b:d5:7f:3c:e7:69:4a:38:42:81:25:51:6c:35:40:
3f:fe:46:38:a8:19:e4:34:cc:50:65:56:5b:d5:58:
ac:82:67:8e:03:14:9a:10:7d:36:5c:18:da:bb:ad:
27:a9:4e:31:fa:6e:8a:69:65:d5:ba:ff:0b:ec:40:
26:ac:39:2c:e8:98:78:40:0b:33:55:01:f3:53:1e:
56:d1:d8:28:1b:c3:0d:24:a8:2d:9f:3d:d4:1a:58:
51:89:13:15:20:32:fc:f5:38:ee:3d:b0:ac:94:d1:
2e:8c:5b:51:37:6f:16:c0:91:1f:20:4b:bf:4f:9f:
ef:ab:af:fb:f3:b5:e0:4e:67:1c:4d:f3:7e:71:c7:
a2:4d:e7:7c:ab:22:b7:4c:7e:2a:18:26:b0:39:15:
dd:da:b5:c7:94:ab:25:92:a0:37:36:b5:0e:e3:15:
df:d0:23:48:8e:35:2c:8f:d4:25:23:99:07:65:62:
2c:56:0f:88:02:4e:8c:17:bd:df:ca:cb:ea:ea:f3:
dd:91:5f:f5:71:3c:f4:1d:fd:86:d2:ee:37:00:e3:
27:3b:bf:cb:fc:6c:0e:5f:ee:13:97:ad:fc:ea:b5:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:0F:7A:88:60:18:EC:5C:30:56:55:53:CC:F4:7A:1B:21:71:ED
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/jTMPeohgGOxcMFZVU8z0ehshce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.135.156.0/23
82.135.228.0/22
Signature Algorithm: sha256WithRSAEncryption
40:c0:c7:81:44:c5:32:e5:cc:38:d5:5f:7f:e3:a1:7c:49:90:
ed:65:a2:32:ef:e5:cd:14:26:4c:8c:ed:08:8c:a0:35:a6:59:
1d:f9:6f:f5:73:10:94:65:37:a5:61:81:28:7b:80:a1:d5:3a:
c2:f4:83:67:75:8f:5c:e1:f3:54:2f:08:da:8e:34:71:c4:d7:
35:68:5a:21:ad:b5:92:2e:11:3f:4c:2c:c7:80:c2:bb:b4:2f:
73:6c:95:fb:26:16:eb:85:6f:e0:b8:52:f6:42:50:d0:30:b0:
58:6d:ed:56:6f:f7:65:6d:55:05:49:62:60:8d:10:fd:ff:83:
1a:7d:c4:87:93:77:3c:4c:57:fe:8c:0c:96:46:35:ba:5a:81:
1e:4a:88:c6:6f:0e:3a:0e:91:52:10:f2:7f:36:14:d9:b2:1c:
e4:8c:5b:4f:d7:37:3d:e8:78:12:f2:c5:af:6e:b9:8f:d6:e2:
d8:22:56:f6:d5:4a:81:78:9d:85:bf:65:da:20:77:d4:79:30:
1b:20:f6:69:28:2c:7e:f8:17:99:58:f1:27:7a:6b:8a:32:56:
6d:4f:52:3b:b1:c7:f0:8f:8b:b5:ce:4f:27:39:83:77:2b:cd:
b6:c6:b3:64:f5:8f:cd:29:ef:1d:9d:e2:d1:91:2e:c0:41:53:
75:79:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:39:58 2025 by rpki-client