Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/ou7kmfNJPTUTO_ZY5p4au0cZuog.roa
File: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (raw, json)
Hash identifier: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=
Subject key identifier: A2:EE:E4:99:F3:49:3D:35:13:3B:F6:58:E6:9E:1A:BB:47:19:BA:88
Certificate issuer: /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial: 019423D7266355587FA30AD2368248995A32
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/ou7kmfNJPTUTO_ZY5p4au0cZuog.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43415
IP address blocks: 176.56.156.0/22 maxlen: 22
176.56.156.0/23 maxlen: 23
176.56.156.0/24 maxlen: 24
176.56.157.0/24 maxlen: 24
176.56.158.0/23 maxlen: 23
176.56.158.0/24 maxlen: 24
176.56.159.0/24 maxlen: 24
185.185.240.0/22 maxlen: 22
185.185.240.0/24 maxlen: 24
185.185.241.0/24 maxlen: 24
185.185.242.0/24 maxlen: 24
185.185.243.0/24 maxlen: 24
2a0e:8300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:26:63:55:58:7f:a3:0a:d2:36:82:48:99:5a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2eee499f3493d35133bf658e69e1abb4719ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:c3:53:3e:d7:85:64:3e:ba:43:0b:2d:81:
d4:7d:1b:f6:06:fe:e2:d7:0c:bf:0d:46:83:d8:15:
d8:64:7a:b4:9f:05:09:e4:e7:6f:3f:c8:b7:f8:06:
6a:d9:3e:73:06:eb:f5:1a:02:05:07:2d:62:58:32:
cb:4d:51:25:63:c2:7b:26:55:82:a6:0d:d0:36:4b:
ca:c7:b5:e4:7c:1f:c1:9b:61:38:26:f4:2d:f9:bc:
88:34:6c:80:cc:f4:27:41:bd:ec:7b:12:95:c9:99:
80:3f:d2:7a:7c:72:33:6d:a2:5b:78:e2:cd:ee:27:
11:12:49:d4:95:a9:0c:2c:db:69:94:d1:c0:ae:83:
c3:ad:a7:d4:83:15:b9:75:87:da:0e:8a:6d:25:cf:
dd:79:26:d0:50:9b:e4:f7:a8:22:b9:f6:92:36:1d:
dc:17:80:8f:e9:a1:9e:af:64:40:f2:ab:62:c8:2e:
11:47:10:88:f0:51:90:00:fc:f8:3c:fc:96:57:29:
84:e4:5d:16:78:d1:3b:23:4e:0d:b6:47:aa:81:eb:
e2:f0:5a:ea:82:25:2c:e4:e1:e1:58:42:fd:74:00:
ae:87:6b:3f:5d:9d:18:18:da:c4:b4:f3:8f:a3:cc:
74:2c:c5:c8:ae:17:76:ed:d6:01:c3:d5:34:b6:38:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EE:E4:99:F3:49:3D:35:13:3B:F6:58:E6:9E:1A:BB:47:19:BA:88
X509v3 Authority Key Identifier:
keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/ou7kmfNJPTUTO_ZY5p4au0cZuog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.156.0/22
185.185.240.0/22
IPv6:
2a0e:8300::/29
Signature Algorithm: sha256WithRSAEncryption
aa:6d:d1:b8:be:ea:6d:b4:ae:1a:51:94:8c:80:25:2a:62:99:
11:a9:3a:e6:fc:75:99:7d:4c:5d:8b:49:ca:a0:0e:fe:ad:ab:
3b:ea:72:02:7d:80:65:25:48:e7:06:45:9a:5e:b8:70:7e:2f:
10:80:ae:62:4d:f7:ec:a0:1f:43:9f:b3:9c:59:34:f6:5c:62:
c2:20:68:81:79:f2:36:be:8a:90:a9:28:6e:52:d7:ad:23:97:
da:f5:a8:57:ce:82:20:e7:30:32:16:9b:67:a8:f8:c4:98:35:
65:d2:bb:c6:32:aa:3c:fe:5e:ca:31:3b:b1:9c:c8:02:07:bc:
45:ff:1f:30:5c:33:fd:f0:07:d4:31:58:5f:20:8e:92:63:58:
ff:94:1e:a5:af:ca:a2:40:fc:76:d3:06:b8:c2:fb:45:4d:c7:
80:2a:bd:72:78:aa:3c:89:c2:54:57:b5:12:ae:9f:fe:d5:cd:
ea:0a:82:26:15:3d:3f:02:87:a4:f8:28:e4:a0:5a:5d:53:85:
12:a0:82:5e:d8:ab:42:45:5e:15:5a:f7:e9:22:be:5d:30:06:
b8:51:1b:f4:e8:22:5d:15:78:1c:3e:0b:4e:a3:92:f9:c4:f7:
d8:93:8e:d3:4f:c0:ca:c3:e1:f0:c3:27:60:e4:94:3f:cb:2c:
d7:b2:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:45 2025 by rpki-client