Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Teosu_VmUhV-ed4PcbsgalN1OVU.roa
File: Teosu_VmUhV-ed4PcbsgalN1OVU.roa (raw, json)
Hash identifier: xCW6vtY1xxYG86AossHPil2laPcRAHDwMs5m4fFWFj4=
Subject key identifier: 4D:EA:2C:BB:F5:66:52:15:7E:79:DE:0F:71:BB:20:6A:53:75:39:55
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D1B1ABF7479C5054C20EBD05AEE0
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Teosu_VmUhV-ed4PcbsgalN1OVU.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206134
IP address blocks: 46.8.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d1:b1:ab:f7:47:9c:50:54:c2:0e:bd:05:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dea2cbbf56652157e79de0f71bb206a53753955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:b9:94:aa:08:d7:48:8a:47:4c:ff:f0:a2:
42:7e:eb:ed:7f:d8:36:4a:e1:d6:b3:25:18:fe:58:
35:a3:cf:99:9f:77:ea:9b:00:b6:af:be:f5:86:cb:
8e:27:84:9f:d8:72:b7:55:8c:fa:f4:a8:e6:a3:a9:
c1:f6:7f:f8:4c:07:49:43:39:80:f1:6c:11:9b:49:
45:c8:58:48:0c:d6:5e:37:e1:15:e9:f8:f5:73:83:
d7:36:a6:0d:f8:36:38:6a:21:11:0b:1e:bf:1f:17:
35:16:2e:81:68:a6:8b:e7:c6:76:2b:b7:9f:e1:61:
6e:e0:04:58:39:07:0e:4d:fc:ad:dd:ad:35:04:2e:
c2:80:a2:6d:75:49:e0:8e:ee:58:8b:dc:f7:82:e4:
a7:4c:d0:1e:75:11:17:1f:a1:b0:3f:55:43:a8:5f:
ac:89:53:98:3b:03:c5:7d:82:43:b3:cd:88:9c:4c:
8d:24:40:1a:42:da:ae:b4:21:0f:f1:46:96:51:df:
e3:75:09:62:a9:1a:42:aa:32:a8:ad:9f:e2:6e:58:
b5:1d:73:86:84:95:9f:8c:5d:b0:62:37:cc:5a:48:
13:26:32:e0:0c:4b:1e:b1:78:32:cc:4d:b3:db:36:
6b:11:10:7d:13:3c:b3:74:50:61:1e:4b:ab:f1:0a:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:2C:BB:F5:66:52:15:7E:79:DE:0F:71:BB:20:6A:53:75:39:55
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Teosu_VmUhV-ed4PcbsgalN1OVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3b:bd:f4:2f:16:d3:b1:37:72:2b:f5:06:a3:8f:5f:45:44:
78:37:f2:28:63:af:db:ac:0b:62:63:19:6a:35:1a:48:d1:b8:
e8:4d:6f:6a:b1:bb:00:37:5d:db:c2:b0:9c:b1:aa:c8:66:73:
5c:15:b4:e2:6f:20:b3:ba:e2:d0:76:ba:66:c8:42:aa:ac:41:
08:8a:91:46:c8:3a:01:d3:83:1a:96:a5:b9:c6:a8:8f:bb:a2:
b3:46:93:77:ac:3e:71:44:a0:32:26:39:fe:17:ca:de:c0:cf:
a7:90:bf:ed:cc:6d:d6:88:2a:aa:66:68:06:d3:7a:17:5e:08:
5d:6d:8d:0e:9a:e4:0f:79:5f:7b:0c:c4:50:dc:75:83:11:01:
44:22:12:62:2a:0f:9d:fb:eb:bd:79:05:87:46:66:60:18:10:
d7:5c:07:1d:04:b3:12:60:a0:bc:30:a4:b5:c1:3c:82:df:e1:
22:38:5c:76:dd:12:e4:d5:36:02:2e:3d:d0:d1:ff:30:d2:ce:
46:f8:32:6c:e8:cb:0c:bf:cc:67:de:c7:d9:c1:00:1a:d1:86:
bc:63:5d:5d:d0:e0:a1:1b:cb:12:5d:5f:b3:b6:fe:36:82:3d:
48:12:81:2a:42:e7:61:06:3c:27:3c:f9:24:90:2d:14:b6:bc:
d9:8f:ce:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR9Gxq/dHnFBUwg69Ba7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGVhMmNiYmY1NjY1MjE1N2U3OWRlMGY3MWJiMjA2YTUzNzUzOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm25lKoI10iKR0z/8KJCfuvtf9g2
SuHWsyUY/lg1o8+Zn3fqmwC2r771hsuOJ4Sf2HK3VYz69Kjmo6nB9n/4TAdJQzmA
8WwRm0lFyFhIDNZeN+EV6fj1c4PXNqYN+DY4aiERCx6/Hxc1Fi6BaKaL58Z2K7ef
4WFu4ARYOQcOTfyt3a01BC7CgKJtdUngju5Yi9z3guSnTNAedREXH6GwP1VDqF+s
iVOYOwPFfYJDs82InEyNJEAaQtqutCEP8UaWUd/jdQliqRpCqjKorZ/ibli1HXOG
hJWfjF2wYjfMWkgTJjLgDEsesXgyzE2z2zZrERB9EzyzdFBhHkur8QrBnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3qLLv1ZlIVfnneD3G7IGpTdTlVMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvVGVvc3VfVm1VaFYtZWQ0UGNic2dhbE4xT1ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgj+MA0G
CSqGSIb3DQEBCwUAA4IBAQB8O730LxbTsTdyK/UGo49fRUR4N/IoY6/brAtiYxlq
NRpI0bjoTW9qsbsAN13bwrCcsarIZnNcFbTibyCzuuLQdrpmyEKqrEEIipFGyDoB
04MalqW5xqiPu6KzRpN3rD5xRKAyJjn+F8rewM+nkL/tzG3WiCqqZmgG03oXXghd
bY0OmuQPeV97DMRQ3HWDEQFEIhJiKg+d++u9eQWHRmZgGBDXXAcdBLMSYKC8MKS1
wTyC3+EiOFx23RLk1TYCLj3Q0f8w0s5G+DJs6MsMv8xn3sfZwQAa0Ya8Y11d0OCh
G8sSXV+ztv42gj1IEoEqQudhBjwnPPkkkC0UtrzZj87F
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:41 2025 by rpki-client