Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/te211TKQz2Pk8IALmy95oPDOlAo.roa
File: te211TKQz2Pk8IALmy95oPDOlAo.roa (raw, json)
Hash identifier: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=
Subject key identifier: B5:ED:B5:D5:32:90:CF:63:E4:F0:80:0B:9B:2F:79:A0:F0:CE:94:0A
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01942827FF5ED7E28B6A1059592C381D6903
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/te211TKQz2Pk8IALmy95oPDOlAo.roa
Signing time: Thu 02 Jan 2025 17:54:57 +0000
ROA not before: Thu 02 Jan 2025 17:54:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207235
IP address blocks: 91.107.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ff:5e:d7:e2:8b:6a:10:59:59:2c:38:1d:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 2 17:54:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5edb5d53290cf63e4f0800b9b2f79a0f0ce940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:70:93:fa:bb:a5:43:1e:20:a8:c6:23:b8:
7a:c4:a8:37:f2:9f:cf:5c:16:74:c9:ca:33:67:74:
6a:cf:04:e3:b0:35:ab:73:c7:f1:04:2f:16:db:1b:
fd:af:dd:83:34:ed:97:6d:bd:e6:b9:57:fb:03:e0:
dd:dc:7b:89:bb:12:28:7b:5d:23:85:e3:6d:bb:0a:
0f:df:85:f9:48:f3:6e:21:d3:72:e1:76:db:4d:21:
0f:76:c8:77:33:cc:22:c5:b4:b2:32:d7:cc:74:64:
6d:e5:00:96:4e:56:2d:8c:7f:c6:31:2d:c7:40:2f:
40:79:fa:fc:8c:0b:b0:0b:de:2d:07:fb:f6:0c:1b:
8f:1e:4f:5c:69:26:98:42:f2:96:28:d3:a2:bb:03:
34:a7:46:bc:99:35:c7:61:ce:96:39:b7:64:aa:9b:
e6:c9:c8:c9:c2:ce:d0:41:60:83:81:de:06:73:cb:
3a:e1:d2:5b:34:43:02:4a:ac:c5:1b:40:db:5e:f8:
2b:62:5d:0b:45:f2:db:95:f2:69:34:5a:71:76:56:
36:66:7d:2c:5d:80:c3:7d:3d:cf:f1:b6:90:83:43:
e3:da:da:ed:90:a2:69:d0:fb:29:a9:f5:3b:80:64:
d4:4f:fa:dc:73:00:94:a0:64:71:a3:af:ef:9a:2b:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:B5:D5:32:90:CF:63:E4:F0:80:0B:9B:2F:79:A0:F0:CE:94:0A
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/te211TKQz2Pk8IALmy95oPDOlAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.117.0/24
Signature Algorithm: sha256WithRSAEncryption
83:41:4b:8e:2e:1c:22:35:b8:d2:6a:a1:32:f3:1b:de:de:08:
cd:f4:9d:d0:ca:66:cf:c8:e0:88:22:8c:2b:c4:9a:cd:b9:f3:
b3:53:26:40:35:f7:70:63:d1:ff:b1:41:c4:41:ef:75:e1:34:
e6:e9:46:a5:0f:7d:2b:fd:79:0f:80:79:1c:94:5b:a0:20:2f:
81:66:a3:7b:a1:1f:93:78:1b:10:1b:70:b8:b8:db:ff:68:fb:
bb:fc:64:c9:d3:99:d5:4d:77:61:ca:78:37:32:a1:ef:88:aa:
00:7e:9e:a7:39:7f:e3:f0:9c:47:16:3c:e3:0b:14:3b:d3:8e:
31:80:0a:5c:9c:6d:6f:ef:d1:56:c3:1d:8e:ef:a8:eb:44:64:
bf:04:77:6e:27:89:3f:f7:f2:43:38:dd:7c:73:58:bf:22:4e:
46:c2:17:ed:97:98:fd:31:7c:6a:08:5a:a3:b0:e0:58:e2:35:
d0:8e:7b:ea:1a:b0:0a:37:80:b5:d0:4c:e3:9e:4d:5b:47:3c:
52:ef:06:44:e5:72:a2:6c:5b:07:26:96:7e:a3:2c:dd:1a:c6:
77:ea:1a:7d:8d:79:57:e8:84:1d:6d:63:d1:7f:5c:0f:91:a1:
db:96:89:b9:5f:3d:ca:65:f0:92:e6:ca:de:c1:7a:be:20:7b:
4a:53:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:50 2025 by rpki-client