Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/teZ2j_hniWXjQJK5Wyibz3szGe4.roa
File: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (raw, json)
Hash identifier: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=
Subject key identifier: B5:E6:76:8F:F8:67:89:65:E3:40:92:B9:5B:28:9B:CF:7B:33:19:EE
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 0194274836BD38B0548879F6C23EE5AE0CA6
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/teZ2j_hniWXjQJK5Wyibz3szGe4.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272344
IP address blocks: 185.56.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:36:bd:38:b0:54:88:79:f6:c2:3e:e5:ae:0c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e6768ff8678965e34092b95b289bcf7b3319ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:7f:a9:1f:54:97:95:14:9c:6d:7f:68:24:
92:82:87:3b:a4:e6:0b:7d:56:65:c0:7a:27:1c:b4:
a0:ae:e6:77:68:e1:75:da:2e:09:fc:c0:54:5a:ff:
60:94:16:d9:b2:7b:de:c1:61:3e:da:ae:a1:bf:35:
73:4b:5d:f4:ac:5e:93:88:f4:85:bb:69:cf:eb:64:
5b:d7:28:7e:62:d8:d1:60:23:19:48:12:25:7d:55:
c1:76:31:b8:2e:0a:a8:b5:8a:d4:3c:f5:e4:75:5b:
f1:c1:de:ef:b7:7a:b4:03:43:c5:53:af:36:a6:a7:
fa:c8:70:3d:a0:36:82:ea:6f:fe:2e:4f:aa:0c:73:
5a:3e:03:80:7f:40:7d:17:f7:ad:80:63:17:f1:19:
ca:6f:42:df:27:08:e8:29:c6:d7:c3:9b:16:78:67:
d0:2d:60:55:49:6f:8b:81:27:48:03:6d:ed:8d:45:
9a:1a:5f:34:a9:85:57:7b:60:4f:b6:10:d8:92:ed:
09:01:2a:c8:df:66:b6:38:4d:51:a5:90:4c:01:c5:
7b:e0:d0:df:44:e5:5a:fe:6d:66:93:e4:60:33:cb:
3c:e9:de:4c:c7:cc:2f:ac:83:82:34:9b:5d:82:44:
be:73:35:d7:2d:b7:a4:8c:14:73:99:0e:80:3b:6e:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:76:8F:F8:67:89:65:E3:40:92:B9:5B:28:9B:CF:7B:33:19:EE
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/teZ2j_hniWXjQJK5Wyibz3szGe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:72:c4:f2:6f:04:cc:82:d0:9f:f7:bc:cd:82:d4:d6:64:76:
7c:b6:3e:be:a2:12:83:85:8a:7f:57:88:5e:19:93:ea:d0:95:
e3:2b:ab:07:53:9f:12:f5:be:70:d6:29:e3:6b:84:4a:e9:ca:
b1:66:7c:c2:76:73:19:25:3c:72:1e:2c:56:66:31:ed:d9:7e:
6c:93:68:f1:df:c8:9f:8c:2f:91:7b:70:bd:09:9d:9a:f8:19:
90:e7:c8:2b:7d:c0:cf:f6:5b:ed:19:97:00:b4:9b:d3:94:77:
43:b7:1e:4b:d0:cf:95:c6:8e:5f:4b:e7:4f:56:bb:19:24:6f:
5e:c9:65:24:46:49:fb:ea:08:5a:c1:56:5d:da:1a:93:6e:43:
fd:cf:e7:da:ff:69:5b:d7:62:96:92:e5:d0:01:b2:e4:aa:2d:
58:83:b8:d5:30:4e:89:7c:2f:31:ab:6d:a2:ba:11:1a:29:9d:
b0:da:9f:0b:f3:19:81:bc:5b:1c:0f:ca:94:c9:f4:83:b4:f9:
f5:93:06:7d:51:99:b4:b1:24:14:f3:24:58:12:33:59:d5:83:
bb:f9:fe:5b:b4:0a:b0:1b:1d:50:39:7f:8f:60:58:be:8c:fd:
09:6d:4e:38:dc:a3:c8:b1:b8:2b:9e:8d:54:90:a9:be:2e:9d:
ea:b8:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:23 2025 by rpki-client