Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2KRS8xNg1n3MiFJIQWdojz6XlS0.roa
File: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (raw, json)
Hash identifier: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=
Subject key identifier: D8:A4:52:F3:13:60:D6:7D:CC:88:52:48:41:67:68:8F:3E:97:95:2D
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019687F127AF956E873683DEDAF6726012F5
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2KRS8xNg1n3MiFJIQWdojz6XlS0.roa
Signing time: Wed 30 Apr 2025 18:24:10 +0000
ROA not before: Wed 30 Apr 2025 18:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 144.56.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:f1:27:af:95:6e:87:36:83:de:da:f6:72:60:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 30 18:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8a452f31360d67dcc8852484167688f3e97952d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:62:c8:41:8e:a9:c3:c0:b7:91:5c:24:76:
dc:22:ab:54:cf:b1:c5:2e:9e:32:8f:7e:79:d7:98:
4c:73:31:9e:dd:ee:1d:52:6d:c7:a8:41:98:c6:0a:
e0:46:bd:4d:82:90:c8:fe:f0:25:22:78:36:00:23:
4f:f0:53:d7:37:71:56:b7:48:f3:9b:2a:98:f1:59:
74:32:c7:6c:8a:9d:b0:36:c8:2d:f9:93:0d:2a:00:
c9:e5:66:79:18:49:1b:26:82:eb:29:9a:52:57:02:
50:80:2c:d5:1d:69:68:ec:ae:60:5e:11:f2:1a:e9:
24:d5:2f:ba:a1:fc:fd:2b:5e:8d:e8:94:4a:63:78:
8f:02:6f:20:38:46:f1:3f:80:4a:9a:66:0c:50:0e:
a1:02:11:2f:53:da:ff:f3:67:76:3f:1d:71:58:a7:
4b:fb:ab:fd:60:38:87:3f:00:ca:c9:e2:30:6b:1b:
f5:75:9f:8f:83:86:48:dc:84:df:7f:f2:6f:20:5e:
7a:02:2b:73:16:14:20:3d:98:78:63:11:bc:25:b3:
12:49:29:9a:ac:cb:90:96:b1:8c:4f:83:fd:e0:73:
9e:14:91:f2:e0:2f:a5:43:68:6e:1d:7c:40:65:07:
47:8c:2a:02:88:d1:bb:17:f5:dd:2f:1e:c2:50:81:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:52:F3:13:60:D6:7D:CC:88:52:48:41:67:68:8F:3E:97:95:2D
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2KRS8xNg1n3MiFJIQWdojz6XlS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:82:60:0b:be:66:04:8a:82:b5:bf:da:de:e8:72:52:41:82:
a9:23:29:3e:ac:04:f5:7d:cd:49:25:2f:13:f2:11:74:72:57:
ed:c8:2f:65:28:d3:9e:32:e6:1e:7b:0a:b4:52:29:ee:9e:a4:
b6:a1:7b:95:b1:b2:36:7e:39:c8:51:9d:77:b0:61:2d:e9:b7:
88:c0:c9:a9:68:c7:ae:79:ce:ee:67:fb:99:7d:d7:63:d9:63:
de:a6:32:98:90:d6:2e:2f:6f:4a:c0:a3:6c:fa:84:00:2e:7a:
57:da:46:32:e2:69:51:2c:db:08:d8:13:38:b2:e9:f8:ec:bb:
6b:b5:31:d0:4a:71:2a:7e:fa:b4:7b:3e:2d:4c:2a:42:9a:d0:
cd:d2:7b:50:9f:59:f1:69:b4:46:1a:cc:cc:24:54:b4:65:80:
0c:c0:8d:3f:5a:f1:9d:e2:22:af:62:3c:b4:14:ba:e9:62:cf:
e1:49:61:46:81:bc:ed:19:ed:ed:0d:0f:6b:1a:4e:37:bf:3f:
91:99:de:88:58:f2:c2:50:05:37:0a:3f:13:5b:dc:72:a0:01:
dc:63:09:53:76:b1:5d:ec:32:6e:c8:56:08:52:ea:5e:3f:f3:
9a:d6:43:ff:c8:b3:b8:74:38:1e:9c:aa:12:ce:f3:90:12:81:
dd:a4:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:18:47 2025 by rpki-client