Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7eZORb2xG-sQKXJcNZskPYKDrBc.roa
File: 7eZORb2xG-sQKXJcNZskPYKDrBc.roa (raw, json)
Hash identifier: a5zVFhpvITqqNq78/1p6QoMdwiTdRHyY02UFP9KVFTg=
Subject key identifier: ED:E6:4E:45:BD:B1:1B:EB:10:29:72:5C:35:9B:24:3D:82:83:AC:17
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01967AFFDC0C6BD7E076E8AEE0A42C28A584
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7eZORb2xG-sQKXJcNZskPYKDrBc.roa
Signing time: Mon 28 Apr 2025 06:05:10 +0000
ROA not before: Mon 28 Apr 2025 06:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 144.56.35.0/24 maxlen: 24
144.56.37.0/24 maxlen: 24
144.56.39.0/24 maxlen: 24
144.56.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:ff:dc:0c:6b:d7:e0:76:e8:ae:e0:a4:2c:28:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 28 06:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ede64e45bdb11beb1029725c359b243d8283ac17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:e2:39:39:a1:29:be:0a:1b:14:49:bf:61:
5d:79:e9:3d:31:32:5b:30:be:67:d3:a0:77:0e:05:
7a:6f:25:a7:b9:95:64:08:da:aa:cb:25:12:3f:e0:
e3:be:f5:2a:ac:e1:d1:fa:da:9c:a7:9e:1e:6d:09:
16:92:79:cb:4a:e6:8e:d5:98:49:15:a7:fa:94:23:
bc:55:1f:0e:92:e4:38:f4:24:bf:eb:4b:06:f3:00:
ca:9e:58:10:65:f9:9f:84:63:b1:b1:4f:a9:c6:ce:
50:97:8b:62:25:1d:bd:12:a2:bd:55:03:c6:0e:ae:
93:50:c6:a7:cc:8d:d1:ab:5f:67:1a:a8:6f:30:ca:
4d:e9:1b:25:c4:84:74:e4:98:31:11:49:1f:76:e4:
ba:9a:a8:43:2d:8f:d6:58:53:7c:70:b7:a1:97:a9:
19:ef:72:72:5f:13:85:70:e2:ad:b6:b9:ef:13:13:
9f:65:c8:6e:35:c8:40:ad:c8:f9:e7:d7:b7:ce:b1:
c5:f7:a3:7e:69:3b:20:c0:c4:28:77:15:09:44:38:
c0:00:0b:b1:fe:fa:80:d8:f1:18:d5:cc:07:21:18:
89:b6:66:65:73:13:fb:d4:b1:36:16:95:b4:a6:f1:
27:a9:13:20:9e:d0:60:c9:70:a6:86:df:3b:94:7c:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E6:4E:45:BD:B1:1B:EB:10:29:72:5C:35:9B:24:3D:82:83:AC:17
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7eZORb2xG-sQKXJcNZskPYKDrBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.35.0/24
144.56.37.0/24
144.56.39.0/24
144.56.41.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6c:db:34:c6:76:ef:ab:7e:bb:ec:55:07:fa:f8:85:36:4d:
74:53:6f:9a:a0:9a:96:8a:bc:54:f5:99:76:18:87:31:c7:c7:
ba:35:2a:6a:e7:e0:98:8a:2c:fa:13:62:56:cb:92:12:99:ac:
b2:2e:96:fd:e3:a7:06:fc:45:1b:80:f7:be:54:d2:82:e1:33:
f8:9c:a7:9e:2b:03:8c:a7:bd:6f:a5:11:1d:53:cf:1b:d5:b8:
f9:2b:3e:79:19:c2:f6:36:90:ee:2d:ed:b6:d9:f2:c3:49:34:
e1:47:cf:a5:17:86:69:cf:d9:b5:84:e3:60:5d:51:6e:16:36:
08:77:71:90:b8:d2:b9:dc:26:dc:77:70:c3:6b:a3:c8:a5:be:
54:03:c1:76:2b:01:71:51:ee:76:f2:98:6d:3f:f1:38:2f:7a:
14:e7:96:7b:4d:4a:95:52:1a:d4:86:4a:a0:05:5f:7e:9d:19:
63:7e:4f:8b:e7:a7:32:69:f7:c4:51:3f:c6:d4:03:06:25:da:
be:b2:24:34:bd:f0:a3:f1:53:83:84:2c:90:9f:a5:15:6e:88:
42:89:be:19:33:b7:a6:4b:35:94:a6:06:f9:17:ab:f5:59:d8:
50:17:00:4b:15:48:45:8b:c5:e3:68:6e:7b:31:19:be:1f:c1:
92:52:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:50:57 2025 by rpki-client