Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KokmpyIZ-xJPhZHdbyQVUxoRW5o.roa
File: KokmpyIZ-xJPhZHdbyQVUxoRW5o.roa (raw, json)
Hash identifier: b1lOLAYHQOxQVa21mEjqyKotS3xDQTkF8+kYPRp8ch4=
Subject key identifier: 2A:89:26:A7:22:19:FB:12:4F:85:91:DD:6F:24:15:53:1A:11:5B:9A
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01978830699806A5BAC909A389626711799A
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KokmpyIZ-xJPhZHdbyQVUxoRW5o.roa
Signing time: Thu 19 Jun 2025 12:36:03 +0000
ROA not before: Thu 19 Jun 2025 12:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214143
IP address blocks: 144.56.43.0/24 maxlen: 24
144.56.45.0/24 maxlen: 24
144.56.46.0/24 maxlen: 24
144.56.47.0/24 maxlen: 24
144.56.48.0/24 maxlen: 24
144.56.52.0/24 maxlen: 24
144.56.53.0/24 maxlen: 24
144.56.73.0/24 maxlen: 24
144.56.82.0/24 maxlen: 24
144.56.87.0/24 maxlen: 24
144.56.92.0/24 maxlen: 24
144.56.96.0/24 maxlen: 24
144.56.104.0/24 maxlen: 24
144.56.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:30:69:98:06:a5:ba:c9:09:a3:89:62:67:11:79:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 19 12:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a8926a72219fb124f8591dd6f2415531a115b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:c9:e9:ae:9b:7a:5e:c7:0e:fa:f0:ad:1b:
ac:ce:e4:a1:ae:0a:04:03:61:69:04:75:b4:01:5e:
79:b2:61:e1:85:b7:cc:cf:da:1a:65:3f:05:b6:8c:
1d:1a:97:8c:52:5f:5a:6e:a2:84:8e:7b:3c:56:7a:
e1:1e:1d:4d:d1:bc:a1:31:1c:0e:07:41:a3:3a:d1:
b8:86:e9:ef:58:4e:40:25:a7:98:a1:60:95:1a:09:
b4:5e:67:8a:2d:75:c8:16:29:31:f3:37:06:a2:52:
ac:23:97:46:9f:54:de:19:2e:f1:42:ba:56:03:66:
77:77:9a:ce:d9:21:95:ba:67:59:8e:96:e6:60:77:
ce:c7:31:52:64:92:c4:1b:b4:54:1f:a2:fc:ce:15:
ad:6a:ae:0f:b7:7b:13:e7:09:37:41:7b:57:6e:8c:
d2:e5:bb:a0:19:1e:aa:c9:85:f5:a4:41:3e:60:1d:
c4:9c:6d:1f:86:bb:e1:25:74:0c:60:ee:16:76:fd:
11:e1:c7:a4:a5:7e:28:87:8c:6c:5d:1a:c4:63:c6:
22:78:b6:7f:00:09:61:3c:f4:2b:d2:d4:18:e3:a9:
b9:86:de:34:81:54:ac:db:8e:c9:ef:07:f6:8a:01:
03:d5:5c:1f:8d:41:59:dd:1f:41:7b:68:74:74:05:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:89:26:A7:22:19:FB:12:4F:85:91:DD:6F:24:15:53:1A:11:5B:9A
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KokmpyIZ-xJPhZHdbyQVUxoRW5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.43.0/24
144.56.45.0-144.56.48.255
144.56.52.0/23
144.56.73.0/24
144.56.82.0/24
144.56.87.0/24
144.56.92.0/24
144.56.96.0/24
144.56.104.0/24
144.56.123.0/24
Signature Algorithm: sha256WithRSAEncryption
52:77:67:76:82:5a:bc:41:59:3d:21:51:8d:66:fa:ac:b2:53:
f4:99:85:81:3a:6a:f0:a9:1b:bb:19:51:2b:a8:bb:4b:62:21:
27:b9:fe:20:4a:55:03:a8:94:dc:57:97:00:a7:ef:97:a1:96:
0a:4c:6b:f7:90:3d:aa:5c:e6:81:08:a2:0d:49:33:a4:a0:63:
14:7c:4e:18:31:53:f8:39:56:ef:08:52:78:a3:53:62:13:ee:
a0:01:ad:48:d0:af:d8:57:40:b3:50:fd:3e:81:11:b2:4a:c5:
88:98:5f:8e:6d:b2:75:9c:f6:4b:0a:7b:1d:0c:d0:6a:25:02:
ab:c3:c8:5f:f0:19:ca:a8:40:2a:b0:98:5a:a1:b8:8b:d9:0f:
74:91:54:5a:87:98:d8:7d:91:c2:b1:d1:ec:1e:43:65:b9:21:
f6:6e:8d:f7:a2:b4:ff:c1:53:da:36:c3:c4:76:42:d3:03:59:
01:98:b3:26:4a:7e:a6:e4:e4:9b:b3:f6:9f:d8:e1:d9:dd:19:
19:25:bd:81:81:6b:61:80:35:11:7e:58:28:07:9a:14:0c:e8:
a5:43:d2:71:9e:c8:ac:0a:49:eb:10:9c:93:80:b8:ea:91:2d:
74:91:f4:70:ec:a6:cb:03:58:15:9d:b3:d5:00:79:0c:79:62:
56:be:10:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:54:11 2025 by rpki-client