Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/UPtnw9Xg6xaDjOjDI1a41rl6dCg.roa
File: UPtnw9Xg6xaDjOjDI1a41rl6dCg.roa (raw, json)
Hash identifier: gP2nmywyvMi3C3A/rSnGDj5/7gnWG8ZEQKItpqbvyzU=
Subject key identifier: 50:FB:67:C3:D5:E0:EB:16:83:8C:E8:C3:23:56:B8:D6:B9:7A:74:28
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01979B45AA149D7F07AED530A979C76FC7EC
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/UPtnw9Xg6xaDjOjDI1a41rl6dCg.roa
Signing time: Mon 23 Jun 2025 05:32:03 +0000
ROA not before: Mon 23 Jun 2025 05:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 144.56.24.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:45:aa:14:9d:7f:07:ae:d5:30:a9:79:c7:6f:c7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 23 05:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50fb67c3d5e0eb16838ce8c32356b8d6b97a7428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:93:6d:ee:92:b1:d4:e0:48:ab:fd:70:e1:
11:c9:9f:02:34:fd:3a:80:a4:c4:8f:db:01:a5:e1:
38:61:30:50:dd:f6:78:ed:cd:69:32:d5:82:12:78:
89:e4:3c:fe:00:dd:d7:77:3d:c4:33:c0:68:88:4c:
e9:7f:5e:48:cd:2e:86:5b:6d:92:85:25:53:0d:86:
8b:d4:26:20:dd:63:77:58:48:51:3a:95:44:51:34:
75:ef:4e:5e:18:6e:4b:1a:91:b1:5e:e3:22:b6:3e:
78:e2:d4:00:80:64:08:61:cb:58:43:31:04:0d:65:
c6:4e:81:67:82:9e:38:8a:58:da:ab:9a:fa:52:1c:
a6:2f:54:b2:b7:28:d0:2e:1e:7c:66:0a:56:3c:5a:
81:be:06:72:98:e4:08:06:ca:b5:72:ef:89:cd:c1:
d7:3a:91:6a:52:d3:9a:c2:43:0e:93:4a:ec:f7:2b:
04:61:33:d4:7e:cf:93:ba:d8:25:c1:ab:f3:a9:cb:
d6:6c:49:ff:ea:85:b1:e9:9f:fe:3f:f5:88:22:df:
d3:08:e4:c9:e8:c0:0e:56:eb:d6:83:2f:07:26:aa:
90:c7:27:0f:a5:25:ac:24:f6:33:8b:31:65:bb:9e:
c5:84:d0:7b:ee:08:d1:2f:06:cc:5a:f9:bf:64:19:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FB:67:C3:D5:E0:EB:16:83:8C:E8:C3:23:56:B8:D6:B9:7A:74:28
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/UPtnw9Xg6xaDjOjDI1a41rl6dCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.24.0/24
144.56.31.0/24
144.56.102.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:87:8a:39:8f:6c:99:da:99:2d:cf:72:87:45:ee:2c:c9:
c5:65:5e:a7:4b:37:d2:53:28:e8:15:22:52:88:20:72:ac:95:
9e:e1:9a:98:0b:eb:85:55:db:14:7b:e0:09:ea:06:62:cf:bd:
fe:8c:22:53:7c:82:ea:cd:7d:9b:96:5f:7e:1c:ee:49:f2:4f:
fe:7b:fc:e9:00:f0:f7:50:3c:cf:dd:8f:f1:d5:36:16:4a:3b:
c4:69:28:1d:bf:cc:4a:a2:c4:68:c6:c9:3a:71:4d:f1:6a:6c:
46:8e:3d:50:a2:22:24:3d:85:a8:4c:12:d1:5d:19:c4:df:56:
95:ce:93:fb:ac:71:9c:a0:38:d3:fa:b3:0f:65:04:3c:2b:7e:
2a:1f:c2:1d:74:f0:3b:0e:0c:4f:f4:06:9f:8f:d7:62:50:17:
e0:e5:2c:f2:e8:7d:42:dd:95:79:c5:04:ca:68:1b:46:3e:a7:
ba:ee:52:0a:a5:46:4a:61:42:a5:eb:ee:2e:a0:da:af:83:13:
7e:12:6f:42:46:64:c9:a4:7c:0d:7d:6d:4a:7c:19:4b:65:16:
46:52:73:6d:86:fb:82:06:70:bb:27:f8:f7:ca:0f:74:ea:96:
41:21:c2:21:21:ad:8d:6a:e0:7a:6e:13:a2:4a:14:78:80:55:
25:af:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:02:17 2025 by rpki-client