Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/dLLdJHfLRdBvTQ5Mas71bcVObuM.roa
File: dLLdJHfLRdBvTQ5Mas71bcVObuM.roa (raw, json)
Hash identifier: iV9p6i7r3SL/cG5e8TC6Oo03GJiKkuIKFe0TcbhjK4s=
Subject key identifier: 74:B2:DD:24:77:CB:45:D0:6F:4D:0E:4C:6A:CE:F5:6D:C5:4E:6E:E3
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01967AFE070885226E148A1EDBA4FF501C69
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/dLLdJHfLRdBvTQ5Mas71bcVObuM.roa
Signing time: Mon 28 Apr 2025 06:03:10 +0000
ROA not before: Mon 28 Apr 2025 06:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.36.0/24 maxlen: 24
144.56.38.0/24 maxlen: 24
144.56.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fe:07:08:85:22:6e:14:8a:1e:db:a4:ff:50:1c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 28 06:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b2dd2477cb45d06f4d0e4c6acef56dc54e6ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:8c:27:ee:af:b3:14:7d:f2:49:c9:49:27:
ce:60:9d:7e:1d:ac:dd:7e:a6:b3:51:19:03:af:0e:
72:4a:6f:45:6d:7d:ca:24:d5:10:b2:7f:b0:d3:ce:
47:9e:7e:b7:28:15:07:c5:05:b6:df:9b:d5:d7:1d:
8e:35:34:43:7f:21:24:f5:a7:9b:b1:c0:b1:d0:fb:
d2:da:16:0f:f4:e6:93:18:7e:b8:22:48:55:30:6b:
e3:08:f9:5c:0d:9c:a5:43:67:7e:98:08:eb:7d:46:
92:0e:a4:68:24:3e:14:5f:23:d8:ad:a6:2e:85:6a:
b4:14:c5:1c:a9:18:01:c8:b4:63:ff:34:12:42:cc:
8f:eb:9f:76:ee:87:2d:54:74:88:ed:f8:12:dd:30:
2a:6d:a8:44:98:38:e3:a6:df:c3:b8:40:ff:18:37:
42:97:59:01:6b:5c:7b:c5:9b:c1:84:ec:6d:fe:cd:
49:7d:c3:39:4c:57:92:23:c4:b0:fe:8b:5d:66:79:
9a:71:94:0e:e4:9d:5b:7f:5d:77:47:38:bc:40:06:
50:db:a7:e6:be:11:6d:0a:61:ba:80:a7:cc:11:dc:
d9:56:e9:a2:1d:3f:3e:45:c9:12:7b:a1:01:9f:89:
95:92:a0:30:30:e1:f1:aa:71:35:bf:64:b0:0e:8e:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:DD:24:77:CB:45:D0:6F:4D:0E:4C:6A:CE:F5:6D:C5:4E:6E:E3
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/dLLdJHfLRdBvTQ5Mas71bcVObuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.23.0/24
144.56.36.0/24
144.56.38.0/24
144.56.40.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:a5:62:d0:9b:43:ad:8d:72:8b:24:7e:10:8a:cb:aa:c9:8e:
4b:eb:c5:06:89:c0:66:bb:bd:d3:09:06:5d:7a:60:c8:13:bc:
e6:4b:c8:95:c5:98:cb:80:ed:d0:bc:ba:42:42:ec:84:63:4d:
b9:c7:36:0c:81:e9:73:40:6a:2e:1b:da:ee:3a:6d:d0:24:3c:
84:dc:5c:bf:e9:86:db:20:12:d2:44:da:85:c6:74:ac:0c:b3:
e6:63:a5:40:5a:50:a4:68:13:ae:9a:9c:0f:b4:2d:67:87:5e:
e8:cd:ef:e0:45:f5:22:70:0b:05:8b:fe:50:8b:41:59:e2:9d:
eb:a5:4b:35:e7:55:c7:cb:50:7f:63:ec:81:c9:df:7f:f6:a1:
06:76:36:61:d3:fd:66:9a:87:83:17:ed:fd:72:88:d2:49:5b:
1e:4d:05:37:09:5f:f4:91:9e:bd:71:7b:20:a1:93:3e:e8:80:
cb:f3:5f:5e:78:a0:c2:63:08:b7:26:b1:b5:86:b1:c4:27:94:
b4:2c:21:6d:a5:27:e8:c7:8e:84:1e:19:5c:4f:63:5f:06:0b:
5b:14:4a:93:4a:72:38:bc:c2:ab:72:d9:0b:46:32:61:8c:61:
90:02:64:b2:7b:d5:7d:aa:ca:9d:4b:ec:e8:39:c9:5a:a4:a6:
d0:5f:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:29:04 2025 by rpki-client