Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/ir_nzSQYAsgPoPu8kRGYQzALm7U.roa
File: ir_nzSQYAsgPoPu8kRGYQzALm7U.roa (raw, json)
Hash identifier: TCpfNyg//XzFyrfc8SAsUbs4iWswcCSro2mnromAmQo=
Subject key identifier: 8A:BF:E7:CD:24:18:02:C8:0F:A0:FB:BC:91:11:98:43:30:0B:9B:B5
Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial: 01983132BD6A1AE1428A75578F5BB6EE91BA
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/ir_nzSQYAsgPoPu8kRGYQzALm7U.roa
Signing time: Tue 22 Jul 2025 08:14:25 +0000
ROA not before: Tue 22 Jul 2025 08:14:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8444
IP address blocks: 144.2.128.0/24 maxlen: 24
144.2.129.0/24 maxlen: 24
144.2.130.0/24 maxlen: 24
144.2.131.0/24 maxlen: 24
144.2.136.0/24 maxlen: 24
144.2.140.0/24 maxlen: 24
144.2.142.0/24 maxlen: 24
144.2.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:32:bd:6a:1a:e1:42:8a:75:57:8f:5b:b6:ee:91:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Validity
Not Before: Jul 22 08:14:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8abfe7cd241802c80fa0fbbc91119843300b9bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:33:be:35:9d:11:33:c6:0f:1f:c2:e4:46:
27:18:47:cb:44:54:8e:98:4c:71:7a:df:08:99:9a:
67:d0:ac:be:10:07:54:8b:68:fe:c5:87:17:b8:2c:
2b:20:9d:02:01:5d:ed:05:6a:05:c7:b1:62:bc:05:
11:09:05:bf:47:ac:33:ad:4e:10:88:28:a2:48:f3:
66:b1:34:d7:4a:30:33:4a:45:ed:0a:0b:ae:eb:bc:
3c:ce:f9:0c:e8:5d:66:91:9f:81:dd:7f:33:e1:e8:
04:91:42:f5:b0:dd:d0:02:31:87:67:84:44:7e:39:
48:22:d7:7b:e7:15:86:22:2a:d3:3e:b4:87:38:94:
f4:06:9d:1f:12:25:59:fb:8c:d0:e0:24:e5:3e:82:
69:8f:ed:f6:4b:4d:88:8e:7c:89:6e:6f:0a:c3:71:
f1:8d:a5:5c:d6:5c:5f:4b:16:5a:9c:7a:69:9c:92:
0a:5b:e2:17:be:25:63:a8:fa:fa:6f:45:d3:6a:1c:
8a:c9:99:42:90:f4:02:f8:0a:f3:60:55:31:50:48:
d4:eb:91:2c:39:f8:a7:73:81:7a:54:79:1e:71:22:
23:dd:81:0f:92:de:9e:8b:22:fb:bc:3d:17:32:87:
9f:4e:d8:9a:63:c2:1c:cb:b2:c3:62:b2:a4:7d:92:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BF:E7:CD:24:18:02:C8:0F:A0:FB:BC:91:11:98:43:30:0B:9B:B5
X509v3 Authority Key Identifier:
keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/ir_nzSQYAsgPoPu8kRGYQzALm7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.128.0/22
144.2.136.0/24
144.2.140.0/24
144.2.142.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:4f:5c:a7:dc:79:7a:d5:6d:d4:ca:1c:6a:4d:78:a7:4b:d1:
8d:4d:69:08:78:69:a7:c9:c1:e5:f1:b9:77:a6:04:c8:7d:76:
5e:60:d8:86:b8:6c:45:33:7a:00:b3:32:51:15:4f:ab:1b:96:
df:92:3e:3f:e0:b5:31:63:ce:91:c2:d8:1d:ec:b5:b8:76:45:
14:55:c6:65:49:74:eb:5c:e4:b8:9a:11:88:ab:fd:be:0b:2a:
af:24:77:5c:57:25:7b:5b:b9:05:24:d5:2f:ac:f3:11:ed:02:
5a:cd:c7:da:2e:30:1b:11:e3:93:6d:15:b3:7c:94:70:0c:1d:
cc:48:d6:0e:bf:c1:c5:95:03:d3:ac:99:57:38:51:3f:e7:80:
fd:0f:e1:a4:89:3b:ef:21:a5:49:04:bc:a9:50:9a:64:d4:01:
46:7d:1d:22:b9:ca:e7:cf:a0:f0:ff:02:00:52:a0:1a:71:37:
49:14:c4:52:93:89:a2:71:96:8f:86:2a:d4:d0:03:e6:f1:3d:
b9:c8:d5:6e:70:01:b1:0c:2a:7c:ca:c9:11:6c:4d:4b:87:56:
14:20:19:89:33:05:79:fe:f6:90:e8:50:54:a7:5b:08:3a:31:
d0:3a:2c:e2:be:a2:57:6d:0d:3b:9a:be:5d:76:85:75:77:18:
18:dc:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:49 2025 by rpki-client