Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/01hxjCh_nvh6suIkW5jDT7FQ5wY.roa
File: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (raw, json)
Hash identifier: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=
Subject key identifier: D3:58:71:8C:28:7F:9E:F8:7A:B2:E2:24:5B:98:C3:4F:B1:50:E7:06
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 019423D7C3F8EBEC1F17FC71248AB47C5F56
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/01hxjCh_nvh6suIkW5jDT7FQ5wY.roa
Signing time: Wed 01 Jan 2025 21:48:50 +0000
ROA not before: Wed 01 Jan 2025 21:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39052
IP address blocks: 144.57.0.0/19 maxlen: 19
144.57.64.0/18 maxlen: 18
144.57.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c3:f8:eb:ec:1f:17:fc:71:24:8a:b4:7c:5f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d358718c287f9ef87ab2e2245b98c34fb150e706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:2f:8d:6d:92:ff:32:b9:5e:8f:6c:c6:e9:
68:ff:76:68:15:00:cc:39:7a:af:ed:5b:c7:e6:99:
94:38:1e:b6:7e:22:2e:92:2a:a4:7f:9a:41:13:87:
29:04:fb:33:e4:d0:79:3d:ce:9f:c0:cf:9b:89:0f:
7d:ba:70:92:ad:e1:b8:bc:f1:26:b1:01:9f:a5:4b:
39:3f:b9:8d:e4:70:7d:e5:e0:76:23:e5:ba:d2:ca:
ca:97:1d:6e:05:0b:d7:a9:45:4d:1a:a0:9f:95:3c:
5c:fc:4d:dc:75:7d:e6:bf:01:a6:90:7c:a1:07:11:
14:9a:98:db:12:b9:c4:65:7b:c4:ca:25:9a:54:09:
fd:d2:af:2d:50:fe:09:5a:2a:db:8d:99:02:e7:47:
2a:bd:cc:db:ae:d3:52:85:8a:db:50:0d:cc:37:35:
22:ae:97:ed:bc:a2:25:5a:59:30:11:69:a0:96:21:
5c:fc:04:a2:e5:55:24:37:c4:16:32:3a:43:0b:f5:
0e:e4:36:f4:85:36:58:58:14:c7:0c:cf:d5:36:a5:
22:0e:ff:78:1f:58:90:7d:01:3c:6d:a6:2e:6e:8e:
e0:79:71:c6:bd:12:68:7d:6a:c0:f0:5b:9f:91:b3:
de:e9:cb:23:f5:21:7d:25:e8:e4:ba:63:74:8a:47:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:58:71:8C:28:7F:9E:F8:7A:B2:E2:24:5B:98:C3:4F:B1:50:E7:06
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/01hxjCh_nvh6suIkW5jDT7FQ5wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.0.0/19
144.57.64.0-144.57.255.255
Signature Algorithm: sha256WithRSAEncryption
9e:e3:b0:93:cf:af:e6:fd:a8:11:45:c5:a1:3c:cd:9a:fb:27:
20:0f:91:0b:cd:5b:43:d8:e2:85:bd:8d:03:a8:df:f8:b6:48:
fb:29:7e:eb:d1:05:0f:de:92:7e:a2:b0:96:fc:b9:41:60:88:
e5:92:44:ad:8e:44:0e:7f:ba:82:0f:b4:c7:97:f3:98:fa:26:
48:b9:e8:e5:69:79:6d:bb:37:f8:3e:34:c7:83:2a:b3:9c:51:
cb:1e:38:e8:14:35:5e:1e:ed:bc:b1:b1:92:6b:7f:e7:00:87:
a3:66:dd:dd:48:6f:1d:89:2a:52:9d:d1:e9:c3:eb:90:34:79:
4a:1a:4a:64:84:c4:3a:0a:58:1a:2d:37:f9:79:4a:2a:3b:6c:
d3:62:8e:05:6c:b0:88:42:16:8e:41:01:b7:51:4a:54:5b:ef:
f8:be:ec:1a:3b:cc:af:2a:8f:f9:e8:e3:a9:2f:2b:d9:19:7d:
1c:d3:9d:b9:a2:7b:1b:d3:2d:ca:f5:03:41:19:11:79:77:b1:
3b:f0:73:99:96:c1:63:d1:78:8d:e8:88:27:03:0c:48:a6:b1:
6b:4e:68:06:da:f1:0f:2c:3d:9b:34:c2:e3:ad:a2:25:22:89:
24:27:aa:b8:38:05:12:2f:e7:a5:e8:28:1a:9c:85:98:ff:43:
6f:cf:1c:a4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZQj18P46+wfF/xxJIq0fF9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWNhYWYzYTA5OTNiNzZhZTEzZTExOTEzNmRiZjAwNjk2
OTg5MTEwHhcNMjUwMTAxMjE0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzU4NzE4YzI4N2Y5ZWY4N2FiMmUyMjQ1Yjk4YzM0ZmIxNTBlNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp58vjW2S/zK5Xo9sxulo/3ZoFQDM
OXqv7VvH5pmUOB62fiIukiqkf5pBE4cpBPsz5NB5Pc6fwM+biQ99unCSreG4vPEm
sQGfpUs5P7mN5HB95eB2I+W60srKlx1uBQvXqUVNGqCflTxc/E3cdX3mvwGmkHyh
BxEUmpjbErnEZXvEyiWaVAn90q8tUP4JWirbjZkC50cqvczbrtNShYrbUA3MNzUi
rpftvKIlWlkwEWmgliFc/ASi5VUkN8QWMjpDC/UO5Db0hTZYWBTHDM/VNqUiDv94
H1iQfQE8baYubo7geXHGvRJofWrA8FufkbPe6csj9SF9JejkumN0ikcOmQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFNNYcYwof574erLiJFuYw0+xUOcGMB8GA1UdIwQY
MBaAFBpcqvOgmTt2rhPhGRNtvwBpaYkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUt
N2M1OTBiY2Y5ODFhLzEvMDFoeGpDaF9udmg2c3VJa1c1akRUN0ZRNXdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUtN2M1OTBiY2Y5ODFh
LzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQFkDkAMAsD
BAaQOUADAwGQODANBgkqhkiG9w0BAQsFAAOCAQEAnuOwk8+v5v2oEUXFoTzNmvsn
IA+RC81bQ9jihb2NA6jf+LZI+yl+69EFD96SfqKwlvy5QWCI5ZJErY5EDn+6gg+0
x5fzmPomSLno5Wl5bbs3+D40x4Mqs5xRyx446BQ1Xh7tvLGxkmt/5wCHo2bd3Uhv
HYkqUp3R6cPrkDR5ShpKZITEOgpYGi03+XlKKjts02KOBWywiEIWjkEBt1FKVFvv
+L7sGjvMryqP+ejjqS8r2Rl9HNOduaJ7G9MtyvUDQRkReXexO/BzmZbBY9F4jeiI
JwMMSKaxa05oBtrxDyw9mzTC462iJSKJJCequDgFEi/npegoGpyFmP9Db88cpA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:37:09 2025 by rpki-client