Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/AJY6mBNxz8qoNcG8bwBmOOzH_xM.roa
File: AJY6mBNxz8qoNcG8bwBmOOzH_xM.roa (raw, json)
Hash identifier: gbaxr4u1uNJJ6Yb3FWbn9QMOtUmqec98/AU+gh/K69c=
Subject key identifier: 00:96:3A:98:13:71:CF:CA:A8:35:C1:BC:6F:00:66:38:EC:C7:FF:13
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019633BF4A9B474E322C150019A02AE571AD
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/AJY6mBNxz8qoNcG8bwBmOOzH_xM.roa
Signing time: Mon 14 Apr 2025 10:01:36 +0000
ROA not before: Mon 14 Apr 2025 10:01:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.0.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
144.56.20.0/24 maxlen: 24
144.56.21.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.28.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:bf:4a:9b:47:4e:32:2c:15:00:19:a0:2a:e5:71:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 14 10:01:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00963a981371cfcaa835c1bc6f006638ecc7ff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:32:7f:04:ff:03:d6:48:af:24:06:26:75:
91:0f:7d:72:0e:45:0e:d1:83:de:18:eb:00:50:1e:
f4:b7:28:50:e7:78:c1:b8:56:b3:3c:00:98:75:43:
f7:4a:1e:36:bf:72:29:92:fa:05:d7:3a:3f:5e:5c:
49:f2:fc:88:7c:0f:bc:db:06:3e:56:19:25:d3:d0:
a9:da:32:21:4b:53:97:0a:8a:c2:3d:ad:9a:8f:4e:
11:d1:44:46:aa:db:52:a2:52:7a:c2:09:31:54:cc:
0d:b5:da:64:1f:f1:8b:af:82:fd:51:68:80:2a:8f:
9d:27:c1:58:e2:62:ce:d7:6e:25:d6:74:59:d3:d1:
0f:83:e9:b5:a3:63:5b:2c:83:53:7b:71:55:68:a5:
87:32:74:d5:43:5c:f3:22:20:85:fb:b7:b8:4a:c7:
e6:d7:86:5a:ff:3a:26:94:56:9f:15:5a:78:d7:4b:
7d:91:7d:e8:f5:e1:b1:66:f8:e4:5c:d9:7e:42:3f:
0d:d6:b3:3c:f5:d2:d1:39:31:ba:17:95:aa:e5:ea:
0d:70:25:8c:ba:f8:e9:e9:fd:0b:af:b2:87:de:f1:
59:0f:27:90:fe:08:bd:1e:4e:21:b2:08:ea:42:51:
d9:78:db:97:5c:61:43:ff:e5:5a:02:03:81:eb:5b:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:3A:98:13:71:CF:CA:A8:35:C1:BC:6F:00:66:38:EC:C7:FF:13
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/AJY6mBNxz8qoNcG8bwBmOOzH_xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.0.0/24
144.56.13.0/24
144.56.17.0/24
144.56.20.0/23
144.56.24.0/24
144.56.27.0-144.56.28.255
144.56.31.0/24
144.56.33.0-144.56.34.255
Signature Algorithm: sha256WithRSAEncryption
0d:90:b9:73:c0:71:fc:d4:dc:7e:af:9d:84:f3:b5:dc:85:1a:
49:94:4e:85:3f:bf:59:8b:9c:d5:66:de:9c:4d:87:12:85:89:
8a:eb:31:4c:3d:5c:6f:31:54:ea:5e:98:a2:05:1a:64:58:48:
f7:f6:45:08:52:34:39:9e:1c:78:40:bf:72:01:27:8e:57:84:
a2:e1:da:f3:c4:79:2c:52:e4:a3:f0:6f:52:ea:91:6b:7f:d7:
9e:c1:9b:6d:67:48:5a:0b:eb:8f:b8:8b:ca:6f:aa:b2:aa:0d:
f9:ac:91:c4:f2:2d:36:94:01:19:71:42:d9:66:9d:23:f1:82:
74:8d:3d:7d:ed:01:be:4e:67:dc:07:46:06:88:12:32:6c:22:
16:c7:ce:aa:cb:53:4a:08:88:46:6c:3c:79:b6:ba:cb:11:b6:
3d:cb:33:6c:57:01:dd:86:e4:e8:4d:8a:fa:cd:27:c6:aa:b6:
f6:4b:e5:68:cd:16:7f:c5:74:41:2b:db:91:c5:b3:2a:7e:57:
df:3d:1c:0c:6b:da:ec:2d:3d:da:4c:53:12:65:af:c3:25:f5:
40:c6:81:fc:42:39:4c:50:b9:b7:69:3c:79:f3:a9:ea:c5:72:
07:99:04:bd:66:46:6c:d5:a4:df:d2:5d:4c:67:47:58:41:01:
07:17:5b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:44:01 2025 by rpki-client