Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/AgqWCSR5hB_scG1vIzVPhOIZr64.roa
File: AgqWCSR5hB_scG1vIzVPhOIZr64.roa (raw, json)
Hash identifier: V24nE9oHlKz3vAE9J4WWyTyHYzdgNywka9EBmSkFzYs=
Subject key identifier: 02:0A:96:09:24:79:84:1F:EC:70:6D:6F:23:35:4F:84:E2:19:AF:AE
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01958585B2B5FFF2551CA7FC6C46467C4D77
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/AgqWCSR5hB_scG1vIzVPhOIZr64.roa
Signing time: Tue 11 Mar 2025 14:04:46 +0000
ROA not before: Tue 11 Mar 2025 14:04:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25160
IP address blocks: 144.56.10.0/24 maxlen: 24
144.56.18.0/24 maxlen: 24
144.56.19.0/24 maxlen: 24
144.56.26.0/24 maxlen: 24
144.56.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:85:b2:b5:ff:f2:55:1c:a7:fc:6c:46:46:7c:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 11 14:04:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=020a96092479841fec706d6f23354f84e219afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:d5:3b:09:55:d9:87:4c:1b:fc:48:b6:dd:
2b:3b:69:d4:ba:a7:3b:39:a6:5b:c3:2c:60:df:04:
c1:4c:1d:02:09:52:8c:62:3e:b1:40:bd:72:56:76:
13:0f:ab:c2:98:cb:93:e5:e2:05:3a:3d:fb:66:c4:
e1:94:17:71:b1:70:f5:01:e0:f6:fb:c3:da:65:d6:
16:a4:7c:55:b8:29:c6:48:27:67:5e:e4:9b:77:28:
3f:fc:92:14:52:8f:2d:5e:7d:91:af:09:5f:96:ca:
cb:fd:88:df:ec:40:90:46:84:81:71:a0:66:a7:11:
f5:b3:a8:94:3f:b6:2e:ed:b5:0c:fc:e7:7c:28:e6:
d9:37:02:d7:5c:05:48:6e:a6:ec:38:3b:c3:6d:1d:
79:60:74:6e:af:db:7f:f0:db:3d:48:89:45:a1:b3:
78:e0:c6:7a:90:58:ec:9e:8c:32:6b:72:71:cb:fb:
4c:07:ca:43:81:4a:1f:50:b3:e9:e8:a9:0d:77:4b:
87:3f:62:b8:19:c9:2d:60:e5:09:7e:e5:8c:f8:e1:
68:76:ae:0a:a0:0a:d6:db:cb:5f:d3:57:8d:fb:b6:
ef:2a:94:34:76:17:98:75:89:d2:f8:4e:68:4e:c1:
57:c4:73:f9:92:85:a1:ab:18:8b:49:42:f3:7b:db:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0A:96:09:24:79:84:1F:EC:70:6D:6F:23:35:4F:84:E2:19:AF:AE
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/AgqWCSR5hB_scG1vIzVPhOIZr64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.10.0/24
144.56.18.0/23
144.56.26.0/24
144.56.30.0/24
Signature Algorithm: sha256WithRSAEncryption
87:95:5d:3a:1b:b4:df:a2:d8:60:78:c0:3e:34:68:1f:f2:0d:
98:b3:28:99:dc:68:6c:dd:19:7c:05:6c:a9:ec:48:56:32:82:
69:b8:6c:27:b0:e1:26:02:c7:a1:b1:9d:45:da:93:c9:14:e0:
1a:5e:99:22:13:6e:7a:26:a1:92:c2:a0:4b:64:cb:cb:78:78:
60:30:c3:4a:b7:99:af:cd:7a:b1:f3:7b:dc:1f:ff:34:c8:d6:
a1:ca:ab:83:3d:ae:ef:11:84:76:6b:d5:75:af:e2:ee:9d:e3:
f1:83:e6:32:42:5e:37:ff:89:87:46:c6:55:cd:30:85:f0:fe:
26:ec:ef:95:38:2e:6e:31:2d:df:b2:79:42:2c:a4:74:52:88:
0c:ca:04:63:a0:21:8e:db:11:ab:d7:14:0d:d5:da:b2:01:99:
4d:a9:0b:42:ca:1d:7b:4a:f5:75:da:82:d8:06:70:e3:24:be:
da:4c:f9:a2:87:87:36:65:3f:f4:0d:2d:23:bd:05:ff:8f:3f:
b6:75:22:a2:ce:b2:2b:c7:34:8a:9a:43:e2:1e:63:ab:d1:13:
52:95:d5:03:91:51:cc:e0:46:54:d3:3e:eb:f9:d3:17:de:50:
72:96:02:69:ea:dc:3d:17:64:53:6f:15:64:a4:b2:23:8e:e5:
be:91:b9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:05:41 2025 by rpki-client