Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa
File: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (raw, json)
Hash identifier: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=
Subject key identifier: 08:61:75:04:87:87:CB:C2:13:E5:A1:8F:18:D1:0E:5E:B2:E7:26:53
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0194D614FAD8ED3464227E6D8DA1029A467B
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa
Signing time: Wed 05 Feb 2025 12:28:06 +0000
ROA not before: Wed 05 Feb 2025 12:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 144.56.1.0/24 maxlen: 24
144.56.2.0/24 maxlen: 24
144.56.3.0/24 maxlen: 24
144.56.4.0/24 maxlen: 24
144.56.5.0/24 maxlen: 24
144.56.6.0/24 maxlen: 24
144.56.14.0/24 maxlen: 24
144.56.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:14:fa:d8:ed:34:64:22:7e:6d:8d:a1:02:9a:46:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Feb 5 12:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=086175048787cbc213e5a18f18d10e5eb2e72653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:ed:55:fd:68:eb:c9:d4:6e:54:6c:71:ef:
66:fc:80:50:a5:a8:af:b9:62:97:73:8d:c8:9b:8c:
32:87:93:04:97:4a:6e:32:11:76:5a:a6:a4:a1:ed:
f0:6e:6a:30:27:bc:94:b7:52:e2:47:d4:02:5a:d6:
d7:fd:4a:62:81:e7:41:38:97:6f:08:dd:f4:8a:f3:
87:d1:68:12:a2:3c:be:4c:c0:52:ff:11:34:cf:bc:
e3:57:9b:5e:78:25:a0:95:8d:bf:64:b5:09:61:b1:
91:2c:6f:cc:aa:16:b3:7e:f7:ed:f3:20:97:38:d7:
e2:b6:e5:91:0e:05:2c:66:ac:86:b5:23:cb:e0:71:
c3:37:4a:88:d8:fe:cf:23:cc:52:7a:0d:95:ee:66:
e1:cb:1d:96:69:44:cb:95:5d:0c:c9:20:c7:b4:35:
b5:88:fa:02:5d:f4:34:fb:29:b9:50:09:ed:28:aa:
64:ce:56:ae:73:31:5c:87:d9:04:c4:70:10:22:bd:
2a:c2:5b:f0:e1:6f:e7:bb:89:1e:71:e4:12:75:dd:
4d:bf:3a:07:12:64:37:db:76:55:4f:cf:78:82:75:
31:47:f5:16:fb:e7:91:c3:aa:72:36:ff:0b:ce:56:
97:b0:d4:4f:b4:8e:b8:58:fe:10:de:87:9e:69:cb:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:75:04:87:87:CB:C2:13:E5:A1:8F:18:D1:0E:5E:B2:E7:26:53
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.1.0-144.56.6.255
144.56.14.0/24
144.56.16.0/24
Signature Algorithm: sha256WithRSAEncryption
80:84:5a:b2:fd:d0:36:43:b3:91:74:84:e1:a8:5f:4f:c4:72:
9f:3d:fd:ea:7a:8b:9a:2d:f2:f4:5c:f1:cd:16:07:1e:6f:30:
32:0e:a2:0f:d1:0e:e2:91:1a:aa:1e:b1:a8:62:c4:da:bd:f9:
3f:5f:f2:93:bf:96:0c:72:93:23:91:10:4c:ef:6f:34:7f:3c:
4d:3b:43:01:80:90:66:82:e6:44:a9:ca:0c:69:22:5f:a1:7b:
c1:9b:4c:b8:02:b1:8e:d7:64:16:00:5b:57:6c:10:59:a4:5b:
05:b0:22:fc:d6:ae:d1:f7:3c:23:f4:4d:9d:2d:78:2a:1e:b2:
9a:ff:8c:f9:7f:52:08:7c:aa:88:be:fd:b3:f7:3c:28:82:c0:
82:1c:2e:88:7c:4b:4f:6e:2e:33:2b:89:ca:7b:86:a3:92:08:
5a:b8:19:f2:d6:15:bb:96:f6:5a:09:7d:b1:39:15:93:b4:95:
93:09:ad:4d:55:b9:dc:79:2b:70:08:42:21:d6:5d:4d:a2:e9:
db:45:ca:04:f5:a2:53:12:bb:33:44:a8:d0:08:72:b9:12:09:
14:d0:1c:0a:51:db:de:0c:2a:00:5b:69:b7:5f:ff:64:04:89:
4d:1f:5d:74:72:a3:d7:12:d5:ba:91:55:23:2f:d0:17:a8:66:
de:6d:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:12 2025 by rpki-client