Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/L-fvo2Ga_XsqWFK5WpDjGiCw6HA.roa
File: L-fvo2Ga_XsqWFK5WpDjGiCw6HA.roa (raw, json)
Hash identifier: fBEXK38J40jBxQtyFUIZtrkSR3Zl74lHfM4BXZh9AWM=
Subject key identifier: 2F:E7:EF:A3:61:9A:FD:7B:2A:58:52:B9:5A:90:E3:1A:20:B0:E8:70
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019743AFB4569BF8258C79610FC87076C58F
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/L-fvo2Ga_XsqWFK5WpDjGiCw6HA.roa
Signing time: Fri 06 Jun 2025 05:21:17 +0000
ROA not before: Fri 06 Jun 2025 05:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:af:b4:56:9b:f8:25:8c:79:61:0f:c8:70:76:c5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 6 05:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fe7efa3619afd7b2a5852b95a90e31a20b0e870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:c9:f7:8f:09:dd:03:50:fa:6f:d1:6f:24:
ea:57:c4:05:25:f2:15:ca:d8:b4:9d:ac:18:10:dc:
23:45:19:f6:ed:73:59:36:6d:e4:e1:5c:a3:fd:62:
aa:ad:6a:f9:27:d0:79:0c:b3:62:d0:92:d9:16:da:
b0:b9:1a:6e:26:ec:2c:ae:ea:78:3d:b9:22:bd:57:
43:84:0d:69:83:3f:7e:2c:c3:0f:3a:ca:2b:fa:06:
5c:bf:c0:53:76:2e:38:4a:2f:e4:22:0a:62:26:06:
e5:6c:24:8b:5b:d9:d0:05:b7:0e:26:78:0b:bb:d2:
63:c9:69:75:50:bf:a7:c2:44:95:69:fb:58:fd:54:
44:e7:18:3a:a8:75:56:1c:7f:9f:33:84:68:a5:2c:
23:2e:21:b1:6f:e7:91:7a:37:53:4d:a6:09:f5:46:
3d:03:53:a3:c6:3c:af:60:1d:4d:30:19:dd:ec:5d:
d3:0e:88:d1:ee:9f:71:4d:da:39:f9:79:fa:2f:6b:
62:d8:01:97:fa:36:c1:a0:f4:5c:e9:6a:41:7e:d4:
df:46:90:fe:aa:00:78:f5:20:f8:61:d8:ea:40:fa:
31:cf:0b:ef:36:e9:e2:01:0d:e9:13:4b:36:03:ed:
d7:4a:2d:ce:dd:a9:5c:cc:9b:9c:dd:fb:70:74:fd:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:EF:A3:61:9A:FD:7B:2A:58:52:B9:5A:90:E3:1A:20:B0:E8:70
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/L-fvo2Ga_XsqWFK5WpDjGiCw6HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.17.0/24
144.56.27.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:30:9a:55:3b:26:f3:36:c5:a6:31:f2:59:7d:ae:9c:3d:47:
ec:4f:c1:ad:eb:5b:ae:2a:fb:28:b6:30:d5:17:24:64:9a:6e:
ab:7b:bb:42:04:a2:94:34:db:5c:69:0b:7e:fd:35:f3:83:b2:
48:33:5d:86:98:a0:35:88:31:c0:9d:8b:90:35:e0:e3:20:23:
37:d0:ee:09:96:ca:83:67:75:f1:5a:b9:03:9d:f1:cc:bd:4d:
c9:f7:b5:16:dc:f6:65:68:89:c5:db:15:3d:90:a9:65:f7:92:
a8:c3:8d:a0:53:93:06:ab:b5:84:68:b0:fb:73:70:c9:7e:e1:
f0:f8:27:e3:9f:ab:f1:80:2f:3e:70:17:e4:00:f6:85:8a:d1:
a6:4f:7e:89:10:c2:3c:f7:7d:79:68:e0:7b:a8:77:2d:4e:5d:
5e:c7:52:2f:ec:2b:21:ce:7f:50:25:3c:45:d3:8d:52:16:42:
db:e3:a2:df:18:60:80:d2:bc:88:92:0e:13:0c:f5:c9:db:e7:
2d:67:72:aa:02:55:5f:27:69:5a:5a:d1:ed:72:05:1d:d8:3a:
29:6f:f9:b1:5d:53:e1:17:45:0f:c5:f3:7f:bc:68:2f:4d:b2:
c7:97:d4:ce:f8:14:71:33:23:09:37:5a:8d:45:d5:00:84:8a:
4b:48:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:35:22 2025 by rpki-client