Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ZZMj14aEKoMyMl2StM4xpPnrSzY.roa
File: ZZMj14aEKoMyMl2StM4xpPnrSzY.roa (raw, json)
Hash identifier: KFrHFA3N7h8HHTB1Ry9+JCsK5OICso3z/TG5W1fywsY=
Subject key identifier: 65:93:23:D7:86:84:2A:83:32:32:5D:92:B4:CE:31:A4:F9:EB:4B:36
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01973A3A22CF7061A1189F85612D64D76A63
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ZZMj14aEKoMyMl2StM4xpPnrSzY.roa
Signing time: Wed 04 Jun 2025 09:16:17 +0000
ROA not before: Wed 04 Jun 2025 09:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 144.56.20.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
144.56.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:3a:22:cf:70:61:a1:18:9f:85:61:2d:64:d7:6a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 4 09:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659323d786842a8332325d92b4ce31a4f9eb4b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:e8:a5:78:cb:a0:f1:a3:ac:3c:ae:7a:16:
61:e0:94:d9:0b:c3:98:93:0e:14:2c:79:a5:1e:0c:
bb:d0:24:d0:63:d7:e5:1b:9d:22:20:f3:b3:de:99:
89:af:1d:e1:b1:59:08:ce:0d:63:7a:9b:29:b1:55:
51:8a:4c:05:fb:22:e4:00:49:d9:d1:2d:bc:35:68:
dd:85:87:0e:c1:e5:db:f4:84:29:cf:3d:92:23:15:
7e:d0:ff:cc:26:2d:2d:3d:04:cc:97:37:95:ea:eb:
69:fe:e2:db:ec:1e:c0:58:4d:17:20:c4:d3:5c:29:
fa:53:97:98:98:d2:1a:ba:5b:80:87:71:6d:c2:ce:
37:67:1f:71:eb:20:dd:69:10:75:41:36:8b:a2:84:
9a:cd:7a:c0:ac:48:be:a3:18:29:09:d5:f8:41:1e:
ca:94:75:89:20:6c:c6:93:cf:0a:42:cd:b8:fd:4f:
e6:d2:b2:f0:10:b9:00:87:1a:b4:21:fc:a2:3e:81:
95:dd:0e:0d:b8:c1:99:a6:d8:11:b5:19:73:a6:22:
e0:c7:69:3a:a0:5a:ae:28:45:ef:5f:37:8e:d8:ba:
28:e2:46:f1:92:13:a9:88:16:93:9c:28:44:58:46:
72:16:93:96:00:50:4c:b6:ee:d3:ef:4e:f7:d4:b5:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:23:D7:86:84:2A:83:32:32:5D:92:B4:CE:31:A4:F9:EB:4B:36
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ZZMj14aEKoMyMl2StM4xpPnrSzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.20.0/24
144.56.34.0/24
144.56.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b7:32:f0:80:ab:00:28:e7:64:f7:8b:2f:76:d1:54:03:8d:
67:6c:9b:75:fc:13:02:19:c9:79:5e:20:d4:9c:5f:be:d5:c7:
89:60:44:a8:3d:f4:6a:26:52:54:76:da:5c:74:77:62:3c:66:
27:f3:48:f1:12:e4:eb:b4:8c:30:c5:a1:1c:84:58:cd:c8:29:
66:9f:94:2c:15:d6:60:e1:59:f5:49:6b:9f:27:ab:d8:f5:03:
1c:11:d8:98:62:37:94:13:66:e4:69:ff:22:77:45:5a:cc:b4:
1d:8d:f2:a8:82:76:cc:8e:b6:5c:a3:29:e2:06:92:4d:ed:e8:
36:c4:10:fe:ba:5f:69:56:be:9b:b9:65:87:81:d8:46:cb:0f:
23:81:8a:a5:1e:0c:a8:5e:6c:68:ad:71:a1:d2:56:69:0d:17:
0c:b8:c5:12:f4:0c:a9:50:fe:aa:63:8b:bf:c5:76:93:6f:96:
25:6b:7e:c9:81:39:c6:33:77:15:45:0c:7b:f9:8f:65:64:ea:
3e:4e:86:c8:74:88:9f:44:a3:57:6b:f8:ed:93:5b:28:43:6c:
e7:c3:49:49:8a:53:b0:75:92:ce:96:9e:81:69:7d:fc:a8:83:
ef:40:2f:ed:d4:f5:6e:37:ea:ce:87:68:e9:f7:74:4a:27:78:
a4:17:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:58 2025 by rpki-client