Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/OthHgnf3rJVecd36_0sv2katqWo.roa
File: OthHgnf3rJVecd36_0sv2katqWo.roa (raw, json)
Hash identifier: SORLEfHzC6JVLAMzn/UifxzOMPGxvnuEm4Ci8uPZuGk=
Subject key identifier: 3A:D8:47:82:77:F7:AC:95:5E:71:DD:FA:FF:4B:2F:DA:46:AD:A9:6A
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0197729503F598435C43CA38CB9A9D6B13B0
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/OthHgnf3rJVecd36_0sv2katqWo.roa
Signing time: Sun 15 Jun 2025 07:54:17 +0000
ROA not before: Sun 15 Jun 2025 07:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214143
IP address blocks: 144.56.43.0/24 maxlen: 24
144.56.45.0/24 maxlen: 24
144.56.46.0/24 maxlen: 24
144.56.47.0/24 maxlen: 24
144.56.48.0/24 maxlen: 24
144.56.52.0/24 maxlen: 24
144.56.53.0/24 maxlen: 24
144.56.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:95:03:f5:98:43:5c:43:ca:38:cb:9a:9d:6b:13:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 15 07:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ad8478277f7ac955e71ddfaff4b2fda46ada96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:9a:fc:5b:5c:95:f3:08:b3:c3:8c:2c:b3:
af:24:49:12:08:19:27:73:bf:47:c4:c4:74:7a:96:
f4:54:4c:53:f6:87:ee:d3:91:5c:15:e3:5b:67:72:
94:bd:96:df:a1:ad:21:67:6e:d1:cb:b6:f4:1b:f9:
be:b2:a9:f8:93:dd:69:37:76:7a:3f:26:50:82:3d:
6b:fa:28:f8:78:12:8b:0d:51:1c:92:13:d8:1f:0d:
89:f0:bd:a1:e4:e2:75:6b:ac:6f:43:42:20:c4:eb:
a8:dc:85:d3:37:b9:66:e2:93:4f:f0:f0:bc:23:08:
ad:e3:87:34:ff:57:df:12:25:c0:c9:73:1c:3d:87:
27:00:01:ae:72:88:2f:b5:ef:54:09:60:a0:82:a1:
94:15:d0:a4:ae:18:2d:2f:96:66:b9:1c:3e:88:c6:
49:6b:7c:f6:81:b1:96:69:7e:0a:63:c5:ac:dc:35:
c2:90:82:9a:50:96:40:8f:54:f8:ba:43:0b:9b:60:
97:1c:cc:f2:56:dc:09:af:9d:73:90:2b:5b:48:23:
00:d9:d1:5f:40:e1:b7:d6:2f:6b:42:5a:bf:bd:ab:
9d:88:19:11:64:82:ea:93:26:03:f5:50:6a:1f:3e:
4e:34:4d:12:e3:59:28:eb:e6:13:35:86:d4:7d:d1:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D8:47:82:77:F7:AC:95:5E:71:DD:FA:FF:4B:2F:DA:46:AD:A9:6A
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/OthHgnf3rJVecd36_0sv2katqWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.43.0/24
144.56.45.0-144.56.48.255
144.56.52.0/23
144.56.73.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f2:5a:7f:a9:77:f8:f0:45:01:be:cd:b8:ff:36:88:41:c8:
69:86:be:b0:a4:f4:b5:b0:76:b3:2b:6f:88:1a:f9:c2:a3:56:
57:1a:68:3c:be:0f:ce:51:74:55:dc:76:8d:83:af:d3:54:aa:
65:e4:92:fc:be:ff:0a:8e:48:fa:14:9e:d8:95:64:51:f2:8f:
18:fb:bc:9b:67:03:c8:da:31:e6:28:a8:44:b6:c8:0b:98:92:
e1:c2:15:db:6b:09:23:d6:b8:fb:e9:b1:42:eb:65:0f:e5:8a:
93:5e:4c:f1:0d:6c:02:3d:e3:c3:6c:24:69:3e:8e:ec:f7:f2:
9f:c7:b1:cb:3b:3e:ba:01:74:7a:82:6e:7c:58:74:0e:40:79:
5e:5a:7e:1d:b4:cb:32:2a:e1:4c:1e:a8:68:e9:42:5f:93:df:
00:84:60:20:85:35:4c:55:e1:22:cf:27:d1:27:05:02:b9:5d:
06:19:a8:ed:82:1c:b4:88:21:00:a9:a7:db:84:bb:fd:32:42:
40:1c:5e:2d:e2:03:e5:dd:d9:f6:9a:8f:e0:7f:fe:3b:3f:5b:
01:62:80:89:c8:ab:e4:0e:50:95:9a:75:64:3d:5d:6d:3e:d4:
ac:b6:f9:7a:fc:a4:b4:12:4b:d1:2d:7c:22:7e:e9:87:37:9f:
46:da:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:53:18 2025 by rpki-client