Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/zOhruI3f8CmZnvrfikkp_umvSCQ.roa
File: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (raw, json)
Hash identifier: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=
Subject key identifier: CC:E8:6B:B8:8D:DF:F0:29:99:9E:FA:DF:8A:49:29:FE:E9:AF:48:24
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019670E61FDEE95D70BE76EC56E5DC01A1D3
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/zOhruI3f8CmZnvrfikkp_umvSCQ.roa
Signing time: Sat 26 Apr 2025 07:00:51 +0000
ROA not before: Sat 26 Apr 2025 07:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31221
IP address blocks: 144.56.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:e6:1f:de:e9:5d:70:be:76:ec:56:e5:dc:01:a1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 26 07:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cce86bb88ddff029999efadf8a4929fee9af4824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:f1:92:94:6f:47:80:3e:a4:7a:11:8d:6f:
dd:c0:62:7c:d5:ca:4d:e2:52:1e:53:02:52:0a:d4:
15:ec:bc:4b:9b:20:e7:7c:04:ae:58:03:67:81:99:
93:46:72:33:da:ef:d8:f0:af:c7:ab:69:6f:27:94:
a4:d6:56:77:62:ec:bc:88:1e:bc:7e:f8:13:48:1e:
67:18:86:6c:bf:01:55:3f:31:29:2a:e8:a0:ae:e1:
57:ef:3a:53:8c:3e:ad:45:a2:f2:a7:c7:31:6d:54:
7a:64:05:86:48:2c:69:dd:fa:1d:c6:d4:e7:70:29:
48:96:ca:06:11:23:e2:69:c3:44:13:93:c7:bf:df:
7e:57:09:23:9a:96:43:e6:35:34:6e:a1:ee:c9:ba:
57:d2:25:05:07:ef:b2:90:0d:67:62:99:f4:a9:80:
c4:ca:dd:8e:61:ce:f5:c0:b4:97:cd:37:29:67:9a:
2c:d2:15:c8:d3:04:e2:3f:40:b3:08:de:98:42:d8:
8e:32:6b:8b:8f:e3:5e:92:4b:66:ae:c1:07:7e:72:
49:29:14:16:fb:34:0e:8f:50:b4:b3:bd:89:5a:72:
ed:fb:19:2e:04:18:51:c7:f1:27:b0:06:22:99:d3:
b5:94:ef:5c:a1:8d:85:85:1e:2e:79:9a:d4:24:f5:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:6B:B8:8D:DF:F0:29:99:9E:FA:DF:8A:49:29:FE:E9:AF:48:24
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/zOhruI3f8CmZnvrfikkp_umvSCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.28.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4b:2c:dd:2e:12:0d:a3:ff:0b:4d:e5:02:32:03:5d:a0:fa:
f6:d1:97:7c:ff:62:f3:9a:74:87:ee:34:50:0a:03:1b:9d:6b:
85:c0:3f:e0:22:69:51:90:e6:86:11:44:e9:97:ef:b1:d7:62:
3d:c8:63:09:d1:e0:fc:50:ef:a4:5b:0c:7d:df:26:0a:66:cd:
4c:68:84:52:c9:b8:07:f3:79:88:18:6d:a9:18:49:5c:63:39:
bf:59:a0:03:65:f1:39:1b:59:18:84:a6:2a:fb:db:80:58:eb:
3d:d9:99:f4:1d:60:a0:17:1a:b5:e3:71:8e:29:f0:de:92:8b:
9f:b0:6e:75:09:d6:75:2f:fb:9f:30:17:57:07:9c:d7:cb:58:
e7:46:fd:ad:6c:b4:d0:f6:bb:bc:33:a0:b5:8a:aa:c6:21:9f:
24:46:06:d7:06:31:f8:50:58:32:96:fe:f0:e3:ad:1c:75:d6:
e7:d8:4e:05:5e:2f:b6:79:4c:75:75:fa:ed:e7:bf:7a:0e:9b:
0a:73:57:7a:01:db:c7:bd:7d:bb:d3:8a:93:05:7e:f8:fd:20:
4c:42:23:c8:a6:61:2e:d4:75:f8:f3:5d:cd:62:79:f9:97:9b:
44:5d:52:ad:92:63:72:1f:8d:37:42:25:b2:96:52:09:4f:6e:
b5:be:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:56 2025 by rpki-client