Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: hQdPjqiqfgSGbkvTebVugDKJd9TYNNHLW8DVy7NFcLA=
Subject key identifier: 21:B4:A3:4E:60:84:60:B5:30:E7:A8:FE:52:EC:01:56:56:D8:0F:61
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2119C289507219D8DC76FD7760EDF74B30BE937D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
Signing time: Fri 18 Jul 2025 00:02:06 +0000
ROA not before: Thu 17 Jul 2025 23:57:06 +0000
ROA not after: Fri 17 Jul 2026 00:02:06 +0000
asID: 137517
IP address blocks: 143.14.95.0/24 maxlen: 24
143.14.190.0/24 maxlen: 24
143.14.248.0/24 maxlen: 24
155.117.207.0/24 maxlen: 24
155.117.241.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 07:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:19:c2:89:50:72:19:d8:dc:76:fd:77:60:ed:f7:4b:30:be:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 17 23:57:06 2025 GMT
Not After : Jul 17 00:02:06 2026 GMT
Subject: CN=21B4A34E608460B530E7A8FE52EC015656D80F61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:30:84:0a:16:b2:4e:2c:12:17:85:49:17:
64:70:a6:80:a5:6f:0f:be:4b:0c:e1:6b:56:21:ac:
60:12:33:f8:2d:03:5e:ec:9b:f7:db:d2:73:d3:53:
e6:9a:c3:f6:cc:0a:a6:11:c7:e3:27:ac:6d:7c:cb:
c2:a3:b9:07:b9:78:7b:cf:a9:70:13:eb:80:44:b4:
34:d4:b5:2c:60:6d:41:ba:f0:16:90:84:54:84:2d:
b9:c8:48:fc:81:de:7c:14:37:40:a1:66:90:cf:31:
a2:68:79:e8:00:ea:2e:67:9f:cb:7d:b2:64:e3:f1:
54:e7:6f:6b:89:58:fe:1c:f9:61:e3:04:e8:b0:89:
10:6e:f4:4b:d8:0e:09:06:21:48:d7:6d:5b:80:73:
41:a1:dc:92:5e:10:bd:c1:76:95:bd:9b:74:73:ba:
ae:3b:6e:7b:c7:0e:96:e2:27:0b:17:ce:b9:a0:64:
f3:3c:2a:16:84:d3:31:86:c2:f9:38:2e:2a:08:d2:
1a:b3:3d:e0:0d:eb:ba:17:26:86:93:b4:c5:97:be:
82:b4:f1:79:72:33:22:cb:9c:79:b2:80:8a:cc:e0:
eb:f7:f6:cb:98:dd:56:d0:fe:cc:aa:c7:71:46:11:
57:da:87:9c:35:58:48:5a:e9:8e:9f:74:8e:42:fc:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:A3:4E:60:84:60:B5:30:E7:A8:FE:52:EC:01:56:56:D8:0F:61
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.95.0/24
143.14.190.0/24
143.14.248.0/24
155.117.207.0/24
155.117.241.0/24
167.148.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8b:97:f5:f6:9a:42:a6:e7:73:36:9a:88:47:fd:d2:d0:1c:
46:20:62:76:fa:ec:10:35:17:ab:b1:89:5f:76:b5:73:8e:2f:
23:42:b0:0b:21:31:3b:96:62:43:59:82:b3:56:98:c8:2f:8a:
8a:4c:64:60:76:40:00:5d:0b:6a:be:f0:71:dd:03:d5:59:54:
54:0f:c6:03:ce:0b:e2:28:ea:8e:f6:35:23:e2:73:e8:2d:bb:
28:8f:f7:fd:07:b3:35:76:7b:8b:79:e0:04:94:12:5b:cc:bc:
e6:9f:18:9e:06:7b:fa:1f:94:02:db:af:ce:c0:2e:ba:6d:3d:
6c:40:77:ab:91:22:b1:1d:44:aa:e4:83:66:90:1c:af:11:8f:
75:c2:f3:31:09:0d:0c:78:90:35:ae:8d:c0:da:3a:21:d1:5c:
70:00:5d:96:ff:ec:2b:c5:5a:7b:56:f0:7b:fd:d4:57:58:e6:
ac:22:aa:79:68:aa:58:23:ca:30:6c:24:af:9c:3b:90:4a:d3:
e3:7f:16:48:54:6d:10:d2:ea:27:8c:f7:10:29:3d:ad:61:db:
ee:9e:df:76:36:16:b0:1c:0e:05:8e:df:16:39:9b:43:1b:1c:
53:47:92:e8:c8:60:6d:84:c7:d4:c5:34:d0:e1:a6:90:0f:31:
ba:83:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:54 2025 by rpki-client