Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa
File: AS153564.roa (raw, json)
Hash identifier: LmAotZKr1ztlOmllw17Pax08/ywQpXtZIM94vRMzz5s=
Subject key identifier: 19:26:4C:BB:54:35:CE:B8:1A:8D:6E:2B:A4:32:3C:8A:0B:96:90:AF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 775E0F0C977FE63EE5E937867C05F669EDAB245F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa
Signing time: Sun 06 Jul 2025 14:42:38 +0000
ROA not before: Sun 06 Jul 2025 14:37:38 +0000
ROA not after: Sun 05 Jul 2026 14:42:38 +0000
asID: 153564
IP address blocks: 162.141.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5e:0f:0c:97:7f:e6:3e:e5:e9:37:86:7c:05:f6:69:ed:ab:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 6 14:37:38 2025 GMT
Not After : Jul 5 14:42:38 2026 GMT
Subject: CN=19264CBB5435CEB81A8D6E2BA4323C8A0B9690AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:7a:0e:01:52:3d:3c:5a:24:fa:94:59:82:
38:2c:4c:ef:07:8c:13:e0:8b:57:81:8e:7e:8b:f4:
e1:6d:c6:6d:1b:89:58:17:e9:6b:81:df:34:70:b8:
07:13:94:e5:fd:49:3e:0b:58:a7:b8:98:d0:27:c7:
22:60:cf:59:99:8d:29:da:c3:71:05:ef:91:43:17:
07:20:44:a0:2b:9c:a5:bb:af:8a:c7:85:94:a9:87:
68:d5:34:ea:9f:4c:17:6a:14:b8:d7:7d:31:d8:c3:
ec:58:ec:71:86:6f:43:9f:42:6b:36:72:58:5f:d8:
69:49:53:bb:61:22:de:50:f0:78:a3:dd:0a:bc:1d:
f9:a5:cc:80:6c:f3:23:1b:a6:c9:5a:10:38:93:73:
7d:27:3c:99:93:d1:f3:cd:8b:a4:b6:29:52:89:fc:
30:60:e3:ec:61:fd:26:33:a5:31:3a:99:4a:5c:ed:
44:10:29:81:7c:50:84:e4:39:60:72:21:42:6f:d0:
3a:f6:a3:6d:04:1b:5c:11:ba:cc:3e:02:9d:3c:65:
c6:99:ce:7d:20:cb:75:bb:a5:aa:60:51:a2:f6:ba:
bd:8a:3d:ab:76:42:94:ef:41:98:ef:dc:76:a8:b5:
e4:a5:10:f3:26:fb:ec:d5:d2:41:24:1c:af:eb:c0:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:26:4C:BB:54:35:CE:B8:1A:8D:6E:2B:A4:32:3C:8A:0B:96:90:AF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ac:d0:9c:55:6f:b6:ad:4c:d9:e7:c8:2c:be:6f:85:0e:90:
6e:75:3d:2d:00:05:3d:03:bf:a0:cb:c1:65:61:a5:61:66:50:
aa:75:68:7a:e3:f5:87:6a:39:17:17:9e:df:2a:01:2f:32:08:
c8:c6:d8:5d:0a:62:ba:36:77:3f:58:79:e7:36:03:b7:99:a2:
0d:8f:f9:df:3e:d8:62:e9:12:23:71:f6:be:55:60:56:27:a4:
97:b6:30:eb:4b:62:25:9e:c3:7b:00:f0:d2:47:26:e0:a1:d6:
5a:fa:e1:18:ab:80:7d:78:02:d5:6b:e7:09:ee:56:a0:b1:d4:
fa:88:20:e7:37:2f:cb:44:75:0b:69:b8:a9:5d:a3:ab:d4:5e:
f7:04:15:b2:6f:06:a3:8e:ed:8f:89:2b:21:d6:08:3e:38:c8:
3a:d6:6c:50:d5:5e:08:05:ab:16:5a:9b:ad:6e:9c:d0:61:54:
59:af:05:52:18:07:ab:bd:84:4f:aa:1c:48:28:c8:61:06:d2:
9b:0a:5a:f2:87:18:fe:21:6f:9a:54:b8:14:33:4f:81:b8:05:
28:64:60:6e:cb:06:18:28:8a:ec:27:5e:8b:9a:c7:55:75:5c:
b1:18:3d:1e:89:21:34:31:66:a9:11:3d:4b:c1:09:34:ce:1b:
b4:ae:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:57:50 2025 by rpki-client