Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: J/rS3i87FKtE1QH3J24b+Y3ogFEayPloc4R1Qs7L980=
Subject key identifier: 6E:81:FA:8B:82:58:F5:95:2D:9D:DC:03:47:1F:0D:3A:45:1B:23:97
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7762649E02C2FFEB31C24AD050C768D79A78C365
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
Signing time: Mon 21 Jul 2025 22:38:34 +0000
ROA not before: Mon 21 Jul 2025 22:33:34 +0000
ROA not after: Mon 20 Jul 2026 22:38:34 +0000
asID: 20473
IP address blocks: 148.135.172.0/24 maxlen: 24
150.241.208.0/24 maxlen: 24
150.241.216.0/21 maxlen: 24
150.241.234.0/24 maxlen: 24
162.141.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:62:64:9e:02:c2:ff:eb:31:c2:4a:d0:50:c7:68:d7:9a:78:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 21 22:33:34 2025 GMT
Not After : Jul 20 22:38:34 2026 GMT
Subject: CN=6E81FA8B8258F5952D9DDC03471F0D3A451B2397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:47:37:22:a4:2f:be:64:c2:4b:f2:4e:a2:
3c:45:9b:c3:56:73:4f:82:0e:e6:a3:ca:b3:9c:33:
bb:a7:9c:60:75:29:0e:b0:84:3c:60:80:41:47:de:
8d:f6:c2:2d:2c:6f:97:95:e1:c5:75:5c:91:49:0f:
72:94:99:d8:1f:bf:c2:c8:f7:1a:e9:6c:cd:d4:34:
23:42:9e:c1:b5:4c:19:08:63:46:f5:e2:8a:0a:55:
75:fb:9f:59:88:7d:00:24:1f:e7:e5:fd:02:24:d8:
6f:05:71:4f:a8:5d:90:e7:5d:e8:ed:71:ad:fc:2c:
b0:4d:64:95:ce:f6:39:7e:b1:cf:09:d9:c7:2d:ec:
d0:66:c6:47:15:ee:00:25:9e:a6:3d:6f:c3:fe:c7:
73:1f:91:96:d5:04:de:7c:11:9a:6d:c6:55:5a:b9:
e2:3e:36:31:3d:7a:c8:7f:e0:7e:1c:a2:b5:40:26:
15:34:de:61:e5:89:87:05:25:13:40:e0:24:6f:74:
bb:88:c0:12:fb:45:53:35:25:77:bd:04:a8:9c:b1:
0a:13:94:14:05:70:05:61:cc:01:94:ca:df:85:41:
6e:96:04:c3:ae:e8:37:2e:a3:4b:c1:20:ea:83:f8:
f4:75:ef:a9:b6:d3:4a:fa:7e:f8:b2:f4:8b:82:e1:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:FA:8B:82:58:F5:95:2D:9D:DC:03:47:1F:0D:3A:45:1B:23:97
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.172.0/24
150.241.208.0/24
150.241.216.0/21
150.241.234.0/24
162.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d4:c2:81:22:cc:b0:c5:88:00:f1:79:3f:c3:3b:87:ec:da:
6a:59:b5:8c:be:e9:39:69:4a:49:12:b2:a3:10:e3:a4:3d:8e:
e7:40:b6:51:36:d0:87:de:0f:32:e0:c9:19:ed:a8:8e:a1:da:
91:81:66:50:e1:a9:9f:0b:e2:fc:79:94:b1:44:10:0f:d9:de:
82:38:ff:d3:76:1f:e5:60:00:d4:38:5a:f7:b4:8d:17:96:0c:
40:47:0d:85:72:c4:30:ce:98:6d:56:42:23:6a:08:3e:5d:dd:
1a:9b:1e:ab:40:69:2c:44:6a:ff:1c:d4:89:ec:bc:b4:bb:c1:
07:9d:8f:10:08:7c:f3:4f:b0:26:51:fc:43:cf:06:72:20:6b:
c5:01:05:36:e4:b9:d8:95:a5:20:2a:f5:f2:05:6c:27:74:29:
86:e1:ef:9a:93:5b:c9:89:5d:21:69:23:8b:fd:c4:4f:1e:fe:
f9:80:1b:8b:e7:ad:c7:e5:a4:dc:0c:78:fe:f8:18:d5:5c:35:
53:0b:51:c7:1b:ab:7b:a6:51:77:8e:2f:bb:4b:0d:af:bb:1f:
54:77:5c:23:e7:0c:a5:48:ed:f0:36:aa:c3:1b:aa:52:da:5a:
72:8d:18:a3:d8:35:06:e4:8e:28:ec:eb:b1:ea:09:b1:35:63:
63:27:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:00:37 2025 by rpki-client