Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272547.roa
File: AS272547.roa (raw, json)
Hash identifier: xixupgPAASfydr7OnfMD9LncSOE/QuPGA6RkEyMn5Fk=
Subject key identifier: 9B:DC:F8:DB:D8:A3:CF:E2:04:39:B2:23:C5:1B:CB:76:D0:E4:60:BC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74F1D232488C39FC2BCBF96F1CB3459700E64319
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272547.roa
Signing time: Wed 02 Jul 2025 16:21:44 +0000
ROA not before: Wed 02 Jul 2025 16:16:44 +0000
ROA not after: Wed 01 Jul 2026 16:21:44 +0000
asID: 272547
IP address blocks: 162.141.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f1:d2:32:48:8c:39:fc:2b:cb:f9:6f:1c:b3:45:97:00:e6:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 2 16:16:44 2025 GMT
Not After : Jul 1 16:21:44 2026 GMT
Subject: CN=9BDCF8DBD8A3CFE20439B223C51BCB76D0E460BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:30:42:c0:fc:bd:5e:9a:15:99:c8:ce:42:
47:e5:94:7a:c8:7c:dd:d6:fb:46:55:ed:28:df:e6:
da:b8:80:4a:2f:73:65:e4:80:52:5d:ab:f4:d6:ff:
dc:b2:47:e6:99:50:50:75:98:9a:2b:48:a8:99:01:
c8:16:b3:fb:d6:ac:89:c8:ac:e8:7a:2d:93:2b:ef:
f5:a5:73:e1:f3:49:eb:99:53:63:9f:00:9f:08:82:
8f:45:5a:2a:5f:62:3e:ef:e7:c2:c2:8c:54:23:98:
aa:65:ae:b1:fe:ae:13:32:33:d4:9b:fd:fc:8c:5d:
50:fd:ac:e3:20:da:10:c2:7f:08:b2:22:80:97:e0:
b1:8d:29:f5:8f:8c:22:fe:77:9a:32:bb:c0:cb:4e:
62:b0:a6:2e:8d:6f:8c:2f:b3:53:0b:19:6b:25:93:
85:b7:e3:2a:60:f1:7f:02:46:3b:39:4f:8a:b9:c5:
63:6a:a2:da:a1:ba:4d:65:92:04:56:68:c3:47:9c:
22:5e:08:48:2b:fc:a6:6e:6b:d2:9e:ab:12:88:b5:
11:74:d0:f5:da:55:2e:c3:14:fd:eb:0f:ce:17:8b:
40:f3:2d:ab:4c:b8:a2:4a:3f:61:19:8e:9c:1f:ec:
5e:b5:50:0a:87:ff:dc:58:40:e7:55:d3:53:da:92:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:F8:DB:D8:A3:CF:E2:04:39:B2:23:C5:1B:CB:76:D0:E4:60:BC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.110.0/23
Signature Algorithm: sha256WithRSAEncryption
63:d7:7f:60:9b:f6:af:eb:63:f9:19:32:b8:58:48:d5:13:cb:
96:ac:b8:6a:cd:9c:9f:38:a8:bd:71:32:13:5e:0b:e5:df:a4:
1f:0f:c2:b2:fe:a9:a4:68:c2:99:72:9b:b0:23:c7:9c:4c:57:
9e:d7:7c:1d:12:0c:98:09:ca:d0:23:3a:90:e6:fc:ff:13:f4:
57:4f:03:15:c7:f4:48:eb:ee:d7:b6:dd:32:4b:be:6a:3a:8a:
16:3a:26:a3:9f:9b:5b:fb:9b:25:fd:a9:0c:c6:48:c6:45:c9:
5d:38:fc:13:16:d4:35:d7:10:ac:5d:12:d2:42:c5:cc:5e:7d:
e3:dc:ae:79:9e:6e:28:96:1d:f6:dd:65:c6:c9:74:50:9e:bd:
7c:89:e4:3f:9d:b3:5a:65:a7:ab:6a:03:7c:35:80:a7:37:62:
af:a7:13:00:03:e7:3f:4e:01:99:d7:f5:aa:14:02:d4:44:51:
8a:ca:89:53:5d:fc:0f:69:c4:1a:2e:4e:d3:c8:c6:5a:f9:5d:
ac:2a:35:dd:98:00:42:af:d7:8d:9d:f3:2e:7d:39:c9:15:d3:
2c:16:5c:4d:1a:db:39:cd:f7:e7:7c:96:f8:0e:a4:58:ff:99:
1f:12:c3:ef:ba:da:2e:e0:12:15:b8:a7:0d:83:1c:c7:49:b3:
c6:e2:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:01:31 2025 by rpki-client