Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35545.roa
File: AS35545.roa (raw, json)
Hash identifier: KOgi0DzwgCdmTb3DoXck8Tz83Z8jD+SBnxYrSY49NDQ=
Subject key identifier: 68:27:8C:17:66:56:19:82:E1:29:14:7B:69:A3:5F:D9:F6:21:B3:D7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 618AD032C1E6E1EF41710F35717945C265124A6E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35545.roa
Signing time: Mon 14 Jul 2025 22:28:59 +0000
ROA not before: Mon 14 Jul 2025 22:23:59 +0000
ROA not after: Mon 13 Jul 2026 22:28:59 +0000
asID: 35545
IP address blocks: 143.14.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8a:d0:32:c1:e6:e1:ef:41:71:0f:35:71:79:45:c2:65:12:4a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 22:23:59 2025 GMT
Not After : Jul 13 22:28:59 2026 GMT
Subject: CN=68278C1766561982E129147B69A35FD9F621B3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:34:80:9d:91:97:b7:70:f5:f1:0d:6a:3f:
a4:eb:42:ad:91:7a:2f:3e:4a:68:62:4c:01:43:9f:
52:26:80:3c:aa:9e:00:0d:5a:3c:03:d2:b8:70:97:
95:ee:ea:a5:5e:2c:55:26:25:42:eb:78:d1:97:ed:
0a:da:90:1c:6c:ca:5a:c1:08:52:6e:04:27:2e:f2:
3f:86:d7:ad:1f:01:2f:55:8c:d4:10:d0:58:bf:a9:
aa:7c:6a:41:35:ad:2c:a2:86:fd:ca:e7:ce:8e:f5:
ea:a9:3b:60:4d:d9:bc:17:60:0d:ef:db:de:04:d3:
8c:aa:f3:c8:14:38:e4:0f:1c:af:08:51:7e:36:72:
d9:14:d7:7d:fa:0d:9b:8b:23:3c:da:e8:56:e1:92:
2b:ba:43:6c:0c:da:92:1d:d4:25:ec:44:16:26:15:
bf:1b:81:fe:17:01:00:e5:14:b8:b4:b3:e7:67:e0:
05:9f:e3:82:a5:15:64:e2:1d:b7:2d:c0:3e:0a:14:
53:76:0c:cf:c7:88:ea:50:bd:0b:71:fb:43:ee:29:
4c:82:d7:09:29:2f:ab:b2:e6:9f:74:6a:20:9a:27:
93:5a:51:11:7f:e3:90:e0:6e:94:33:90:f8:1a:c9:
02:71:e5:31:da:57:58:23:dd:ac:07:ed:31:28:77:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:27:8C:17:66:56:19:82:E1:29:14:7B:69:A3:5F:D9:F6:21:B3:D7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5f:f3:f1:d5:d6:ab:55:64:d4:84:fd:b3:e8:61:4f:e2:2d:
b1:36:49:28:1e:d5:c8:54:3a:50:92:50:30:30:ce:9e:10:a2:
cc:95:40:3a:ae:49:3c:50:f9:b1:ad:71:7a:b2:dd:28:4e:30:
61:18:15:e1:31:e1:30:64:7b:48:9f:96:da:fc:1a:a9:b8:53:
e3:25:00:05:5c:d4:48:c9:0a:54:60:a5:cb:18:4a:8c:06:e3:
c3:0e:fd:03:36:f5:e7:6f:26:a9:7a:cd:60:6a:ce:da:83:09:
49:06:02:a2:0f:fe:cb:ba:b7:e0:6a:c6:33:27:ec:5b:3a:82:
cc:94:37:a2:38:b1:ac:a9:3a:b1:75:c6:30:f4:a2:97:77:16:
c3:58:fd:61:5f:cb:6f:e5:5e:b9:97:4c:2d:f4:da:88:25:e5:
97:00:16:d7:ee:f8:1b:78:49:9f:2e:ad:14:96:9b:f5:85:3d:
62:40:10:6f:67:02:7a:fe:f7:9c:34:1a:b3:27:fc:e4:bc:6c:
8d:64:ae:7c:64:b2:ee:87:9f:f5:84:20:2a:f2:09:a3:d6:5e:
43:3a:a5:c0:0c:f1:68:20:4a:a4:59:17:63:18:a4:03:e7:fe:
18:af:bc:3b:cd:08:ca:bf:61:e9:b8:1d:88:af:a1:a4:52:fa:
d1:b3:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:57:54 2025 by rpki-client