Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: vS6qzzw6J5ZkMA4WSfbEyHlI0Aek1eTOdP9pbzliiXs=
Subject key identifier: 17:B6:FE:FE:1F:EA:60:CD:09:63:C9:2E:B0:A2:B5:E1:93:F1:DB:08
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 252A0D386534DC3C850A35DA627254208115F9F3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395374.roa
Signing time: Mon 14 Jul 2025 09:34:11 +0000
ROA not before: Mon 14 Jul 2025 09:29:11 +0000
ROA not after: Mon 13 Jul 2026 09:34:11 +0000
asID: 395374
IP address blocks: 143.14.255.0/24 maxlen: 24
162.141.4.0/24 maxlen: 24
162.141.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2a:0d:38:65:34:dc:3c:85:0a:35:da:62:72:54:20:81:15:f9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 09:29:11 2025 GMT
Not After : Jul 13 09:34:11 2026 GMT
Subject: CN=17B6FEFE1FEA60CD0963C92EB0A2B5E193F1DB08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:82:1f:67:cd:92:b2:88:b0:9d:0a:8b:70:
21:9f:58:2f:4b:4f:66:99:1d:f6:32:b7:39:79:78:
c7:fa:90:db:ba:80:6e:3e:d0:c9:01:f6:ba:d4:0a:
1d:08:51:a8:04:dc:ee:46:4c:3b:5a:72:03:dd:eb:
70:0f:67:64:63:80:99:c8:a2:ec:33:b2:0a:cb:d7:
cf:29:21:8e:7b:ac:fa:73:b7:9d:a5:a8:08:de:19:
b8:d8:9f:aa:0c:93:8d:ea:3e:e6:a3:2f:53:79:d2:
d5:11:c9:c2:49:65:b5:60:05:a6:cb:12:2a:79:33:
f4:22:1d:05:7a:43:cc:90:6b:8a:2f:ae:63:07:8b:
30:a9:75:33:84:05:ea:50:a3:a0:10:d3:bf:b6:49:
37:cd:b3:2b:6f:7d:d1:e7:e9:01:b8:d5:b1:fb:2e:
a0:3f:99:fb:84:8f:40:ae:66:51:1c:c1:64:a0:d0:
d0:d6:c8:21:9e:d0:23:df:28:7f:1a:5c:16:64:b2:
bf:10:57:5c:0c:b7:14:87:d1:fb:da:20:52:d1:e5:
44:f2:f4:ff:3b:d2:03:63:75:4d:bc:e9:3a:2e:85:
95:80:5a:4e:62:9b:28:36:9f:55:c5:44:55:2a:e1:
82:66:4a:80:40:b5:4d:32:a7:70:ad:81:85:e2:d3:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:FE:FE:1F:EA:60:CD:09:63:C9:2E:B0:A2:B5:E1:93:F1:DB:08
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.255.0/24
162.141.4.0/24
162.141.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4a:1c:41:f6:90:db:c3:60:cd:ad:c5:cb:d0:81:7c:6f:d8:
ab:10:22:3b:f0:ac:99:24:7e:2f:9c:39:15:1d:23:6f:6f:5b:
4f:9f:04:26:b8:c6:db:2d:41:c5:23:48:a4:3b:4f:c8:b4:b3:
6d:9f:4a:8c:0c:20:98:b0:3b:c2:d5:ea:d7:1e:17:26:74:07:
dc:61:73:3b:86:bb:1b:ea:ce:89:01:9a:78:7c:74:18:2c:d3:
54:eb:81:13:58:f7:27:23:09:60:c2:68:34:71:61:5f:7f:61:
02:52:5f:e3:9d:c1:06:b8:c8:8d:26:4b:65:b5:38:cd:69:9e:
f0:ad:8d:95:e0:d5:e0:f7:1d:3e:2c:f1:25:d7:1f:fd:2c:b2:
fd:1b:55:d0:4e:f7:4d:54:6a:85:4b:c4:f7:77:ff:99:3e:fd:
e4:99:da:7f:4a:b8:6e:75:ae:b7:d2:95:13:8e:14:16:33:c6:
00:4d:59:0e:0f:15:04:36:ca:e5:e9:56:44:9e:e4:a6:cc:54:
f1:3d:1e:40:58:28:ab:b2:83:75:0b:76:dc:69:20:4d:54:5f:
0c:32:06:65:34:bf:c5:a6:08:1b:9a:2d:73:70:bb:e3:f9:25:
3e:92:25:ab:a0:1f:0b:71:00:ec:10:ae:53:2a:2b:d3:db:0b:
6f:9c:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:58:48 2025 by rpki-client