Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: 8U/W1YMZh/IRzKP7ADdZUvHHF1hRWUKtomojxY3MAY4=
Subject key identifier: 64:7E:44:B4:DD:32:8F:D5:48:F4:9C:8D:B6:4F:EA:3A:F7:0D:DF:DD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0C6EC12E8D442FFA7C8631C46422F3C76CAC6845
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
Signing time: Mon 07 Jul 2025 15:57:04 +0000
ROA not before: Mon 07 Jul 2025 15:52:04 +0000
ROA not after: Mon 06 Jul 2026 15:57:04 +0000
asID: 397423
IP address blocks: 143.14.180.0/24 maxlen: 24
145.223.44.0/24 maxlen: 24
145.223.54.0/24 maxlen: 24
145.223.58.0/24 maxlen: 24
146.103.5.0/24 maxlen: 24
150.241.226.0/23 maxlen: 24
155.117.232.0/22 maxlen: 22
155.117.246.0/24 maxlen: 24
167.148.158.0/24 maxlen: 24
167.148.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6e:c1:2e:8d:44:2f:fa:7c:86:31:c4:64:22:f3:c7:6c:ac:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 15:52:04 2025 GMT
Not After : Jul 6 15:57:04 2026 GMT
Subject: CN=647E44B4DD328FD548F49C8DB64FEA3AF70DDFDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:b6:be:ab:2e:8c:e4:71:cb:a5:09:7c:e3:
d2:dc:c4:d0:98:99:af:ea:5a:3f:3f:8c:7d:06:45:
8e:c2:04:a2:9c:1d:dd:b5:5f:25:2b:f7:fa:91:a6:
10:a5:f5:74:37:df:29:f8:75:fb:f7:5a:25:b6:89:
72:84:a0:01:27:da:ff:0d:5d:85:ee:ab:9b:5e:60:
73:62:9e:6b:5a:ab:cf:74:c8:03:36:e3:33:06:12:
30:26:98:32:45:d1:73:4f:e9:4e:03:ae:2d:68:d6:
1d:3f:23:6a:2e:25:1d:aa:10:8d:aa:07:fc:4d:f2:
c9:60:e9:17:28:81:91:08:f8:d2:0e:b6:3c:50:bd:
00:59:2f:80:27:94:a3:66:31:80:79:a4:ae:03:2d:
f2:3d:77:86:0d:22:f0:9f:59:22:99:3a:4c:52:c9:
c9:4f:88:7f:6b:ae:96:e6:c4:6d:ba:87:31:fd:2f:
67:c6:41:5d:9a:1e:b7:d2:67:a8:b0:9b:36:97:63:
31:82:42:06:77:fb:8d:3a:68:e1:14:fb:7b:cd:b7:
17:c4:f0:05:c2:b3:77:35:a9:81:f9:6b:36:60:8c:
65:4f:10:ec:f9:ce:04:74:17:6e:c7:69:4e:c0:76:
62:a2:50:e9:18:33:f1:d9:0b:42:40:3f:a4:d4:99:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:44:B4:DD:32:8F:D5:48:F4:9C:8D:B6:4F:EA:3A:F7:0D:DF:DD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.180.0/24
145.223.44.0/24
145.223.54.0/24
145.223.58.0/24
146.103.5.0/24
150.241.226.0/23
155.117.232.0/22
155.117.246.0/24
167.148.158.0/24
167.148.200.0/21
Signature Algorithm: sha256WithRSAEncryption
21:b9:a1:7a:d0:7a:9f:0c:e0:b4:3b:a2:71:6b:6d:d3:e6:59:
03:99:80:8d:aa:ce:4c:3a:b8:fb:f8:23:5b:5f:80:96:b0:d1:
c2:63:44:82:f8:c7:3b:e8:54:ab:b0:04:74:f8:61:b9:e2:ef:
af:9e:50:f6:c6:36:f3:88:34:54:b0:ff:82:02:b6:6a:50:41:
88:e0:38:f6:f7:d0:18:09:d9:33:fe:31:d3:cb:24:81:13:6b:
f2:96:ad:aa:2c:88:a6:f8:03:48:6d:49:bc:c4:ca:d7:49:ed:
bd:d6:78:5b:cf:4f:7a:d0:2c:90:a7:00:30:96:2e:2b:87:5b:
9b:27:9d:a7:b0:9f:7b:64:a6:3c:9b:40:c3:bc:79:6c:d4:64:
27:7e:97:51:c2:23:88:59:05:6d:f8:01:1c:70:e7:06:9a:80:
8a:aa:2f:fa:60:89:55:3c:50:86:1e:bd:25:06:d2:06:18:e7:
08:c9:9b:6c:4a:72:3e:fe:2f:d1:25:a4:7e:e9:94:8f:2e:6e:
01:0e:e3:54:5f:59:66:f5:3b:ec:c8:97:d9:c5:f9:f8:ab:38:
5c:3a:b4:bc:2c:c8:9b:01:25:d0:85:8c:f5:30:40:ce:a6:5f:
ed:e0:89:62:83:bc:87:b4:6c:ad:27:ae:3e:31:d1:a0:12:a8:
17:97:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:01:36 2025 by rpki-client