Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53850.roa
File: AS53850.roa (raw, json)
Hash identifier: eDsd9IteURov3ig0J3LQEIITJbBcEYBEPFLMzouLHzU=
Subject key identifier: DE:1B:F5:CA:5E:C6:F5:CD:2D:71:3E:02:46:06:01:63:C0:79:12:61
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1DEE5384E6EF8909352DDB8D292C07AC588E7D39
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53850.roa
Signing time: Thu 10 Jul 2025 17:10:30 +0000
ROA not before: Thu 10 Jul 2025 17:05:30 +0000
ROA not after: Thu 09 Jul 2026 17:10:30 +0000
asID: 53850
IP address blocks: 155.117.161.0/24 maxlen: 24
167.148.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ee:53:84:e6:ef:89:09:35:2d:db:8d:29:2c:07:ac:58:8e:7d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 10 17:05:30 2025 GMT
Not After : Jul 9 17:10:30 2026 GMT
Subject: CN=DE1BF5CA5EC6F5CD2D713E0246060163C0791261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c3:7a:e1:b2:96:61:06:ad:80:41:83:a0:28:
9f:fb:b0:2e:17:96:f9:f7:74:2d:12:8c:89:91:1f:
93:6d:95:b4:b5:b4:15:13:34:ee:34:ac:ed:b6:8c:
4f:df:4e:ef:e7:f6:7c:f1:0c:de:fe:5d:8e:7b:23:
4e:a9:d5:02:4b:9f:49:61:1e:bb:b9:94:51:e1:54:
71:e6:be:22:6f:a8:2b:98:e9:07:96:81:ab:51:02:
05:2b:c5:df:bd:3b:76:10:63:09:50:dc:eb:bf:11:
f9:bf:98:e6:c1:4f:a9:60:68:ac:dd:87:45:a7:94:
94:8d:f1:21:f2:8c:1c:ac:6d:c6:73:a9:89:74:de:
cb:b2:c2:1d:1a:dd:2a:1f:d6:56:c8:d1:a1:64:6e:
db:12:64:d0:81:56:df:0f:67:7e:80:5f:0d:30:17:
88:14:fe:8d:cd:c7:97:55:ad:df:98:ba:92:cf:54:
95:7e:3f:6f:82:78:0b:05:a9:a3:aa:cd:fc:66:9a:
6c:77:c1:31:a3:64:5f:ed:c7:19:29:a9:23:07:cd:
9e:92:51:e3:23:74:99:9e:18:e4:46:cf:79:ef:f3:
a4:bb:31:03:d6:04:17:fa:47:4f:53:0a:e7:66:00:
22:ca:54:d8:f8:9b:5b:da:22:f0:35:14:c9:c0:24:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:F5:CA:5E:C6:F5:CD:2D:71:3E:02:46:06:01:63:C0:79:12:61
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53850.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.161.0/24
167.148.167.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a4:0a:44:5f:e9:6b:ef:e4:18:e3:25:25:02:d7:88:19:9d:
96:4f:bc:72:d9:d5:e7:1a:56:46:d6:6c:09:00:4b:03:26:30:
77:4b:d8:ba:bd:f9:a3:c4:e7:17:79:c5:f7:5a:86:63:66:2a:
6e:1a:b1:c3:31:10:23:cd:09:4e:f0:2f:2a:7a:8c:f8:c6:64:
95:a5:41:b8:72:76:59:ba:6a:38:03:d4:91:8a:70:30:da:a2:
fb:b8:46:f4:0a:fd:68:c8:62:fc:fb:78:55:48:31:76:d6:8a:
05:64:5d:9f:b1:5c:d6:c7:23:1b:85:fd:f9:15:3b:e3:46:4c:
1a:10:29:76:a4:a0:e3:45:69:9e:91:7d:00:51:5b:e5:bb:de:
7d:18:85:4d:b7:f7:6d:74:4b:be:5d:d4:2b:b7:f2:f5:ff:47:
04:bb:f8:21:4d:b7:52:4e:95:f5:fe:b4:46:3d:f1:95:d1:0d:
9d:ef:65:43:4d:b0:26:7f:ce:42:23:01:12:b8:3f:c8:1d:0a:
53:da:0b:fe:65:00:d7:d6:86:6f:fe:f3:11:99:eb:b9:f3:f4:
26:7f:84:39:b8:39:1e:b6:e3:c8:5f:73:f9:66:b2:59:99:87:
67:89:f6:68:bd:61:88:b7:51:d9:09:52:44:a9:50:a4:31:31:
a6:20:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:58:57 2025 by rpki-client