Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS56655.roa
File: AS56655.roa (raw, json)
Hash identifier: d02/SRxfKsf68ZaCe69jPojIa4QT9L/gVAaOi23Lb2Y=
Subject key identifier: 8F:83:A7:10:F1:5B:D4:97:11:CB:8A:6B:49:82:83:FB:6E:42:20:74
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5307B5FDED8A2507A63B5E98E4366E500C7E531D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS56655.roa
Signing time: Fri 04 Jul 2025 10:42:41 +0000
ROA not before: Fri 04 Jul 2025 10:37:41 +0000
ROA not after: Fri 03 Jul 2026 10:42:41 +0000
asID: 56655
IP address blocks: 143.14.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 03:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:07:b5:fd:ed:8a:25:07:a6:3b:5e:98:e4:36:6e:50:0c:7e:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 4 10:37:41 2025 GMT
Not After : Jul 3 10:42:41 2026 GMT
Subject: CN=8F83A710F15BD49711CB8A6B498283FB6E422074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:bc:3e:9d:c7:b8:bf:87:63:b5:00:d8:f9:
20:a9:02:04:87:86:29:13:4b:9e:1d:68:b3:34:f4:
56:b7:6a:ee:0e:7f:94:05:de:05:8d:ae:f4:13:62:
24:b2:57:72:e2:0f:00:2a:89:31:aa:62:ed:b0:8b:
58:c0:d5:8c:c4:62:69:28:f0:9d:82:95:2a:5b:78:
45:fb:a9:59:b4:f2:38:fa:bb:97:31:b8:12:b5:12:
bd:1d:92:9e:d4:e0:85:ff:e5:e8:fb:dc:ea:f9:20:
63:1f:1a:d0:1d:c5:04:20:e3:d4:af:e8:7b:0d:ed:
b7:34:70:d8:04:9a:19:bd:99:d9:bc:8c:82:92:c8:
33:8d:28:66:27:a7:00:61:0e:d3:79:3a:74:bf:11:
6a:3e:9c:48:88:4b:5b:75:f1:43:c3:d8:01:91:6f:
a5:e2:5c:69:f6:75:c2:80:0e:1b:2e:09:e0:5d:57:
de:34:8c:4a:c4:af:19:b9:18:0c:d9:57:58:73:df:
9c:d5:dd:0d:43:e0:a1:8f:94:62:42:90:27:88:b6:
86:10:fb:35:0d:0b:ca:02:b9:ec:f8:b3:7b:03:35:
04:97:e8:62:0d:83:ad:e7:42:69:9b:16:ae:b0:9d:
b8:92:fc:76:49:57:2d:92:7d:7c:83:b9:33:0a:1e:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:83:A7:10:F1:5B:D4:97:11:CB:8A:6B:49:82:83:FB:6E:42:20:74
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS56655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:86:7e:fd:0e:94:ce:29:a0:b4:45:27:6f:78:66:ae:e7:46:
20:58:3e:2c:5f:43:64:bc:ab:19:fc:bc:f7:95:9a:8b:0e:a9:
b8:03:0c:44:7c:0c:ec:53:60:39:0d:3e:8a:7f:09:0a:23:b9:
43:41:72:fc:10:14:d3:50:d7:97:e3:5b:6c:c3:90:39:5b:d2:
cd:75:65:87:40:6e:23:e5:3a:e7:4c:90:ba:ae:b1:df:68:19:
58:d2:8b:5d:37:db:fa:9e:1c:9e:11:77:53:6b:36:27:63:35:
86:db:a3:18:98:86:81:de:f3:b7:80:a0:f5:aa:87:bc:3c:3d:
26:53:85:75:23:0b:07:7e:63:8c:2d:ea:6d:b4:da:62:c3:9c:
a9:5f:73:91:ae:2d:42:49:16:8b:60:b3:b8:09:71:ee:f3:1e:
ba:42:9a:24:b8:b9:0b:68:23:dc:65:c9:4d:08:f0:e5:b7:c4:
12:59:f7:3d:99:de:f5:b1:5f:a5:8c:db:64:d1:4c:b9:ea:81:
64:c4:e0:a9:5e:a6:b2:0d:18:71:e6:92:ad:64:24:6a:80:a9:
1c:90:23:3a:3d:9a:b4:da:3e:71:0c:41:53:3c:6a:e6:4f:76:
9d:4d:ec:08:5a:54:f5:aa:82:a2:45:2e:ca:03:cf:e5:aa:b7:
c4:fd:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:04 2025 by rpki-client