Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: 0g1CiPAaletIHaFQLl5RsJhTXWL3zrT39vvA4r6lmeA=
Subject key identifier: 16:1C:9D:C8:01:1E:86:11:2C:E1:8C:C2:00:07:46:31:86:2E:0D:33
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1C7D75FFD5CC62EF551CF6F246EA25081A0BFCA6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
Signing time: Tue 08 Jul 2025 19:15:21 +0000
ROA not before: Tue 08 Jul 2025 19:10:21 +0000
ROA not after: Tue 07 Jul 2026 19:15:21 +0000
asID: 63023
IP address blocks: 96.62.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 00:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7d:75:ff:d5:cc:62:ef:55:1c:f6:f2:46:ea:25:08:1a:0b:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 8 19:10:21 2025 GMT
Not After : Jul 7 19:15:21 2026 GMT
Subject: CN=161C9DC8011E86112CE18CC200074631862E0D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:5c:e9:00:5d:f1:2f:ac:c9:af:6b:eb:e4:
58:fc:a3:17:49:75:cc:23:ad:66:8d:7c:d2:69:15:
7d:a7:0b:7a:4d:2d:9a:b1:db:d4:bc:09:45:fe:c3:
34:1a:97:98:33:eb:01:4a:2f:34:07:92:28:0c:b1:
b8:66:ee:24:79:3e:a7:53:8b:e5:3c:34:98:db:b0:
97:d7:94:9a:c4:22:2d:9b:ca:01:23:f9:ec:fa:24:
82:01:b1:da:36:f6:90:c2:01:fb:e9:00:c6:a1:e5:
b6:6f:00:f8:9f:70:6a:24:52:aa:2c:c9:e1:86:e4:
5b:fa:64:4a:a6:dc:42:b3:b8:99:af:98:f5:c5:ac:
86:80:b4:cb:d4:a2:87:be:b7:0d:a5:e4:42:bf:b3:
b6:10:07:56:be:8e:79:71:59:03:02:4e:52:82:3c:
3d:a2:60:d6:ec:41:06:fe:d1:e0:51:08:17:b5:9b:
ec:f9:db:ed:49:30:1e:9c:0e:2b:8f:bc:bc:f6:2d:
e1:e6:bf:6b:b8:32:79:d4:01:75:34:37:75:64:84:
28:ef:ce:e5:f0:9e:99:e2:a6:0f:30:8b:7e:4c:a6:
b5:86:27:f1:d6:4d:f4:7e:bd:12:7e:97:b8:08:7b:
c4:c8:60:d4:f3:56:bb:11:84:e6:6f:cc:c2:88:01:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:9D:C8:01:1E:86:11:2C:E1:8C:C2:00:07:46:31:86:2E:0D:33
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:17:49:bb:0a:5d:50:e0:6a:96:7d:1e:91:88:62:cc:6a:5a:
10:b4:e2:d2:99:da:d4:9e:1b:0b:f7:2f:cc:99:cf:4e:11:fc:
8b:a0:86:f8:40:48:49:36:5c:1d:f8:0c:64:b7:a3:73:87:7a:
25:16:0d:b1:ee:dc:3b:43:36:a0:a7:da:98:a8:5c:35:47:f7:
c1:8b:b0:53:63:8c:47:3f:15:97:e1:25:23:c8:c7:41:ec:73:
6e:33:fd:6b:7f:7f:56:76:3b:6c:bc:1c:b2:8a:b2:7e:a6:84:
57:7b:c8:da:84:fe:04:1a:7a:e1:3f:87:b1:3b:fe:16:ee:2e:
8c:f5:87:63:02:d3:96:26:e2:52:b6:05:d6:62:94:12:d7:8b:
d1:20:24:5d:32:77:25:73:a0:9d:3e:2e:bf:ae:fe:ff:8e:ee:
65:7e:41:7b:93:bd:45:6f:46:04:fb:e4:f1:64:2d:10:c5:89:
6d:e0:93:7b:f0:f0:f8:e4:da:13:46:57:1d:75:f9:c3:5e:aa:
ec:94:da:2e:a5:ed:33:1c:53:f2:88:e8:14:61:93:79:ae:96:
08:e4:8b:9a:b8:4a:75:15:7f:cd:10:13:ff:7f:22:ce:3c:0c:
5f:22:f4:83:73:35:a1:a1:ea:78:ac:8d:d6:36:ea:56:f2:1c:
9c:2f:76:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:58:16 2025 by rpki-client