Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
File: AS63150.roa (raw, json)
Hash identifier: mI5VdIWKImoo6ObjSXbHtkQ/lnOk1ueO737nkZqS0hI=
Subject key identifier: 93:19:94:19:A5:50:6B:69:56:02:DC:6D:41:6D:2B:9D:49:0B:BC:97
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 085D5BEB76AC049A786C6248672CE6491382CB5D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
Signing time: Mon 07 Jul 2025 15:44:33 +0000
ROA not before: Mon 07 Jul 2025 15:39:33 +0000
ROA not after: Mon 06 Jul 2026 15:44:33 +0000
asID: 63150
IP address blocks: 143.14.13.0/24 maxlen: 24
148.135.184.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
155.117.18.0/24 maxlen: 24
155.117.19.0/24 maxlen: 24
155.117.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5d:5b:eb:76:ac:04:9a:78:6c:62:48:67:2c:e6:49:13:82:cb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 15:39:33 2025 GMT
Not After : Jul 6 15:44:33 2026 GMT
Subject: CN=93199419A5506B695602DC6D416D2B9D490BBC97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:02:e4:2f:cf:ee:ac:f0:ed:9c:c5:cd:d8:
f7:90:1c:4b:2a:99:30:b2:d7:d2:1b:ba:d7:fc:e0:
48:55:e2:0a:32:0b:53:3f:45:00:70:29:71:c1:c9:
22:10:cc:dc:8e:2f:7e:49:ef:9a:3b:58:eb:d9:d4:
b6:8b:85:66:42:31:ad:7e:0b:93:8e:90:e4:b6:0b:
83:df:0b:05:6f:39:23:d7:43:97:39:ce:c2:52:a8:
4d:d3:63:4d:f1:98:8f:6d:f8:74:73:80:ad:4b:58:
7a:d3:d3:35:2a:8c:eb:ae:4c:90:a1:d6:89:f7:a9:
9c:56:9e:ff:4c:bd:aa:63:ce:b8:9e:c8:e2:54:09:
e7:e9:32:6a:46:1e:cb:16:10:2b:90:0f:3d:d1:b6:
63:3a:68:b7:4f:46:de:d8:0f:e6:cb:4e:87:26:51:
77:6f:1a:a7:96:9d:2a:05:ef:39:70:95:44:46:9f:
16:a1:ed:46:83:66:98:00:64:1d:a0:64:94:8a:79:
1e:ef:58:ea:7b:9d:47:a0:82:ab:03:91:3e:78:34:
7d:d0:ed:65:01:23:92:24:ef:23:12:40:11:da:1d:
af:38:1d:ba:10:0b:e5:04:34:2e:ec:d2:1a:f8:60:
dc:2d:29:84:28:38:ae:70:1e:3f:96:c7:f4:14:bc:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:94:19:A5:50:6B:69:56:02:DC:6D:41:6D:2B:9D:49:0B:BC:97
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.13.0/24
148.135.184.0/24
148.135.187.0/24
155.117.18.0/23
155.117.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e2:44:54:55:dc:39:ca:de:85:31:c2:bd:2b:55:b3:61:55:
bf:d3:e8:24:9f:d0:13:f5:20:63:db:7d:45:0f:b2:62:c8:e5:
78:06:6c:9e:56:d8:97:13:a0:e2:20:f4:36:f1:7b:87:7b:86:
95:e9:4f:db:d9:ae:25:88:9e:c3:99:6b:c4:67:06:aa:7a:b3:
d2:42:de:c2:85:22:bd:4a:4e:f5:74:97:96:bf:11:d2:6c:7a:
f0:4a:9d:1c:0f:47:23:5d:69:26:d3:e1:ee:32:ed:a4:da:f7:
6c:49:45:52:aa:eb:4b:2d:05:90:e3:e2:a3:00:65:5d:46:4f:
ca:53:4c:aa:a7:10:db:98:4c:33:42:40:f9:c3:ee:8e:ad:dd:
3a:f5:2c:12:20:a4:cd:da:82:33:ed:a9:b4:ce:95:ac:d7:1f:
ee:a9:d2:f7:fe:b9:69:f2:03:ed:fd:94:6d:3b:1c:63:df:20:
a2:6a:5d:b2:7d:74:54:de:13:e4:23:5f:7b:71:3a:70:57:0c:
9a:23:4f:cc:6a:55:4c:fc:c8:63:00:d3:84:07:e2:d9:a7:fb:
ed:92:98:17:32:29:2a:6a:9b:e3:5b:f9:6c:79:c4:23:54:c3:
13:27:88:bc:54:1d:68:59:80:4f:fb:d9:63:4c:87:71:1c:3e:
e5:c7:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 19:37:16 2025 by rpki-client