Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
File: AS53340.roa (raw, json)
Hash identifier: swxVSUdOF5buh5PAO9r1fJZQlPyYyLlJqY0G/z1CQhE=
Subject key identifier: 08:FF:C7:BC:6B:62:3B:00:49:EF:5F:41:F7:51:CC:0F:9B:62:E7:04
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6F84E8C6B6BC63347A0B2A8C9E9B861DEF0D6C9A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
Signing time: Wed 16 Jul 2025 14:54:13 +0000
ROA not before: Wed 16 Jul 2025 14:49:13 +0000
ROA not after: Wed 15 Jul 2026 14:54:13 +0000
asID: 53340
IP address blocks: 45.89.254.0/24 maxlen: 24
181.214.47.0/24 maxlen: 24
181.214.81.0/24 maxlen: 24
181.214.87.0/24 maxlen: 24
181.215.249.0/24 maxlen: 24
191.96.178.0/24 maxlen: 24
191.96.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:84:e8:c6:b6:bc:63:34:7a:0b:2a:8c:9e:9b:86:1d:ef:0d:6c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 16 14:49:13 2025 GMT
Not After : Jul 15 14:54:13 2026 GMT
Subject: CN=08FFC7BC6B623B0049EF5F41F751CC0F9B62E704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:bc:2d:6e:c5:0e:1d:aa:ac:70:ba:6b:01:
db:04:00:61:3a:3d:d7:70:6f:9c:c5:50:bb:c3:bb:
75:d5:ec:f2:3f:41:97:d9:66:3a:23:64:65:f0:f2:
86:19:b7:7b:8b:e9:9e:54:ed:14:5d:57:25:cc:05:
eb:64:e0:5e:2b:e0:ea:b1:19:7f:15:70:e3:2e:53:
f5:0d:e7:d3:5d:5e:d1:4e:02:e5:ac:ba:07:78:58:
30:7c:2f:a3:48:59:75:8f:a4:3b:52:e9:a7:e8:49:
c8:3f:15:89:6e:26:13:a4:5c:fc:4c:6c:52:90:9b:
c9:49:d5:87:7d:32:c6:30:69:c0:1c:34:15:72:bd:
95:bf:a7:3c:54:61:1d:e8:5d:ed:bf:7c:25:37:d0:
74:66:4e:1b:84:75:2a:0d:60:23:4c:1c:b1:35:64:
ef:d5:0e:ef:25:40:73:9d:2c:3c:09:95:2c:6e:56:
61:e5:6e:91:6e:4b:e0:59:e5:74:8d:ec:95:a6:cf:
0e:75:2c:c8:4f:04:a4:22:b3:b7:82:0f:87:80:7a:
44:8d:ec:50:6c:31:dc:35:bf:95:f2:83:55:3b:e8:
51:3f:d4:72:bb:d8:31:28:31:6c:fa:6a:0e:73:7a:
ff:f8:e0:02:4e:17:66:41:c6:a1:06:a8:1f:0a:9c:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FF:C7:BC:6B:62:3B:00:49:EF:5F:41:F7:51:CC:0F:9B:62:E7:04
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.254.0/24
181.214.47.0/24
181.214.81.0/24
181.214.87.0/24
181.215.249.0/24
191.96.178.0/23
Signature Algorithm: sha256WithRSAEncryption
37:6f:2e:db:c3:43:e7:d8:da:bd:85:66:3a:b9:9e:6d:6f:8e:
86:f7:5d:60:a9:95:cf:20:89:1f:27:d5:e6:8b:7a:8f:37:5f:
df:ba:cf:b1:6d:7f:24:b4:e7:9c:64:70:06:5c:93:5e:be:fe:
77:c5:26:33:f8:f9:3f:20:54:ce:e4:0a:5d:b0:eb:b1:5c:05:
96:b3:1e:ff:a6:5f:cc:f2:8e:8c:d6:3f:71:fc:bc:2b:6b:02:
0e:8c:44:a4:a0:35:c9:8a:73:52:59:6f:a2:4f:45:e1:19:4e:
96:fa:5c:0c:1d:a1:79:d7:18:6d:8c:3e:97:77:72:9a:4c:14:
c2:2c:49:2c:e8:6a:6e:13:7a:47:e7:a1:5f:59:e2:9c:31:49:
69:1b:bb:44:69:d0:f7:a8:96:da:d6:2c:d2:a6:d5:66:ef:8e:
fb:91:38:20:cf:bf:3e:63:4f:a0:7a:ac:22:13:ce:44:53:6e:
2c:33:7d:76:78:05:4d:a7:2d:e7:61:eb:e8:75:4a:c1:e8:43:
93:88:cc:5b:95:a4:ba:0c:bf:66:1b:a7:dd:52:c5:65:ca:79:
56:d0:6f:35:f8:c3:03:aa:9e:cf:3b:39:b7:98:b1:4c:6d:65:
7f:92:c9:e4:66:07:57:da:b5:0a:c0:f0:44:c2:f6:d6:56:78:
5b:25:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:16 2025 by rpki-client