Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150654.roa
File: AS150654.roa (raw, json)
Hash identifier: y+MsEeF55ShEt6eOnN1cjEjP3yeiPijhGkUmk+L89Zc=
Subject key identifier: 5C:CD:94:22:16:AF:F7:11:B7:4D:6E:E4:56:30:80:AF:6D:92:47:38
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0E1E8A9664005809B7531C0F1FA428B2F136A8E3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150654.roa
Signing time: Fri 04 Jul 2025 09:57:31 +0000
ROA not before: Fri 04 Jul 2025 09:52:31 +0000
ROA not after: Fri 03 Jul 2026 09:57:31 +0000
asID: 150654
IP address blocks: 2a13:9500:a3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1e:8a:96:64:00:58:09:b7:53:1c:0f:1f:a4:28:b2:f1:36:a8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 4 09:52:31 2025 GMT
Not After : Jul 3 09:57:31 2026 GMT
Subject: CN=5CCD942216AFF711B74D6EE4563080AF6D924738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:89:a1:31:31:e3:85:d0:f7:94:10:2c:43:
fc:7f:ab:48:2f:74:b1:ea:a6:db:93:3f:94:2e:86:
f8:8f:12:bb:90:af:2a:c9:e8:5c:bd:b6:01:ed:a7:
81:09:6c:d0:1d:d7:7e:50:1e:35:59:3c:e5:cf:9b:
08:85:e1:45:c3:39:7d:a7:30:f2:78:5a:1d:87:a9:
75:9e:de:e5:99:a2:a5:65:cb:a3:b6:03:24:1f:5f:
b9:ef:5b:14:81:dd:08:2a:22:a0:db:fc:93:a3:93:
69:ff:d4:93:89:9a:be:ba:f5:2a:4d:28:31:c4:4f:
34:67:ac:ef:71:38:15:84:32:d2:9f:1b:83:24:93:
2e:b4:41:7b:c2:37:59:90:49:5f:81:81:0d:88:5e:
6a:9a:46:fe:3d:5f:ed:2c:73:a4:d0:0b:d5:dc:09:
8b:11:b8:d9:61:1e:74:88:ad:6e:f9:b6:44:64:cc:
bb:2c:cd:ed:a4:66:0a:4f:66:55:8a:7b:3b:76:d9:
8b:e5:b3:48:37:95:b8:6e:02:e0:b0:b3:96:12:4a:
14:7b:12:d1:22:30:ec:85:67:1d:06:64:ea:74:14:
12:dd:ca:d0:55:00:9e:b1:72:5c:79:c1:59:2c:c7:
6e:d2:2e:d2:19:9d:f1:29:2e:c6:95:3f:69:76:e8:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:94:22:16:AF:F7:11:B7:4D:6E:E4:56:30:80:AF:6D:92:47:38
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:a3::/48
Signature Algorithm: sha256WithRSAEncryption
19:2f:7c:43:69:7a:95:43:13:02:a8:84:87:e9:15:78:48:c5:
5d:38:12:08:56:07:67:94:2f:5a:fd:2c:db:6f:a7:6d:a6:d8:
29:39:9d:1e:1d:c1:b0:4a:5c:5c:cf:76:40:1d:77:be:e4:56:
5f:b9:dc:9d:64:1f:fc:81:d0:46:55:d0:19:16:c8:c2:65:5a:
d6:b2:16:25:ad:3b:bd:10:8a:03:fd:91:2c:c5:d0:f1:f8:f3:
e4:44:94:46:62:cf:11:50:50:47:fa:77:ce:5f:a6:7a:7f:a2:
a0:6a:cb:97:68:5e:b8:33:e2:47:1e:7f:a8:b2:c2:59:55:a6:
72:9f:56:fc:7e:63:b8:a6:13:7c:44:b8:f9:58:2e:36:ed:bd:
de:cf:e3:b5:4c:de:b5:36:e6:1d:53:bc:8c:6e:ef:1a:48:69:
60:a5:63:4c:5c:52:53:b3:6f:1b:2a:70:7c:c2:52:cb:a8:10:
54:b3:61:e8:99:26:90:56:e3:a3:3e:c0:8a:ae:cf:d7:05:ed:
12:40:a2:4a:63:0a:d3:bb:7c:d4:4e:50:75:00:89:0c:64:0f:
90:98:84:44:98:15:34:aa:32:bc:b1:98:fb:27:00:bd:1b:43:
da:35:bb:41:67:e9:ce:35:6e:25:de:83:e4:b9:26:02:98:0c:
54:2c:89:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUDh6KlmQAWAm3UxwPH6QosvE2qOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA3MDQwOTUyMzFaFw0yNjA3MDMwOTU3MzFaMDMxMTAvBgNV
BAMTKDVDQ0Q5NDIyMTZBRkY3MTFCNzRENkVFNDU2MzA4MEFGNkQ5MjQ3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSomhMTHjhdD3lBAsQ/x/q0gv
dLHqptuTP5QuhviPEruQryrJ6Fy9tgHtp4EJbNAd135QHjVZPOXPmwiF4UXDOX2n
MPJ4Wh2HqXWe3uWZoqVly6O2AyQfX7nvWxSB3QgqIqDb/JOjk2n/1JOJmr669SpN
KDHETzRnrO9xOBWEMtKfG4Mkky60QXvCN1mQSV+BgQ2IXmqaRv49X+0sc6TQC9Xc
CYsRuNlhHnSIrW75tkRkzLssze2kZgpPZlWKezt22Yvls0g3lbhuAuCws5YSShR7
EtEiMOyFZx0GZOp0FBLdytBVAJ6xclx5wVksx27SLtIZnfEpLsaVP2l26AvDAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUXM2UIhav9xG3TW7kVjCAr22SRzgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUwNjU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AACjMA0GCSqGSIb3DQEBCwUAA4IBAQAZL3xDaXqVQxMCqISH6RV4SMVdOBIIVgdn
lC9a/Szbb6dtptgpOZ0eHcGwSlxcz3ZAHXe+5FZfudydZB/8gdBGVdAZFsjCZVrW
shYlrTu9EIoD/ZEsxdDx+PPkRJRGYs8RUFBH+nfOX6Z6f6KgasuXaF64M+JHHn+o
ssJZVaZyn1b8fmO4phN8RLj5WC427b3ez+O1TN61NuYdU7yMbu8aSGlgpWNMXFJT
s28bKnB8wlLLqBBUs2HomSaQVuOjPsCKrs/XBe0SQKJKYwrTu3zUTlB1AIkMZA+Q
mIREmBU0qjK8sZj7JwC9G0PaNbtBZ+nONW4l3oPkuSYCmAxULIms
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:39 2025 by rpki-client