Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50338.roa
File: AS50338.roa (raw, json)
Hash identifier: 8xPAEaMTg2FX5jj4/jtg7UszT4ps8Xt53e41HULd2CU=
Subject key identifier: A0:3F:72:74:7F:86:23:A8:20:D9:B8:52:19:41:86:FE:F3:EE:C9:2A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 37DA045D902D793691E4130899D46DD03BC50D80
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50338.roa
Signing time: Sat 19 Jul 2025 05:12:39 +0000
ROA not before: Sat 19 Jul 2025 05:07:39 +0000
ROA not after: Sat 18 Jul 2026 05:12:39 +0000
asID: 50338
IP address blocks: 2a13:9500:b6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:da:04:5d:90:2d:79:36:91:e4:13:08:99:d4:6d:d0:3b:c5:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 19 05:07:39 2025 GMT
Not After : Jul 18 05:12:39 2026 GMT
Subject: CN=A03F72747F8623A820D9B852194186FEF3EEC92A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:06:0d:60:b9:df:95:8c:84:3c:30:eb:e6:
50:f1:84:78:c8:6d:d5:94:c3:a0:9a:94:4c:0e:8d:
fe:13:e3:35:01:99:6c:65:1b:35:5f:36:62:1f:d7:
62:64:b0:2d:21:40:dc:13:c1:4e:1b:92:44:68:74:
96:96:3e:79:5e:44:96:4a:39:6c:9d:97:a1:23:76:
c6:a8:77:9b:c2:f5:cc:c9:64:01:c1:d4:89:65:76:
c1:98:8a:27:db:e6:ae:59:7f:d6:66:f4:95:c3:32:
28:bb:17:1c:4d:e9:33:c4:86:be:8b:57:fd:f8:3c:
96:53:70:6d:bd:26:b8:25:da:d1:c5:97:36:60:8b:
2d:ee:f3:d6:02:b3:5b:a1:12:b8:b0:9e:48:13:f0:
e0:19:f1:b0:c0:78:94:0e:1f:ce:89:7e:f1:71:07:
0f:a2:46:ae:6c:2f:35:00:6c:13:d2:28:f4:0f:9f:
af:97:a2:64:97:d3:7e:96:0d:4d:e9:d1:d9:be:43:
a1:38:05:5b:b8:4a:6b:f3:76:22:6b:2a:4a:90:47:
4a:61:63:1f:48:55:f7:c4:ba:b4:87:70:ea:16:ab:
16:7c:e1:08:66:7a:9c:20:c9:3b:18:04:75:c1:18:
71:64:35:02:61:89:ee:32:e7:fd:f4:33:f9:06:cb:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3F:72:74:7F:86:23:A8:20:D9:B8:52:19:41:86:FE:F3:EE:C9:2A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b6::/48
Signature Algorithm: sha256WithRSAEncryption
54:89:c7:6a:47:eb:7b:cb:ed:88:58:23:df:d9:ca:76:90:32:
56:4c:13:7d:89:95:14:30:f5:0f:f1:e2:c1:72:c9:9d:a0:7b:
fb:74:a6:8c:3e:4b:70:f9:be:e7:f3:bc:bf:b9:47:17:6f:c6:
5a:e6:64:96:76:3c:54:82:d5:02:f4:d2:84:de:17:66:41:b5:
8b:68:3e:ec:20:61:80:65:50:35:36:22:84:3a:8b:35:54:3a:
c0:6f:63:8f:51:0d:e1:86:e3:11:83:59:bc:1d:65:59:98:ba:
10:b5:34:12:48:3c:38:33:88:d4:e5:37:ee:13:f6:c7:a6:85:
38:1f:82:2e:d9:55:50:e5:ca:7a:c1:25:55:15:9c:b0:9b:55:
9f:ed:1e:d3:aa:2e:2d:b1:ed:5b:59:cb:59:a4:3d:11:5e:20:
93:27:f5:b0:f7:0f:bf:1f:af:cb:97:fd:58:10:6c:05:18:3d:
60:8d:ab:d8:36:1d:6d:21:aa:02:69:a0:59:65:b1:d8:2c:68:
8f:ad:46:39:bd:c0:56:2c:6e:51:3b:a4:b8:00:8f:c7:86:b0:
ce:1c:2c:da:a5:46:74:fa:12:75:dd:f5:e3:05:d5:2f:53:19:
59:bd:b9:4c:bc:34:61:10:23:08:f9:2b:29:20:39:88:65:f6:
cd:b7:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:50 2025 by rpki-client