Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS274173.roa
File: AS274173.roa (raw, json)
Hash identifier: Dc/S6Quaea33xR5gYxjqhcYAOeQ/vmv8ZkN6FnP+wOU=
Subject key identifier: 52:D3:B5:C2:BD:BD:3F:97:50:AA:60:AE:0D:E7:3F:BB:E2:48:44:C2
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 50640DFD52246DB651290118AC0B92EEF2E2219F
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS274173.roa
Signing time: Sun 20 Jul 2025 13:34:56 +0000
ROA not before: Sun 20 Jul 2025 13:29:56 +0000
ROA not after: Sun 19 Jul 2026 13:34:56 +0000
asID: 274173
IP address blocks: 194.93.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:64:0d:fd:52:24:6d:b6:51:29:01:18:ac:0b:92:ee:f2:e2:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 20 13:29:56 2025 GMT
Not After : Jul 19 13:34:56 2026 GMT
Subject: CN=52D3B5C2BDBD3F9750AA60AE0DE73FBBE24844C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:d0:8d:0e:f2:34:8d:7e:ae:f5:4c:63:3c:
de:7d:85:54:47:ff:fb:14:44:21:c3:76:39:00:9c:
cb:3c:15:42:54:04:b2:e1:f1:dd:d3:6d:a3:c4:4c:
8e:a4:d5:42:e1:6a:f0:97:c3:34:e6:c8:82:f2:84:
f1:11:27:cc:5a:03:ff:8e:0f:2e:4d:05:72:44:bb:
23:8a:ba:4c:57:ce:ca:c9:a3:0f:a5:c6:5b:d0:89:
23:4e:a9:58:79:20:92:f7:bb:29:fc:37:b4:71:9d:
66:a5:91:25:ea:f3:df:dc:14:87:8c:5d:0d:2d:4d:
74:db:bb:b7:3d:80:c1:b1:bc:45:06:5f:98:ef:db:
86:1c:1b:f5:72:c8:e1:dd:26:c3:c4:bb:0d:a2:ed:
14:e5:e3:0b:62:3a:47:a7:a3:90:f2:02:1b:97:f4:
70:27:8f:fa:9f:57:9b:66:1d:e6:ec:bb:38:38:66:
7d:61:69:eb:bc:c0:16:79:4f:59:db:fe:b4:5a:3c:
13:dd:68:98:c2:a0:4d:85:7f:a3:31:30:c3:cd:3e:
f6:7b:10:8a:05:51:f2:97:a7:0a:11:8c:33:da:89:
a9:4b:0c:23:f7:13:f2:8a:b7:01:3b:81:d7:3d:2f:
76:a9:9e:2e:dc:cb:5c:f0:58:cb:13:4f:06:e2:c9:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:B5:C2:BD:BD:3F:97:50:AA:60:AE:0D:E7:3F:BB:E2:48:44:C2
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS274173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:84:65:a8:8f:c7:cb:4e:d7:04:e3:83:16:0d:0e:2e:e5:e1:
f3:d5:5a:33:84:3b:d0:ca:3e:0f:77:f0:85:5d:ef:2f:6f:29:
d4:ca:ce:57:0d:af:d3:b2:eb:46:be:9f:5a:c7:9a:88:40:f1:
83:a8:e1:39:7c:1c:de:34:d5:ac:2a:7a:eb:c5:84:1e:26:fd:
01:67:3f:5e:4c:e9:23:fb:2a:dc:d1:a3:71:f2:8f:60:bd:d9:
6f:23:af:3f:0a:e2:96:16:95:7b:2b:c8:da:d8:aa:d3:c9:bb:
0a:67:24:5e:5c:f4:17:bc:c2:89:fd:08:6d:1e:f8:c4:13:b1:
64:ef:b3:0e:e5:d7:00:ff:26:46:c4:37:97:d1:67:44:40:14:
47:56:79:2e:a4:7b:56:ca:59:0c:a4:03:aa:8f:79:96:2d:fd:
00:d7:de:82:92:06:5b:ae:98:9a:f3:2d:a5:e8:97:9f:f0:67:
84:1d:ad:5e:23:21:b7:a6:e8:aa:96:39:36:90:23:fd:a4:a3:
97:8a:2a:ef:15:8b:7d:fb:6d:4b:73:7a:1f:fa:2c:6d:fd:56:
a7:20:89:50:55:9c:61:3e:86:4c:f9:27:31:dd:6d:09:a6:54:
82:93:99:e5:df:a4:bd:38:4f:5b:c1:62:4e:70:8b:c0:ef:95:
89:38:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:21 2025 by rpki-client