Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: XiYuh6JscA2c/yApYOsUI3z3KHc98jc7NPTsewWKuXU=
Subject key identifier: F5:E9:5E:30:3F:E0:7A:2D:DE:B5:BA:86:69:6B:04:84:C3:01:8F:3F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4AA45269088F7E440196A7C44D2ADF2DE34B07BC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
Signing time: Sun 06 Jul 2025 13:32:26 +0000
ROA not before: Sun 06 Jul 2025 13:27:26 +0000
ROA not after: Sun 05 Jul 2026 13:32:26 +0000
asID: 152179
IP address blocks: 141.11.134.0/23 maxlen: 24
194.60.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a4:52:69:08:8f:7e:44:01:96:a7:c4:4d:2a:df:2d:e3:4b:07:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 6 13:27:26 2025 GMT
Not After : Jul 5 13:32:26 2026 GMT
Subject: CN=F5E95E303FE07A2DDEB5BA86696B0484C3018F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:9a:ae:9a:17:d8:18:e3:45:de:27:59:4c:
53:12:50:b7:4d:f2:dc:c6:2e:e7:e3:e6:ed:ee:75:
c5:bb:6c:e4:8d:76:cb:48:c3:24:8a:56:84:80:07:
0d:34:cc:cc:c9:69:b7:31:b1:9c:e3:db:c4:71:a3:
2b:b2:57:01:46:f5:ff:b2:5e:59:77:24:44:3d:9f:
d1:1c:8f:ed:37:22:e6:eb:b4:0c:88:7a:5a:82:29:
ec:55:2b:58:fe:8b:32:d2:fb:5b:63:2d:4e:33:9a:
b0:64:33:d4:e7:46:57:1d:d2:7d:e0:8f:98:5e:f7:
67:91:11:e2:10:e0:74:7a:af:5d:cf:ca:79:83:3d:
cf:8f:d5:65:a1:45:d4:0a:03:8a:b3:14:4e:f7:54:
df:ea:ac:61:b8:4b:07:20:2e:29:51:a1:78:5c:c2:
04:ec:16:97:ba:e7:08:14:88:a2:60:50:70:07:d8:
ef:93:83:55:41:54:6b:25:51:78:b8:a8:0e:45:29:
22:3d:a2:68:44:1b:f8:2d:90:c6:69:e9:9b:11:e2:
1c:6b:b5:6a:ec:ee:a8:5c:93:80:9d:b6:3e:11:50:
65:f7:2d:34:c4:f8:3c:fe:29:06:58:3c:76:fb:82:
3b:8a:b2:4b:cc:3a:3d:40:52:3c:7c:d5:af:f8:f1:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:5E:30:3F:E0:7A:2D:DE:B5:BA:86:69:6B:04:84:C3:01:8F:3F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.134.0/23
194.60.95.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1d:3f:bb:8b:6e:cb:7c:8b:c9:30:a5:ce:76:bf:e8:1a:d3:
00:9d:af:77:34:b3:63:dc:63:2a:fc:b2:8e:8d:f6:ad:c7:53:
e5:da:37:6a:de:9a:24:70:08:ed:fe:c2:d0:d6:94:fa:32:8c:
ed:2b:e1:ee:dc:b0:04:0e:b6:2e:83:39:ba:db:81:5a:e4:ed:
cf:53:d8:f4:6e:fa:72:81:7e:bd:d2:b6:6f:b2:e3:98:fe:5a:
2d:75:b4:73:34:92:32:41:42:c2:31:18:51:63:1c:3d:75:6b:
a7:43:36:5f:16:c8:de:0d:90:83:b3:40:68:a4:ef:2c:99:95:
04:10:5e:0e:7b:d0:15:17:6d:7c:76:5e:ef:80:c9:a0:b8:a2:
e4:fd:97:3a:13:7d:24:de:7a:8f:af:d2:82:f2:f4:79:5c:cd:
3f:6c:7d:3a:c5:66:f9:90:35:aa:91:07:9c:a9:b2:db:ac:09:
98:ed:67:c6:bf:8b:b8:6c:72:63:e5:6b:51:a2:43:82:67:50:
d0:40:fd:02:64:0a:63:da:19:24:c9:85:87:05:30:f0:c4:7f:
9c:0c:4a:b0:2d:52:a6:10:50:61:54:28:91:17:6f:81:be:4b:
6c:56:ab:5d:8d:90:3f:67:b7:94:ee:b2:a8:ee:5d:cf:9b:db:
c4:71:54:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:04:21 2025 by rpki-client