Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49678.roa
File: AS49678.roa (raw, json)
Hash identifier: 04gsUQsPqQuAnkkguVJkXTWam9KmJGDijVOWQ2zjFIg=
Subject key identifier: 78:5A:DE:5B:C0:33:7E:7F:29:56:B9:F2:21:83:3B:E2:0E:78:87:5B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6534A19B3A17D9CA705DF7436FB4E468FF7D6296
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49678.roa
Signing time: Thu 03 Jul 2025 14:54:13 +0000
ROA not before: Thu 03 Jul 2025 14:49:13 +0000
ROA not after: Thu 02 Jul 2026 14:54:13 +0000
asID: 49678
IP address blocks: 141.11.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:34:a1:9b:3a:17:d9:ca:70:5d:f7:43:6f:b4:e4:68:ff:7d:62:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 3 14:49:13 2025 GMT
Not After : Jul 2 14:54:13 2026 GMT
Subject: CN=785ADE5BC0337E7F2956B9F221833BE20E78875B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:1d:4c:88:ec:d7:d5:4a:76:b9:5d:f2:89:
15:fc:3a:eb:8d:58:bb:5e:b3:a0:a5:05:98:2e:3e:
e1:a3:4b:de:39:aa:01:71:fa:cc:80:f5:d3:a8:0d:
ec:e7:80:f8:f3:d2:b8:0a:fd:e3:19:90:31:c5:1e:
d0:43:60:77:18:9b:26:6d:e0:c4:7e:60:5b:c6:37:
79:2c:d2:ef:9f:bf:f1:84:a7:4a:6f:77:59:1a:8c:
62:83:47:ee:e1:1f:8f:3b:6e:5a:72:8f:b7:0b:25:
60:19:bc:69:6f:79:7c:bd:da:6d:10:58:47:15:f5:
52:fc:ab:69:47:5a:2e:3b:b2:1f:8b:3f:9c:64:f1:
c8:ce:e6:9b:53:54:c5:81:86:36:9c:02:d0:3c:86:
b5:cf:a7:2f:c3:42:57:4f:43:d1:c4:2d:21:7f:fa:
3e:7d:b1:02:58:df:36:99:14:9b:8a:92:5b:73:a8:
12:7d:8a:6b:b3:0b:da:07:01:3d:7e:e9:cc:7a:7f:
a7:5a:7e:f7:cf:74:40:c1:24:fb:55:bc:8c:d9:da:
4f:55:aa:c0:e9:5c:0c:a5:f4:1d:35:8b:bb:9c:de:
75:c8:11:c2:7f:26:f6:28:33:a5:19:a3:ac:ff:0e:
9e:70:43:47:51:c2:fd:e9:84:82:83:17:89:21:f3:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:DE:5B:C0:33:7E:7F:29:56:B9:F2:21:83:3B:E2:0E:78:87:5B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1c:82:6e:4f:61:b1:31:b3:51:ec:0c:39:60:05:15:1d:56:
fa:f0:6a:94:83:b9:2b:0d:1e:7d:b2:e1:51:f4:b6:4e:98:17:
af:b0:53:ed:e0:61:53:23:9e:fb:e3:9d:6c:c9:ed:64:96:c7:
ec:34:d8:19:cc:73:60:56:72:1e:17:93:0e:52:b3:03:1a:72:
df:09:6d:f3:d5:c3:3d:bb:11:8b:e9:b1:07:b1:5c:ac:bd:0a:
d0:4c:cd:6c:ed:dd:c8:9b:49:f0:f0:3b:18:7a:10:c9:b8:9b:
a5:6b:f8:0e:10:af:ed:10:96:71:98:a6:aa:43:0c:c6:55:aa:
44:21:bd:f4:8b:05:c2:23:2a:db:2a:94:a3:bb:35:c1:6f:7e:
8b:4d:fe:0d:b8:dc:48:b3:bd:22:9e:75:c1:f9:6a:c5:4a:4d:
2f:2e:f0:6f:a5:17:5d:c8:a1:9f:e4:5d:1a:1b:36:6d:b1:f3:
ca:9c:b8:7f:dd:30:27:b1:90:ba:a5:37:f2:0c:07:ff:3e:d0:
0e:29:05:1a:6f:70:9d:b4:7b:01:60:05:71:e6:30:a7:ee:3d:
6d:df:1c:32:a8:23:9c:48:f5:61:75:d9:86:de:4f:68:14:2f:
d8:18:19:fc:ac:46:1d:0b:72:fb:8e:74:df:b9:75:e6:be:06:
66:95:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:08:35 2025 by rpki-client