Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS59432.roa
File: AS59432.roa (raw, json)
Hash identifier: d9SbjXOfDmu7KbAiv2ttc+g8fiPxUiXDuluqZjaQDPw=
Subject key identifier: 92:2B:C0:9D:39:46:43:3D:4E:B3:FA:72:F2:5B:E9:D4:B3:D9:98:D2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4A2FB9C896CEDF1DB1ED037609EB77AFDA4E238F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS59432.roa
Signing time: Thu 03 Jul 2025 00:01:17 +0000
ROA not before: Wed 02 Jul 2025 23:56:17 +0000
ROA not after: Thu 02 Jul 2026 00:01:17 +0000
asID: 59432
IP address blocks: 143.20.12.0/24 maxlen: 24
143.20.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:2f:b9:c8:96:ce:df:1d:b1:ed:03:76:09:eb:77:af:da:4e:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 2 23:56:17 2025 GMT
Not After : Jul 2 00:01:17 2026 GMT
Subject: CN=922BC09D3946433D4EB3FA72F25BE9D4B3D998D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:a4:d2:59:bf:40:85:b0:25:b0:b1:b4:38:
6c:e2:99:8b:f8:bd:33:84:69:81:86:54:8d:67:39:
e6:36:4a:9c:7b:0b:b8:bb:0b:40:cf:8a:d7:f2:f8:
9e:2a:78:a8:b4:83:5a:26:c3:70:be:ca:85:a1:5d:
a1:52:f3:de:2a:3b:6c:32:ea:03:c1:2c:54:fa:18:
39:9f:6a:98:c6:33:34:55:94:a6:d0:5e:37:37:9d:
8e:6b:88:b9:ef:4b:9a:74:5e:14:61:7b:2e:69:a9:
3e:81:e1:64:70:83:c5:7f:6e:2c:f4:c3:a0:12:dd:
95:b2:51:cb:25:20:8b:07:2f:f1:6a:01:83:24:cf:
39:29:9b:b2:99:73:3b:37:d6:87:54:e8:7a:89:c7:
7f:7a:ee:40:f3:66:cb:5e:5c:58:89:ab:4b:17:a5:
8b:b9:23:9f:00:e7:70:2e:c6:41:ad:ee:0e:ff:97:
17:d4:db:ba:ec:61:7b:76:65:c0:c3:0f:5f:8b:73:
81:92:e4:96:48:78:dc:c0:ab:18:89:94:76:74:de:
67:fd:5f:d7:a1:ef:f7:ef:a3:40:12:5b:dc:98:45:
70:92:d5:00:32:f6:1c:52:23:9f:c9:38:de:6d:d9:
2d:55:42:2f:ee:eb:d3:39:04:cc:87:fd:fd:e5:ca:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2B:C0:9D:39:46:43:3D:4E:B3:FA:72:F2:5B:E9:D4:B3:D9:98:D2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS59432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.12.0/24
143.20.82.0/24
Signature Algorithm: sha256WithRSAEncryption
81:25:5d:61:eb:cc:3b:72:29:fd:97:ad:93:9e:e0:be:cc:fd:
d2:b3:0d:3c:86:12:33:16:38:03:ac:76:7e:e1:db:a1:1b:0b:
d8:dc:b7:7e:03:f9:41:03:11:40:ff:87:b7:83:e4:f8:dc:1d:
af:c2:3a:24:a3:d1:ee:d2:06:85:70:0b:e3:66:97:2d:84:cc:
0f:a3:05:df:9c:3a:1b:a8:b9:23:1e:4d:4b:7f:f7:8e:1f:83:
db:74:81:e4:e1:35:68:30:e6:95:3d:ab:c9:db:3c:64:ac:d1:
02:68:22:11:dd:6c:22:98:15:df:23:e8:a8:3b:c0:62:a8:94:
a0:71:a2:3a:a4:d3:b6:72:8e:02:97:96:76:88:63:59:0d:69:
7e:94:fc:a3:55:93:af:c4:d7:9c:af:c9:a2:51:09:ff:69:06:
4f:b3:d3:6c:e3:8a:d7:4f:ab:1d:db:bf:6a:e3:0d:fc:c8:8e:
55:9d:df:99:bc:a2:72:27:c0:c7:b1:6f:09:83:d6:15:40:79:
3b:53:6f:74:03:0b:42:59:19:2d:54:33:a8:ad:f0:32:32:c5:
f2:e7:96:0a:52:c1:03:94:7e:18:29:6a:e8:93:cb:6d:ea:71:
d2:1e:c7:7a:dc:e3:f0:68:eb:da:2f:6e:76:59:8f:fe:f6:c6:
9c:1f:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:56:57 2025 by rpki-client