Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46573.roa
File: AS46573.roa (raw, json)
Hash identifier: vrBPLbYFe9TExZmHCdDR0GxUPfbMlX5DNxWrIcTcQcE=
Subject key identifier: 33:B0:D8:87:45:11:7D:32:21:B1:0F:5D:EE:24:E7:84:03:A7:DB:3F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3A2028C3C3C5FE71C8F25710C38E35A504C684FB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46573.roa
Signing time: Mon 14 Jul 2025 13:54:13 +0000
ROA not before: Mon 14 Jul 2025 13:49:13 +0000
ROA not after: Mon 13 Jul 2026 13:54:13 +0000
asID: 46573
IP address blocks: 92.112.170.0/24 maxlen: 24
92.112.171.0/24 maxlen: 24
92.112.172.0/24 maxlen: 24
92.112.175.0/24 maxlen: 24
92.112.200.0/24 maxlen: 24
92.112.202.0/24 maxlen: 24
92.113.234.0/24 maxlen: 24
92.113.235.0/24 maxlen: 24
92.113.239.0/24 maxlen: 24
92.113.240.0/24 maxlen: 24
92.113.244.0/24 maxlen: 24
92.113.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:20:28:c3:c3:c5:fe:71:c8:f2:57:10:c3:8e:35:a5:04:c6:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 14 13:49:13 2025 GMT
Not After : Jul 13 13:54:13 2026 GMT
Subject: CN=33B0D88745117D3221B10F5DEE24E78403A7DB3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:9f:45:83:90:b5:9e:4b:cc:27:95:3c:40:
d0:a2:ab:d1:41:99:0f:67:06:30:49:cb:eb:5d:31:
d7:50:6a:6e:73:71:51:4c:d3:de:9e:08:df:f9:60:
7e:89:66:2b:46:e0:ab:d5:22:47:23:9c:5c:81:31:
ef:34:23:3a:7b:7b:4e:54:a0:61:e3:58:91:83:cc:
5e:5f:78:2a:53:9d:d9:49:40:af:b9:0f:90:83:94:
17:00:02:a9:d4:53:b0:0e:67:b1:1f:2c:b6:ae:82:
69:e4:50:65:a7:da:0b:90:33:80:bb:c2:a7:3f:63:
21:37:ca:41:95:d5:a5:8e:33:71:98:13:0d:cf:90:
a3:49:a6:a8:5f:f3:e6:71:da:f6:d6:e3:db:34:98:
90:f3:5e:6e:fc:0e:22:66:10:d5:6e:4f:59:6c:b7:
a0:db:f4:49:99:1a:19:8a:7f:0f:d3:fd:d5:7b:7d:
e0:e9:80:51:2d:bc:73:01:3b:38:17:2f:86:e1:a9:
50:e1:65:29:3c:2a:8f:7e:39:91:16:af:1f:ef:df:
80:60:84:33:d0:5a:53:93:0e:0c:d2:ff:0e:4c:08:
71:6e:7b:d0:19:fe:fb:13:06:f9:c1:72:dc:c5:ec:
ca:9a:29:de:0e:e9:62:f3:8b:0a:9c:94:81:c5:41:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:D8:87:45:11:7D:32:21:B1:0F:5D:EE:24:E7:84:03:A7:DB:3F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46573.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.170.0-92.112.172.255
92.112.175.0/24
92.112.200.0/24
92.112.202.0/24
92.113.234.0/23
92.113.239.0-92.113.240.255
92.113.244.0/23
Signature Algorithm: sha256WithRSAEncryption
93:3c:9c:85:c6:e8:7e:11:be:1d:00:ed:7a:c5:76:21:0d:3e:
fe:a0:ce:6c:0e:be:9f:a8:67:36:36:41:13:9e:b1:c3:23:93:
1c:b4:71:bd:dd:5a:17:46:a1:5d:81:77:ac:dc:5e:0f:09:20:
7b:36:7b:a9:b2:98:e3:65:0c:fa:00:1a:63:df:49:7b:a4:93:
5b:5f:6e:c4:41:90:b3:8f:cb:70:b7:8b:61:43:12:43:99:a1:
16:6d:07:2c:d2:7d:49:c0:97:70:35:15:7e:d0:ac:45:36:d5:
da:9c:0b:eb:7a:93:44:12:c2:5d:af:16:e5:68:f9:ef:79:e7:
0c:69:e6:ab:97:77:62:49:19:21:54:1a:c6:07:8f:6d:e0:ea:
bf:ce:cd:a5:25:51:f0:29:63:0a:77:12:d3:f1:31:ac:56:8c:
39:ce:a1:94:97:9e:dd:4d:d4:d4:cf:55:77:df:09:3b:81:ab:
34:b2:0d:ae:36:43:93:19:bb:6e:38:10:40:3a:a5:36:db:6b:
a5:39:05:46:14:02:f1:aa:45:df:a0:40:ac:4e:80:7a:22:71:
1a:0a:22:15:84:83:f8:0c:3b:4b:68:f5:67:97:cd:29:88:10:
bb:99:e6:a0:99:ff:4d:c6:a8:a9:dd:2a:a2:6a:01:ed:54:ed:
44:77:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:19 2025 by rpki-client