Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: R+9BkGfAduCdMBWRDwOpG9v17Obo4S6i7ljVBTRmRaY=
Subject key identifier: 5B:05:C8:33:0C:C0:31:24:5C:E6:AA:B4:CF:9F:E9:A6:FD:E0:18:F6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 14480CBAC549FEF2A14F6A22793D81FCB03DBB37
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
Signing time: Tue 01 Jul 2025 08:32:10 +0000
ROA not before: Tue 01 Jul 2025 08:27:10 +0000
ROA not after: Tue 30 Jun 2026 08:32:10 +0000
asID: 64267
IP address blocks: 92.112.5.0/24 maxlen: 24
92.113.11.0/24 maxlen: 24
92.113.170.0/24 maxlen: 24
92.113.171.0/24 maxlen: 24
92.113.175.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
92.113.224.0/24 maxlen: 24
92.113.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:48:0c:ba:c5:49:fe:f2:a1:4f:6a:22:79:3d:81:fc:b0:3d:bb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 1 08:27:10 2025 GMT
Not After : Jun 30 08:32:10 2026 GMT
Subject: CN=5B05C8330CC031245CE6AAB4CF9FE9A6FDE018F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:32:e0:96:86:aa:1b:03:ff:f2:84:ad:37:
af:7a:76:9e:04:81:46:13:9e:d0:39:77:45:89:f4:
e0:76:3c:9d:6d:1f:f7:4a:37:f2:c0:e9:8f:39:7c:
8f:9c:4e:5d:31:0f:7d:18:cd:70:9c:6f:35:c1:0f:
bf:83:7d:10:ea:b1:e6:33:38:62:33:02:8a:6a:db:
59:38:f4:35:8e:b0:3f:e4:25:cf:2d:f1:3e:54:95:
18:8c:b1:b9:fd:40:04:2b:37:78:25:99:62:2f:59:
ef:03:cd:1d:eb:eb:ed:39:11:57:49:1f:41:58:7d:
14:d8:23:4e:0e:ab:bd:4c:93:8b:c9:c0:32:e7:6f:
47:c9:c5:35:9b:84:dc:c1:27:92:c2:15:a3:a6:51:
9e:c5:a9:d6:e7:87:f0:cc:6d:10:67:69:60:48:fd:
7e:96:18:f3:55:6b:41:ac:25:b8:34:7a:f5:7f:a2:
5d:b1:7e:ba:3e:7e:b5:59:e6:ff:c1:98:02:36:ba:
03:74:41:86:65:ab:fc:56:34:9c:a8:71:74:d2:bc:
59:6d:51:4c:69:d2:bd:83:bb:74:1e:7f:9c:a0:e5:
b4:96:74:05:70:e2:f1:00:aa:28:50:90:ef:08:79:
cd:a2:15:53:76:2d:47:92:40:d7:7f:72:ab:cb:d9:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:C8:33:0C:C0:31:24:5C:E6:AA:B4:CF:9F:E9:A6:FD:E0:18:F6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.5.0/24
92.113.11.0/24
92.113.170.0/23
92.113.175.0/24
92.113.215.0/24
92.113.224.0/24
92.113.230.0/24
Signature Algorithm: sha256WithRSAEncryption
18:89:83:24:cc:07:65:05:0a:47:40:32:18:8c:58:eb:51:46:
98:83:4f:9f:de:59:f3:95:f6:27:b3:f1:e3:57:07:3d:63:b8:
0b:54:f6:85:5a:33:4f:f4:34:a7:49:f7:86:e0:01:18:20:cf:
52:9f:bf:4a:1d:1c:ed:64:c4:19:12:c3:2e:5d:b8:01:ae:eb:
f6:6a:ab:06:df:f9:91:db:84:b1:f0:b5:f2:24:c3:b2:79:94:
f3:31:da:04:27:28:7a:2f:44:2d:c9:c3:81:e0:6e:99:92:d3:
06:c3:c5:b6:a9:a2:9a:81:5f:f3:63:98:87:86:3d:c6:06:af:
b5:d4:82:c2:5a:9d:b5:79:cf:a6:f0:d9:c4:1c:7e:35:a7:9a:
e0:84:d2:72:55:d9:1b:c3:39:af:de:fc:a6:e1:52:dd:1c:97:
b1:0e:17:cd:cd:6e:7a:62:73:2c:c7:45:d0:f5:82:41:23:27:
ad:61:d3:42:f2:18:45:ba:d9:b9:4d:0d:4c:15:ef:09:c6:7b:
7d:b5:c5:bb:50:02:7d:95:f0:60:27:b2:0e:d6:5f:c4:b2:9c:
1d:2f:26:2f:7d:a0:2a:3f:01:c5:cb:ae:38:c2:7c:10:d2:1b:
0a:d2:18:14:ee:5f:dd:f7:41:c4:9b:bf:8b:24:4e:56:49:fc:
45:8b:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:26 2025 by rpki-client