Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: 34JBEh6Qo27ypnmXjLmBQOxjjgJE5qMCRCsGxnwHWTY=
Subject key identifier: 8A:60:27:07:6D:49:EC:FF:FD:C6:6C:C8:24:09:F2:AA:07:61:F9:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 57518F39F6A7840F694A02423D29952D264BFF57
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
Signing time: Mon 02 Jun 2025 00:00:15 +0000
ROA not before: Sun 01 Jun 2025 23:55:15 +0000
ROA not after: Mon 01 Jun 2026 00:00:15 +0000
asID: 10103
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:51:8f:39:f6:a7:84:0f:69:4a:02:42:3d:29:95:2d:26:4b:ff:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 1 23:55:15 2025 GMT
Not After : Jun 1 00:00:15 2026 GMT
Subject: CN=8A6027076D49ECFFFDC66CC82409F2AA0761F9FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:83:97:02:2a:22:f2:31:7f:4d:5c:59:ce:
a3:16:e1:d6:19:77:65:d1:7f:f3:c8:85:04:aa:5f:
75:74:0b:65:e4:80:0d:32:f4:44:b0:39:bc:a3:6b:
ed:66:cb:eb:40:7b:25:b6:7d:bf:47:88:1e:1c:bb:
7d:94:ce:b0:53:ca:1c:c9:96:21:14:66:7a:2a:cd:
51:e3:c4:40:6a:d7:4e:d2:1f:89:83:de:26:e3:40:
00:32:97:7b:70:b3:3d:9b:85:26:fd:d4:42:71:c2:
8b:9a:5e:ac:8c:9d:b7:8d:28:a7:e4:d6:00:79:5f:
73:64:4e:1f:b7:90:0f:44:02:39:d1:22:f1:b4:5e:
ea:dc:28:ed:4b:89:75:07:33:d4:4f:ae:f3:ce:0f:
ac:ec:f3:49:48:61:c7:8e:9b:92:ea:1f:f5:bf:f4:
01:40:4c:02:89:eb:bc:d1:8f:f1:fc:2d:34:3b:6e:
fd:bf:49:49:c2:56:50:bf:2c:8d:b3:6f:3b:2a:46:
04:ac:7b:e8:8b:73:f2:6b:1e:8c:a2:4a:5b:f9:0b:
ce:81:89:57:1a:da:76:f8:a1:f0:d8:58:01:a0:c5:
3c:80:b4:04:ad:a1:de:4f:8d:29:3d:2c:fe:38:e1:
5a:fd:8c:78:b4:64:33:3a:20:02:89:46:92:42:17:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:27:07:6D:49:EC:FF:FD:C6:6C:C8:24:09:F2:AA:07:61:F9:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b6:2c:38:ac:48:3f:47:5a:58:9c:7b:09:19:9c:fa:e4:ee:
c1:70:f7:38:02:c2:fb:31:54:8a:3c:81:d4:32:05:96:8e:bf:
91:7b:02:05:97:96:58:47:d2:a5:b7:3a:fc:9d:7d:44:cb:97:
42:23:18:ef:d3:11:26:1a:c5:c5:ee:6d:c8:32:ee:19:5a:57:
3e:31:ae:b3:dd:2c:03:35:55:03:85:d9:e1:cd:74:e8:22:6c:
eb:38:cf:a5:4f:81:c8:59:d2:0e:3b:ec:df:30:1d:34:96:f3:
32:0a:19:2c:b4:e1:ec:14:e7:eb:af:28:cf:44:25:7d:4c:73:
f1:6c:df:c8:28:d2:36:17:13:33:d8:14:69:e9:7e:85:81:76:
51:ff:0f:66:66:c6:8b:f2:08:14:58:7a:f4:bd:30:9c:f0:77:
c8:fe:72:9c:5e:5c:31:a8:95:33:83:b3:9d:41:9e:a4:3c:bc:
0e:07:d6:77:cc:a3:46:c5:c8:57:ca:bc:10:7a:d9:08:5a:f6:
8c:c2:c5:33:d0:98:20:27:c8:9e:ff:eb:7b:4a:14:74:8d:97:
38:0c:0c:af:76:45:05:9a:b0:0d:39:4e:2a:60:7c:d1:89:67:
db:0d:38:7b:cc:3c:d4:47:04:34:34:90:a4:f7:97:9f:e5:51:
a0:f2:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:54 2025 by rpki-client