Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12741.roa
File: AS12741.roa (raw, json)
Hash identifier: KqpT4xqF7TXlcgbzWgXKOEWOTSCXzJXtB3GWYTsodeI=
Subject key identifier: E0:88:D9:B2:0D:D3:CA:8F:F9:59:0B:CD:08:02:42:34:A1:2E:D4:77
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7253AF14155E47AF4E548B10BDBD57E508F06005
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12741.roa
Signing time: Tue 01 Apr 2025 03:08:51 +0000
ROA not before: Tue 01 Apr 2025 03:03:51 +0000
ROA not after: Tue 31 Mar 2026 03:08:51 +0000
asID: 12741
IP address blocks: 96.62.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:53:af:14:15:5e:47:af:4e:54:8b:10:bd:bd:57:e5:08:f0:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 03:03:51 2025 GMT
Not After : Mar 31 03:08:51 2026 GMT
Subject: CN=E088D9B20DD3CA8FF9590BCD08024234A12ED477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:5a:11:59:6a:af:af:96:42:86:af:0a:5a:
cc:e5:7f:99:b6:99:0c:e9:96:6f:5f:84:bf:6e:d0:
fb:e1:b9:14:08:4a:14:e1:fc:1e:b5:ec:17:4e:1d:
5b:fc:d5:90:51:82:94:63:f6:84:db:18:87:7b:66:
46:27:ee:f6:43:82:fa:a6:dc:08:fa:ab:fc:29:ec:
2e:7a:ee:b1:69:74:a3:05:94:15:48:66:4e:40:6f:
0e:e9:6c:a2:a7:dc:a1:8e:83:70:a6:eb:b8:ae:f8:
9d:7c:aa:29:e0:c2:af:91:3c:fa:5e:41:e0:ae:28:
3d:a1:a8:3b:83:83:05:4a:0e:ef:bc:6e:93:e2:22:
e9:77:ee:9a:0a:05:ed:96:16:09:bc:d0:01:ae:87:
b5:91:cf:a6:28:14:1f:ea:ad:93:30:4d:eb:52:59:
a8:45:98:03:38:94:d0:a0:a5:23:d5:d9:c9:21:05:
71:95:00:b5:71:50:d8:f2:df:fb:54:e8:ba:cc:7a:
9f:81:7e:e0:74:e6:81:a7:f2:7a:e7:0f:8f:e6:a6:
5d:ab:03:3e:54:9a:97:00:b2:7e:ac:56:f0:5d:1e:
eb:53:6a:58:9a:9c:18:6b:a8:53:51:63:6f:90:e1:
a3:b7:74:05:e2:4f:80:70:ac:3a:6a:55:cf:41:7d:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:D9:B2:0D:D3:CA:8F:F9:59:0B:CD:08:02:42:34:A1:2E:D4:77
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:01:9b:a7:b8:16:3f:08:fd:2f:b6:a1:73:8a:47:57:71:7a:
99:16:79:23:7b:c8:96:37:fd:99:b3:ca:e8:f8:30:c0:5d:92:
28:9e:55:d6:35:10:36:3d:e8:b7:cf:e0:0f:60:c6:65:37:51:
a5:a7:f1:b3:8d:93:74:fa:5a:17:5a:21:ea:e7:4b:86:fc:b2:
65:46:59:8d:dd:6c:dc:b3:bf:e1:e2:26:fc:54:21:46:9f:3f:
64:78:5c:c6:6b:bf:a1:72:36:bd:78:13:06:0c:4b:5b:0d:c1:
d3:a4:f7:11:54:13:10:66:3c:a5:27:ae:61:a6:e4:77:0f:f4:
88:3d:9c:2e:3d:4e:bb:eb:23:d3:be:ae:95:67:13:ef:20:4f:
94:d7:6f:64:f7:85:76:32:96:67:00:a9:c5:b3:87:2f:dd:f8:
9b:e6:4c:9a:8b:50:a0:4c:1d:b7:72:64:9e:39:a0:5a:7c:1d:
83:c8:2a:14:9b:a3:3e:69:9d:52:0d:dc:9a:c4:1e:d4:66:77:
7a:50:ab:83:98:29:28:ff:01:6f:26:f5:67:11:ee:f7:f7:65:
37:09:c4:6c:93:d5:df:e0:84:14:82:21:04:d9:9a:f6:9f:cf:
80:e1:33:37:bc:06:6b:33:2e:6d:e1:38:f6:12:29:fa:f8:9e:
e3:f8:dc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:47 2025 by rpki-client