Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137357.roa
File: AS137357.roa (raw, json)
Hash identifier: WbunLmZ47RFacJuEtSgk8zUzKw4WkH45hYL/P6qUVns=
Subject key identifier: A0:5F:BF:8E:2F:C8:5B:88:7B:8A:93:EE:7E:3E:0A:CC:67:D1:D3:F4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74DFC3DFD944FDA1ABD93C498CAEB9A862997BF9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137357.roa
Signing time: Fri 04 Apr 2025 07:34:10 +0000
ROA not before: Fri 04 Apr 2025 07:29:10 +0000
ROA not after: Fri 03 Apr 2026 07:34:10 +0000
asID: 137357
IP address blocks: 146.103.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:df:c3:df:d9:44:fd:a1:ab:d9:3c:49:8c:ae:b9:a8:62:99:7b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 4 07:29:10 2025 GMT
Not After : Apr 3 07:34:10 2026 GMT
Subject: CN=A05FBF8E2FC85B887B8A93EE7E3E0ACC67D1D3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:d6:3c:94:38:50:71:31:12:2c:ec:dd:5f:
95:6f:99:69:7a:46:51:f1:96:81:af:d2:de:25:af:
74:71:df:af:28:0b:e4:f4:49:88:94:ec:31:72:c4:
ef:31:c4:e8:15:b6:fa:10:1b:81:b3:86:98:45:78:
70:af:45:d3:0e:f6:d0:4d:ac:c8:ed:8c:91:71:c8:
51:45:c1:a1:67:37:ee:1a:6c:12:89:59:0c:32:3d:
09:5f:8b:92:57:19:fc:e4:7b:6f:e5:91:9c:09:24:
b2:64:2f:c8:f7:35:75:6e:9b:7f:a2:ae:77:bc:42:
b1:9a:71:7e:63:58:1e:f0:36:1c:7a:56:53:61:92:
36:aa:ce:13:a1:48:4e:90:c8:f8:fe:5e:98:d2:68:
ae:01:04:22:f4:d4:9a:f4:57:e4:46:86:6c:cf:f9:
4f:29:25:63:ec:dd:b1:26:c9:0a:7f:1e:c9:98:eb:
e0:b0:ac:bf:6c:61:de:00:3a:a9:a7:ea:4d:84:57:
32:92:84:de:79:ff:8c:21:0f:6b:d2:81:c7:80:37:
c8:bc:54:59:34:84:6f:34:b3:aa:53:72:25:24:44:
67:c7:df:8b:8c:93:ec:cf:94:63:30:77:3e:b5:83:
c2:68:5d:c8:6b:26:be:ba:9c:cb:66:b8:d8:11:3e:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:BF:8E:2F:C8:5B:88:7B:8A:93:EE:7E:3E:0A:CC:67:D1:D3:F4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137357.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c9:ae:f5:82:bd:59:2a:f1:35:34:15:aa:61:b6:cc:3d:99:
53:16:a8:69:a8:6c:4d:fc:a7:b7:19:86:d8:74:6c:fc:1f:b8:
82:6b:16:61:90:f8:17:89:0a:e2:16:28:18:df:7b:68:c0:30:
83:73:e2:aa:70:bf:a6:0c:d7:f3:78:ea:52:90:b5:5f:a7:de:
53:dd:a6:fb:ce:05:53:88:47:ff:6d:20:3b:4a:ac:ee:38:bb:
4b:9d:44:9d:ec:01:f0:25:16:3d:48:9e:7c:22:b2:7e:9b:a4:
3b:3a:75:51:6e:51:fb:f8:bf:c5:61:c9:cc:74:84:f1:33:26:
6b:bb:05:43:04:01:81:95:19:e5:4b:8b:cb:56:b1:1d:4b:4a:
b7:6f:6e:ac:53:eb:83:63:ae:4e:0e:10:cb:ab:ff:02:b7:2b:
b1:f8:41:39:da:57:6c:36:e5:f1:74:96:15:90:d4:4e:0f:41:
ae:a1:c3:77:b1:85:af:e5:61:7c:81:3a:0a:bf:67:c8:08:70:
ab:e1:6f:20:07:4b:01:1f:8d:77:bd:f9:b6:75:29:58:1c:1e:
df:c5:37:d2:4f:d2:ff:84:16:05:20:11:2c:8d:99:31:cf:eb:
0f:09:2c:f4:96:38:b6:45:90:48:be:0b:64:0d:32:a3:b4:03:
c8:03:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:26 2025 by rpki-client