Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: SsHF3ZaEgmg6a9vskb2iIHm15TzLRANYHU+vRaVdLCo=
Subject key identifier: 11:88:74:9E:7E:1D:B4:F2:7C:69:B1:5A:C9:CC:EF:69:5F:6E:72:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4AB2C1C70B65D839953B00DEFDF00687BD2F22E7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137409.roa
Signing time: Tue 27 May 2025 10:33:00 +0000
ROA not before: Tue 27 May 2025 10:28:00 +0000
ROA not after: Tue 26 May 2026 10:33:00 +0000
asID: 137409
IP address blocks: 146.103.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b2:c1:c7:0b:65:d8:39:95:3b:00:de:fd:f0:06:87:bd:2f:22:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 27 10:28:00 2025 GMT
Not After : May 26 10:33:00 2026 GMT
Subject: CN=1188749E7E1DB4F27C69B15AC9CCEF695F6E72FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:d3:59:07:a2:8f:72:2c:85:ac:64:6a:1e:
ea:5f:9e:b1:87:ed:3a:13:92:75:e9:5b:96:9b:b5:
2c:46:b7:41:e1:d2:6c:79:d2:72:70:f4:09:64:e2:
2c:0d:3c:a7:94:99:30:ff:2f:43:ef:de:2f:c0:69:
1d:fa:c6:be:0c:7f:40:7e:28:3e:15:d7:af:f3:ac:
a9:e3:fb:74:41:96:f4:cf:8c:90:12:98:87:58:a8:
0e:de:56:21:6d:15:d7:ed:83:cf:06:2b:94:2f:46:
3c:36:8b:76:52:7b:cf:ee:7c:ca:8e:5a:27:67:0f:
3b:3b:ff:ac:0e:f0:47:88:a7:d2:f8:85:1c:03:4a:
78:fb:18:ad:ea:ab:4b:9a:5c:a0:7b:81:04:02:fb:
33:72:ea:07:bc:ec:d9:89:94:73:b9:62:08:43:12:
34:15:99:7e:5b:b5:93:74:08:b7:e5:71:c9:dd:d6:
32:30:78:06:2a:3d:1a:fb:86:36:55:9f:27:19:66:
86:91:23:56:56:e0:59:e9:3b:e9:a1:e5:ab:85:cc:
63:8c:18:03:f4:e2:ff:2b:aa:8d:83:45:4e:5b:77:
09:6d:f0:8f:c3:84:d3:f2:31:4a:84:b3:c3:b5:ce:
6a:96:3e:99:be:bc:fb:4c:fc:89:ea:76:51:d1:9b:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:88:74:9E:7E:1D:B4:F2:7C:69:B1:5A:C9:CC:EF:69:5F:6E:72:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
92:16:18:33:e1:36:fb:f4:b7:14:86:e5:db:4f:3c:48:5f:cd:
5c:5f:9d:ba:c0:13:f5:c5:e3:36:4a:bd:b1:e1:0b:3e:37:0b:
fa:d2:6b:0c:8d:c4:db:37:86:cb:ff:d0:85:4f:68:03:9a:a6:
ba:21:32:68:42:89:3c:4e:2d:03:57:c7:49:81:55:64:26:de:
b2:33:b8:73:ed:39:16:9a:16:06:22:ab:98:fd:d0:1d:c9:d3:
89:d6:e7:66:89:db:3b:96:11:d9:10:0a:29:02:7f:7e:24:7a:
65:83:ba:f9:38:9b:20:a1:e7:b1:66:5d:fd:d4:32:5b:59:6b:
50:08:62:07:d4:cf:33:5a:04:b9:42:f6:b0:ca:33:65:13:96:
fd:88:61:38:b9:3e:89:85:93:b5:b5:00:24:62:95:51:b1:0d:
b0:c7:13:2f:15:ab:9b:ec:41:9d:18:61:b2:1a:b9:ca:d5:99:
e8:91:1f:3b:17:d5:8d:ea:a6:68:42:b9:ca:28:10:f0:d1:55:
5b:d8:c0:96:cf:b2:37:ef:e9:3c:d8:d1:b1:02:65:1f:48:30:
09:ef:0b:b9:d9:5a:39:36:81:29:74:f7:3c:81:6a:21:2b:97:
a0:e2:39:35:30:78:da:b7:54:d5:70:84:16:7f:1e:37:a1:b3:
b7:2e:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:18 2025 by rpki-client