Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
File: AS199760.roa (raw, json)
Hash identifier: ameEUARuRZnkQZXTzF1hTKFxT1rweEXDq2KORb0tTxo=
Subject key identifier: BE:FE:4B:9B:C0:11:1A:D4:C5:2C:75:75:D2:8C:84:44:5A:B9:41:58
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 275EE78C5D6B0B325580A5862ED008F8FB5DFE75
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
Signing time: Thu 20 Mar 2025 18:38:50 +0000
ROA not before: Thu 20 Mar 2025 18:33:50 +0000
ROA not after: Thu 19 Mar 2026 18:38:50 +0000
asID: 199760
IP address blocks: 148.135.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5e:e7:8c:5d:6b:0b:32:55:80:a5:86:2e:d0:08:f8:fb:5d:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 20 18:33:50 2025 GMT
Not After : Mar 19 18:38:50 2026 GMT
Subject: CN=BEFE4B9BC0111AD4C52C7575D28C84445AB94158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:cd:a2:01:02:e4:91:bd:03:55:f6:99:09:
2a:c2:4f:d6:fb:7c:ad:80:4e:01:88:3c:80:ce:31:
9c:ae:0a:ee:93:86:d8:cb:0d:64:dd:05:62:4f:d0:
a6:5d:5a:af:a6:b3:a6:6b:16:83:7b:59:1c:70:a9:
c8:11:1e:2f:62:8d:bc:9e:5a:1e:ea:34:38:14:cc:
c2:43:c3:c4:03:ef:cb:9b:58:1a:ae:9b:80:0d:c5:
3d:4c:9b:53:21:ed:71:69:fc:25:33:7a:99:0f:42:
f8:e7:44:c2:3d:8e:19:45:75:9c:61:2f:b6:69:1f:
8b:16:2c:9c:49:03:9e:a4:f8:e0:31:7c:07:58:20:
e0:d2:00:c7:6c:f5:12:ff:7a:7a:46:f9:3a:c8:91:
ea:79:42:ba:e6:db:64:22:49:03:e4:01:9d:ba:22:
dd:52:93:85:4d:1c:53:5d:58:d0:8e:dc:91:ce:3b:
a3:82:ec:f1:c2:62:84:ff:03:6c:15:8a:16:01:c8:
ed:40:3c:3a:9d:39:bc:37:cb:4d:78:fb:6f:3c:0f:
ef:2c:d5:94:20:62:f5:ce:9a:97:76:0b:04:23:77:
92:09:28:b3:4d:47:fd:a4:5c:5f:2b:f2:95:45:ea:
1a:0c:b9:8c:47:53:08:48:7f:4c:6d:bd:e8:fc:3e:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:4B:9B:C0:11:1A:D4:C5:2C:75:75:D2:8C:84:44:5A:B9:41:58
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.192.0/24
Signature Algorithm: sha256WithRSAEncryption
09:df:48:52:e3:26:18:eb:1c:c9:91:ac:dd:ac:5e:55:5e:c4:
07:7f:6d:6e:0f:90:ca:54:07:f5:50:af:a6:5c:f0:9a:d1:f8:
26:15:7b:b5:9e:ca:e2:ef:ed:7d:bc:7e:b4:2f:02:e9:ba:72:
7e:71:07:66:95:76:86:93:e4:f9:13:81:2f:4d:0a:ec:c0:33:
37:82:db:0c:0d:42:01:15:98:f3:18:e8:79:cd:0e:65:43:9b:
f2:34:4a:f7:38:fb:55:69:9e:11:98:81:91:1a:34:31:4d:06:
f8:3c:3c:8c:02:b7:7c:85:f1:21:3f:75:bf:3b:a9:59:1c:26:
b1:4d:ef:c7:81:25:2a:8b:82:52:db:0f:ea:02:ab:6b:43:1e:
78:c5:e7:ad:e8:1c:d6:98:88:a6:b1:e6:9f:bd:32:08:7b:79:
fc:b1:bb:da:58:a1:4d:f7:1a:1d:18:26:32:a1:1c:66:ed:90:
74:e0:5d:8b:dd:4a:54:dc:27:76:97:98:a1:6a:f6:93:ea:df:
e5:39:77:10:f3:47:94:d0:f1:4f:08:63:4c:58:d8:d8:b1:44:
f2:60:09:23:a7:b5:79:74:27:65:37:6d:27:c3:0f:7a:cf:1b:
0c:46:e4:4b:e0:1c:2f:99:de:ac:e2:39:0b:a6:bd:20:1d:b2:
40:d2:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:36 2025 by rpki-client