Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204957.roa
File: AS204957.roa (raw, json)
Hash identifier: OzuxEMqSuajxuNlqULLSsTviay4OGHFjmQwLaeUUO5E=
Subject key identifier: BD:ED:14:77:43:D6:0A:7F:B2:96:DD:A0:0F:16:B4:B7:30:AF:45:60
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2C85E6BDC5647B880B68AB64588AED590DA887C8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204957.roa
Signing time: Thu 20 Feb 2025 09:25:54 +0000
ROA not before: Thu 20 Feb 2025 09:20:54 +0000
ROA not after: Thu 19 Feb 2026 09:25:54 +0000
asID: 204957
IP address blocks: 150.241.214.0/24 maxlen: 24
150.241.224.0/24 maxlen: 24
150.241.225.0/24 maxlen: 24
150.241.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:85:e6:bd:c5:64:7b:88:0b:68:ab:64:58:8a:ed:59:0d:a8:87:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 20 09:20:54 2025 GMT
Not After : Feb 19 09:25:54 2026 GMT
Subject: CN=BDED147743D60A7FB296DDA00F16B4B730AF4560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:89:99:46:33:f0:31:c3:8a:81:27:dd:15:
17:d4:6c:e6:25:f1:08:be:06:66:25:a0:90:fd:bf:
2b:63:18:8a:c0:d8:ad:eb:c5:51:6f:cf:6b:f9:14:
3f:ed:08:98:39:d5:e9:5a:8b:80:44:10:3d:2a:cc:
84:0b:52:02:e5:37:90:ab:c4:b3:25:bd:5d:15:73:
b7:80:5b:1d:c4:0e:13:00:dd:cf:54:5e:30:c6:72:
d4:da:6e:9f:d6:f6:b9:02:26:57:3b:9d:bb:ed:c6:
45:5f:ac:cd:78:b6:04:a2:fd:35:a3:dc:c4:6f:06:
a6:c7:b6:4e:91:83:1b:5c:15:77:ad:ac:fa:f2:bd:
d1:d7:2a:47:27:bc:1a:70:0a:eb:d2:fd:c0:91:d1:
29:5c:51:fd:d6:0b:09:c1:0b:e7:85:dc:ea:d9:8b:
eb:82:84:fd:42:93:ed:92:73:24:25:b7:11:1e:78:
a2:dc:38:77:1d:da:53:6a:76:1b:4c:e5:41:e3:d0:
99:ae:7c:09:82:b1:c7:38:7b:b1:19:15:8f:0b:29:
e5:8c:6f:a2:02:67:30:83:33:67:31:a0:d7:5f:1b:
1c:c5:f3:21:8e:d7:59:fc:60:8f:4c:05:ed:ff:76:
56:68:02:2a:b4:7c:39:61:4d:2c:f2:f8:0c:5f:ca:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:14:77:43:D6:0A:7F:B2:96:DD:A0:0F:16:B4:B7:30:AF:45:60
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.214.0/24
150.241.224.0/23
150.241.235.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ce:13:74:5a:1a:43:ee:6b:e4:bd:0a:1d:34:bb:2b:12:cd:
81:9d:55:1a:cc:94:b9:99:0c:e3:a4:8a:2b:14:d4:49:d1:a7:
85:b9:df:8c:ba:f4:59:b1:ba:79:10:78:71:12:73:a4:de:0b:
e7:99:3f:44:27:54:f8:cb:6f:72:ef:cc:0f:7b:c6:02:bb:a0:
6f:f6:65:17:73:4f:46:28:81:05:5f:32:a0:8c:7e:32:bd:35:
56:9d:c4:63:7b:c3:af:29:47:04:3d:35:88:12:71:9d:e2:b7:
06:77:32:d3:65:56:50:ff:98:30:5c:6a:f9:ab:23:b6:bf:9c:
4e:bd:2d:9c:b9:c3:eb:17:79:93:30:d9:5e:23:da:1a:2a:50:
a9:0d:36:92:db:69:e8:a2:81:ac:af:f2:e8:79:af:65:23:b5:
34:83:f2:81:e7:8b:57:56:ff:af:97:4c:c8:58:5b:8c:50:4a:
cf:78:8e:c1:e9:d3:b8:34:fe:7c:f9:e7:51:4b:69:7b:64:1d:
92:2a:88:b5:d8:ac:8b:95:2d:07:47:d9:bf:fb:a5:11:70:f3:
c0:ab:06:ae:5c:27:11:1f:3e:11:84:7b:64:a6:5f:56:1d:92:
73:f0:94:db:6a:fa:da:05:a0:f0:f6:fa:fd:d2:20:67:ef:e6:
98:e9:94:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:00 2025 by rpki-client