Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: n/KjQH/rRaDg2oMzw2k7tmAYMDt6AA2h6lzPkTu4s8U=
Subject key identifier: D3:C2:19:6E:0D:8A:CB:84:7D:3B:81:F5:18:68:39:16:95:F6:9A:C4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 477469756B4638E7D4B0C7E6FD7463DA1D27BF81
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215224.roa
Signing time: Wed 26 Mar 2025 06:54:38 +0000
ROA not before: Wed 26 Mar 2025 06:49:38 +0000
ROA not after: Wed 25 Mar 2026 06:54:38 +0000
asID: 215224
IP address blocks: 148.135.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:74:69:75:6b:46:38:e7:d4:b0:c7:e6:fd:74:63:da:1d:27:bf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 06:49:38 2025 GMT
Not After : Mar 25 06:54:38 2026 GMT
Subject: CN=D3C2196E0D8ACB847D3B81F51868391695F69AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:14:4d:f6:2a:0e:2e:10:ad:1c:94:36:13:
3d:61:75:e8:f2:8f:2e:cb:ff:03:8c:6e:dd:56:27:
83:6c:3b:f8:fc:30:0e:72:e5:91:52:4e:79:3e:e2:
d4:2a:e1:89:dd:f7:e5:67:a3:46:b6:06:50:33:ad:
f3:67:c6:3c:54:0b:d8:c2:d9:44:eb:63:23:1f:60:
2b:39:29:57:10:29:a6:fd:f6:a3:0c:c1:70:f3:45:
d7:b3:a3:b9:d6:96:b7:83:8c:f6:9a:95:3c:a3:04:
51:e2:df:5b:a6:53:07:12:53:92:d6:fc:6f:61:3b:
15:8f:42:23:43:6e:e9:3e:e5:18:f8:f4:84:05:cd:
34:4a:b3:8a:c5:0f:00:7c:6e:d4:01:9b:77:1b:3c:
c4:9c:20:f3:9a:b8:92:6b:58:71:82:ee:0b:28:b7:
16:33:d2:b0:03:25:1c:8f:d6:52:f1:af:78:22:9e:
c2:29:a5:83:d6:9a:7c:9b:93:c8:7d:be:24:2a:3e:
f9:32:40:6d:c1:9a:bf:13:b7:4a:a2:85:2c:d4:13:
09:6c:30:6a:85:c5:8a:6c:7f:87:9f:38:76:aa:26:
59:6b:cc:7e:7f:e6:1b:89:c8:a5:52:e6:fa:71:2e:
52:f7:63:86:da:23:b1:eb:07:d0:a9:64:5c:fe:ca:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:19:6E:0D:8A:CB:84:7D:3B:81:F5:18:68:39:16:95:F6:9A:C4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.160.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0e:14:3b:7b:c5:d6:e9:c8:22:91:e9:90:a0:27:d2:4a:33:
fa:b4:b2:be:29:4d:40:dc:76:d5:e3:e7:ab:b0:37:04:05:5a:
b8:27:e9:93:6a:bf:00:09:25:b7:1c:d0:bd:1b:a3:42:20:7b:
2d:93:fe:b2:88:6e:76:07:39:0b:37:6f:96:a0:50:d7:3b:e8:
84:6c:50:e2:2e:fd:05:a2:26:9b:b4:f5:c4:1d:8d:fb:70:e5:
9c:66:8e:cf:a8:65:75:7a:28:30:6c:39:78:a1:78:69:54:f7:
38:1a:0c:f2:da:a0:cf:27:38:22:97:e7:67:89:71:4b:80:e0:
be:ae:59:c1:af:78:13:ac:11:68:00:8e:44:ab:6e:f1:ba:8c:
3c:67:17:b1:7c:18:f7:a8:43:a7:fa:5b:98:71:ed:2a:18:e2:
d9:3a:87:5d:62:90:66:0e:c2:7d:77:fa:bd:f7:23:4b:b7:00:
fd:1d:c6:ea:3b:9c:13:cd:92:7d:7d:fe:26:33:6f:84:cb:49:
c1:38:0e:3e:6b:cd:d2:81:66:8c:41:f2:66:05:ac:c6:7f:25:
c0:8e:4f:ef:82:82:40:56:4d:d7:a1:8f:1a:6c:4f:43:0b:5f:
e4:b1:28:79:89:88:e1:35:c9:72:17:35:de:d3:16:0b:3f:b4:
6e:ac:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:27 2025 by rpki-client