Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22439.roa
File: AS22439.roa (raw, json)
Hash identifier: mmAS81NFemtO7MYwTMGLhCjI8evD+mtjazd0f2UfIGw=
Subject key identifier: 4A:9C:C1:70:1C:34:1E:CA:8C:7A:A9:7D:88:92:1F:8A:82:40:2F:18
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04639C8546620F51F4709A58C4A79A50DE66932F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22439.roa
Signing time: Mon 19 May 2025 13:11:50 +0000
ROA not before: Mon 19 May 2025 13:06:50 +0000
ROA not after: Mon 18 May 2026 13:11:50 +0000
asID: 22439
IP address blocks: 143.14.86.0/24 maxlen: 24
143.14.202.0/24 maxlen: 24
155.117.51.0/24 maxlen: 24
155.117.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:63:9c:85:46:62:0f:51:f4:70:9a:58:c4:a7:9a:50:de:66:93:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 19 13:06:50 2025 GMT
Not After : May 18 13:11:50 2026 GMT
Subject: CN=4A9CC1701C341ECA8C7AA97D88921F8A82402F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:f3:56:c8:82:08:50:2a:ba:e6:65:68:17:
8f:b1:c4:e9:1e:af:15:2c:7d:d3:b4:3d:32:3c:cf:
5e:d7:49:ad:c5:da:12:c3:8c:a3:d3:4f:e3:d5:40:
2b:b1:a8:78:d5:8c:3b:87:d3:c4:a5:0c:21:a6:27:
c1:61:f1:e7:ff:a4:b2:4b:21:c5:98:53:54:6c:d7:
0b:61:b3:83:4f:30:85:a4:87:51:e3:78:d7:92:2d:
c7:13:76:c6:6d:8f:b5:49:d1:56:2c:c5:59:cd:13:
67:ae:2c:52:09:0b:02:9b:6a:f0:31:db:73:14:57:
1e:16:96:48:bb:34:a3:47:a5:63:90:32:4c:6a:f8:
da:9c:93:35:63:1f:fa:d4:2f:c5:b7:74:c2:bd:61:
04:c0:5b:0b:0f:56:93:03:ba:bf:db:c2:11:b7:a0:
3e:08:ff:38:b7:cc:5f:19:96:dc:ed:25:a7:86:98:
ef:83:49:c8:87:6b:c7:f7:36:e7:e9:0b:3f:57:ec:
09:39:ea:ee:38:8a:50:03:7a:b0:7c:fc:8b:35:67:
79:e4:f0:81:52:11:4f:ca:15:f6:77:0c:bf:9f:37:
ea:1d:a2:ff:ea:ac:c7:28:ff:a9:f6:7a:7b:5e:32:
2c:ae:fa:c8:a5:a2:b5:da:88:a5:1b:28:c1:26:1d:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:C1:70:1C:34:1E:CA:8C:7A:A9:7D:88:92:1F:8A:82:40:2F:18
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.86.0/24
143.14.202.0/24
155.117.51.0/24
155.117.237.0/24
Signature Algorithm: sha256WithRSAEncryption
94:18:66:4e:3a:df:bc:ec:5e:db:48:e4:fa:2d:f2:4c:74:ee:
13:0e:c0:eb:03:61:ff:7b:54:4b:cf:90:e4:90:52:79:b9:49:
ca:90:c9:89:4a:92:6c:3b:82:0e:9a:9c:fe:ce:95:45:65:4c:
24:5b:5a:4a:4a:23:01:45:6c:7f:f6:13:47:c8:cf:ac:c9:ae:
ed:35:1e:95:9a:47:89:07:16:85:53:8c:0c:8c:0b:b1:8f:24:
c9:5a:07:5e:b6:d6:8a:cf:a2:27:a5:89:4e:72:c6:9e:dd:79:
11:74:38:a8:7f:d5:f0:55:4c:16:2a:49:96:8b:d7:2e:e5:ac:
64:ef:9b:5c:2f:60:51:ee:ce:36:4d:28:4e:02:97:5f:af:2a:
8d:fa:dc:c0:2e:bb:e8:91:d4:c4:9e:97:fc:3c:16:09:9f:20:
2b:93:5a:7e:93:97:34:1c:b6:6c:cc:3a:23:17:8a:28:90:c9:
cc:20:0b:d9:66:9b:be:3e:37:b6:a4:c2:05:04:6c:46:f9:37:
39:b4:2d:28:37:64:6a:30:d2:36:96:09:f5:8b:87:ae:d5:b3:
06:79:a2:3b:43:dc:3e:35:8f:a2:ba:df:b1:1b:d3:41:fb:b1:
f1:ff:3b:b5:0f:b7:37:88:75:0c:2f:8b:8d:6e:70:8c:26:15:
bb:16:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:27:33 2025 by rpki-client