Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: X0E0tJFSJx90Xp0v//RKze0IZERJL87GEOA5Sj75J5M=
Subject key identifier: E9:27:13:4E:CB:18:30:8F:13:18:02:1A:CE:B6:3B:DA:B0:78:CA:7F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 07F7449BEB61970F1F6A910AEA21E386BB8A1AEC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
Signing time: Tue 03 Jun 2025 07:06:34 +0000
ROA not before: Tue 03 Jun 2025 07:01:34 +0000
ROA not after: Tue 02 Jun 2026 07:06:34 +0000
asID: 3257
IP address blocks: 162.141.49.0/24 maxlen: 24
162.141.64.0/24 maxlen: 24
162.141.95.0/24 maxlen: 24
162.141.122.0/24 maxlen: 24
162.141.165.0/24 maxlen: 24
167.148.1.0/24 maxlen: 24
167.148.4.0/24 maxlen: 24
167.148.5.0/24 maxlen: 24
167.148.10.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.14.0/24 maxlen: 24
167.148.29.0/24 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.100.0/24 maxlen: 24
167.148.106.0/24 maxlen: 24
167.148.116.0/24 maxlen: 24
167.148.127.0/24 maxlen: 24
167.148.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f7:44:9b:eb:61:97:0f:1f:6a:91:0a:ea:21:e3:86:bb:8a:1a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 3 07:01:34 2025 GMT
Not After : Jun 2 07:06:34 2026 GMT
Subject: CN=E927134ECB18308F1318021ACEB63BDAB078CA7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:47:e7:0d:4e:c5:81:74:ff:b2:3b:51:81:
60:74:88:32:94:b9:26:f3:ee:17:c4:5f:d8:0d:8a:
59:a9:da:b4:33:0e:a2:3a:2d:b3:44:1c:60:89:3f:
ba:cb:d8:84:25:02:e9:08:a9:60:ef:4e:93:3f:bd:
e2:a5:e4:64:6f:3b:35:5a:37:b0:ce:29:35:dd:ab:
20:80:d2:ee:aa:8e:9f:04:d9:7d:19:ae:0a:96:d3:
78:15:c2:d6:81:41:97:44:2a:86:9f:bf:80:fd:0a:
d8:80:6c:07:9c:2f:1c:03:32:2d:80:65:d0:8d:1c:
ca:49:8d:c5:a3:ef:a7:43:15:82:a7:19:b7:4f:9b:
99:73:8c:f5:e0:44:10:84:c3:f1:55:93:e4:0c:f6:
e2:be:e0:b1:33:98:9e:18:70:65:49:a9:bf:7e:f3:
15:6c:c4:a8:ff:06:f7:a8:fe:7f:a1:7e:bd:21:41:
75:ac:62:c7:67:1e:d2:92:f8:21:33:c0:8b:b2:17:
a1:57:fa:81:70:07:8c:67:e4:b3:09:08:66:b1:e4:
5d:96:bf:92:88:3c:dc:92:9e:f7:30:96:3a:f1:59:
b4:e5:87:b7:41:c3:d3:d3:5e:83:35:23:b6:6a:c1:
84:e6:55:10:b8:77:b2:5f:90:c3:8b:5f:ab:8a:eb:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:13:4E:CB:18:30:8F:13:18:02:1A:CE:B6:3B:DA:B0:78:CA:7F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.49.0/24
162.141.64.0/24
162.141.95.0/24
162.141.122.0/24
162.141.165.0/24
167.148.1.0/24
167.148.4.0/23
167.148.10.0/24
167.148.12.0/24
167.148.14.0/24
167.148.29.0-167.148.30.255
167.148.100.0/24
167.148.106.0/24
167.148.116.0/24
167.148.127.0/24
167.148.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:67:d3:88:31:69:01:47:59:9c:34:e7:e7:1f:b9:b5:d8:68:
d4:45:a0:b4:98:a9:5c:a8:58:da:44:6f:d7:20:95:ba:06:73:
05:3a:94:b4:52:3f:a2:d6:06:27:43:5d:b2:93:78:3b:3f:e4:
62:ed:bb:59:75:19:62:a3:3b:fc:a1:4e:e2:48:73:09:79:39:
84:7c:ea:b4:88:93:ac:44:99:cf:72:7e:0b:e0:61:13:2c:58:
dc:66:e0:d1:c3:4c:69:52:ea:c4:a0:1f:03:a9:d9:56:f9:15:
c7:ed:ce:8a:74:dd:e0:ea:3d:b3:33:72:b7:9e:e4:d3:af:81:
27:c1:5e:cf:d9:92:b9:69:21:a3:51:5d:23:b9:2c:05:82:f6:
b9:a7:10:b7:6a:88:8b:c0:6e:04:a8:27:e7:79:b3:db:08:7b:
7e:28:e3:82:35:de:ec:a9:66:00:ae:f6:c6:ee:12:55:1f:66:
b9:23:4e:21:19:c5:69:73:c9:0f:58:0b:b2:0a:82:f6:eb:52:
37:14:d5:cf:16:db:94:35:30:29:ca:a5:7c:04:14:9a:4b:85:
9b:fe:d0:db:b4:92:a3:65:69:f1:78:f4:bf:69:03:16:1a:33:
14:31:0a:c3:10:d2:38:b1:45:ea:cf:2d:df:71:42:19:bb:f8:
58:5e:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:16:14 2025 by rpki-client