Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35758.roa
File: AS35758.roa (raw, json)
Hash identifier: KVIUyuCyBmTcos6KQLJrdN0wpU5A/oh1ojssggsOBu4=
Subject key identifier: D2:9D:6B:D1:15:6B:11:FF:5A:95:30:59:50:64:59:D0:26:4E:17:9D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2E35FDBCC66FD5D4976A19352241B4777917E245
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35758.roa
Signing time: Mon 12 May 2025 05:58:52 +0000
ROA not before: Mon 12 May 2025 05:53:52 +0000
ROA not after: Mon 11 May 2026 05:58:52 +0000
asID: 35758
IP address blocks: 148.135.200.0/24 maxlen: 24
203.100.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:35:fd:bc:c6:6f:d5:d4:97:6a:19:35:22:41:b4:77:79:17:e2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 12 05:53:52 2025 GMT
Not After : May 11 05:58:52 2026 GMT
Subject: CN=D29D6BD1156B11FF5A953059506459D0264E179D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:1c:bb:48:2d:d4:62:59:62:5f:37:89:fa:
de:d7:48:c7:53:e7:6c:9c:d4:a5:0f:9c:38:5e:21:
83:20:9a:f2:5c:fc:3c:c7:7f:a1:87:66:fd:fc:c6:
5e:8b:64:5b:5b:c3:f7:b0:43:0a:34:60:1a:12:a8:
5a:3f:3c:f1:8e:87:7d:2a:9e:90:69:d3:3b:92:56:
60:42:ab:7b:08:0a:f4:b5:93:80:f1:eb:50:16:5a:
28:81:d7:fc:ed:c3:1e:be:44:52:bc:d2:d3:a2:5f:
f5:dd:c0:8a:45:28:a4:b8:22:8a:b8:3a:cf:f0:1a:
8f:f1:dd:0c:79:87:7d:4a:bd:1b:a2:ad:07:3e:d2:
ba:ca:21:fe:fe:61:54:97:cf:f8:68:dc:94:31:6a:
76:16:de:61:0f:58:99:c2:95:23:fa:eb:d7:f9:50:
22:6a:c0:1b:65:54:0a:61:a6:e5:d5:00:4c:eb:7d:
23:e4:51:d7:10:5b:93:f8:f6:d9:3e:34:c0:54:48:
dd:fc:6e:54:3f:c3:f0:79:76:44:ef:ea:6c:ec:b2:
23:c4:89:55:49:2d:88:76:1e:c9:e3:7b:a9:e1:81:
2e:68:0a:07:de:d5:d4:d2:e1:f6:30:90:66:6e:1b:
b9:61:1a:e3:96:be:30:83:74:b0:3a:17:82:8a:ba:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9D:6B:D1:15:6B:11:FF:5A:95:30:59:50:64:59:D0:26:4E:17:9D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.200.0/24
203.100.212.0/22
Signature Algorithm: sha256WithRSAEncryption
43:3e:66:d9:65:46:62:4e:98:8b:df:83:7a:f3:44:ac:62:5f:
d6:7d:ce:ac:fd:94:48:09:7c:61:85:a3:06:b2:49:89:35:6b:
e9:b1:b2:02:23:05:f8:5e:dd:35:12:54:94:9b:3b:ff:f6:d3:
24:7c:42:4a:9b:35:f2:89:39:92:63:31:7a:2d:d0:f0:87:98:
1a:c2:bc:59:e6:08:54:2b:ac:c1:91:a6:e8:f3:20:39:d9:02:
78:de:b9:59:cf:66:f9:48:a6:d3:45:2a:fc:ee:8d:7f:1f:1e:
b4:68:e8:08:61:58:21:3c:2f:ef:bc:b5:7f:8a:af:0d:4c:39:
87:fb:e2:51:4a:d9:65:65:30:ae:c5:f4:ad:2e:03:13:07:50:
a9:f1:7f:91:d0:36:36:b2:1c:20:bd:f5:bf:e1:f4:6a:a5:a6:
92:20:85:eb:82:d5:bc:d4:2e:74:74:95:be:03:83:56:b8:a0:
b3:8a:e0:e0:ea:29:45:55:b6:8a:f5:d2:74:c6:b4:5f:22:a5:
94:ad:29:ed:95:68:86:18:21:c6:af:04:93:3b:30:41:89:fa:
a3:44:9a:df:0a:2f:33:1a:9d:59:4d:9a:05:81:37:18:48:70:
5b:0e:b1:ee:f7:1d:59:23:c4:52:87:2e:00:3b:5d:2f:9c:cf:
ad:85:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:38 2025 by rpki-client