Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: c1TUdSm+EsSI0rO7BX6XCVDRxBUbnNCrmyzYaLi1Y54=
Subject key identifier: FC:51:98:48:16:D1:28:83:98:07:75:C6:87:9C:30:EF:79:FC:A5:DA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69F2CFCE95C6EFB984D6D233D87C0873FCC7178E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
Signing time: Fri 06 Jun 2025 02:40:27 +0000
ROA not before: Fri 06 Jun 2025 02:35:27 +0000
ROA not after: Fri 05 Jun 2026 02:40:27 +0000
asID: 393942
IP address blocks: 143.14.130.0/24 maxlen: 24
145.223.67.0/24 maxlen: 24
155.117.217.0/24 maxlen: 24
167.148.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f2:cf:ce:95:c6:ef:b9:84:d6:d2:33:d8:7c:08:73:fc:c7:17:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 6 02:35:27 2025 GMT
Not After : Jun 5 02:40:27 2026 GMT
Subject: CN=FC51984816D12883980775C6879C30EF79FCA5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:b1:f0:a2:38:f4:e2:81:98:f4:3f:32:85:
1d:35:af:85:1b:36:da:51:a3:c2:3c:2a:2a:dc:2b:
f3:2d:10:4d:6c:16:b9:14:cf:11:60:c5:0e:fd:0f:
b6:74:f7:09:64:52:15:b4:a7:19:ef:b9:a7:89:2f:
aa:1a:69:b5:82:b9:cd:9a:21:42:8d:42:b5:2e:f2:
ce:44:51:64:c5:20:cb:46:68:38:02:eb:90:41:c3:
b6:8e:f2:76:1a:c9:ee:b8:65:1c:89:73:1b:7a:4a:
dd:72:ad:a2:42:dc:db:27:5e:d8:a5:ed:ed:e6:d9:
55:dc:7f:7b:26:49:ce:af:8b:ac:61:51:9c:43:63:
c8:61:d9:3c:02:ed:6d:aa:20:87:f7:17:b1:ee:a7:
b1:3b:82:11:6c:8c:4b:86:e6:b6:e1:f8:5b:02:7b:
e4:de:4d:e0:95:b0:a4:29:dd:ab:7c:3b:8f:b0:86:
a4:2b:f5:a5:45:d9:29:0e:8f:86:a0:52:bc:00:32:
24:d7:f1:64:33:31:67:fa:48:63:e9:ae:ac:9a:64:
d8:72:5b:ee:7a:d6:82:b8:b6:27:3d:78:e2:99:66:
55:24:da:b9:8f:82:61:2c:15:9d:10:33:78:dc:be:
79:f3:ec:a4:78:37:ef:12:a8:d3:94:fc:5b:8d:23:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:98:48:16:D1:28:83:98:07:75:C6:87:9C:30:EF:79:FC:A5:DA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.130.0/24
145.223.67.0/24
155.117.217.0/24
167.148.163.0/24
Signature Algorithm: sha256WithRSAEncryption
08:23:03:a1:0a:04:01:55:26:3d:95:d9:48:8a:26:8a:c2:66:
74:79:dc:5e:69:70:2e:70:c0:e0:2a:6d:dd:b5:44:d9:93:b2:
b1:c3:7b:0c:f0:72:d7:c1:25:2e:d6:07:65:8c:ef:ad:72:a0:
68:be:27:08:d8:0a:32:d7:77:e5:43:b5:b3:0b:0d:c5:25:23:
00:22:cb:3b:83:91:ce:5f:62:bf:c4:80:61:b0:18:20:b3:d2:
4c:f0:e7:7d:3a:1f:3a:96:1e:af:b2:ca:cc:80:ea:bc:e2:5f:
95:08:87:97:dc:bd:dd:87:a4:8f:f5:91:bb:f6:71:c7:58:41:
3b:3f:0c:20:51:cd:8f:8d:39:23:96:02:ae:9e:6e:dd:4b:b0:
2b:cf:99:0d:69:6b:fa:55:68:c6:1e:d6:9d:3d:3a:25:28:72:
05:f5:8b:22:66:39:ee:6c:06:ab:9a:f0:48:1d:35:78:c8:42:
05:e2:c6:d6:cc:72:f7:65:e6:ac:8c:b0:fd:cf:bc:0f:40:93:
e5:95:37:2c:55:6e:50:5a:a7:0b:3a:ab:c8:12:80:5b:17:3f:
f3:fd:a6:f2:32:3b:b0:92:90:ff:85:72:ea:01:14:c4:3c:66:
10:95:76:ee:d8:ef:c8:ad:17:bb:ab:56:a0:0d:f4:7d:6c:a9:
e2:f9:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:18:25 2025 by rpki-client