Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
File: AS395839.roa (raw, json)
Hash identifier: kqDwlN6T/hvnJYm1I0ITgZXcHCMkra8hrUkGPmmubag=
Subject key identifier: 4E:05:C4:F9:EB:0E:BF:4E:DD:8F:A8:D0:7E:04:EA:46:06:AA:42:1C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 662A0457A0C198AF21F6E06A2CAE7093CA1679CE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
Signing time: Fri 23 May 2025 04:36:04 +0000
ROA not before: Fri 23 May 2025 04:31:04 +0000
ROA not after: Fri 22 May 2026 04:36:04 +0000
asID: 395839
IP address blocks: 143.14.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2a:04:57:a0:c1:98:af:21:f6:e0:6a:2c:ae:70:93:ca:16:79:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 23 04:31:04 2025 GMT
Not After : May 22 04:36:04 2026 GMT
Subject: CN=4E05C4F9EB0EBF4EDD8FA8D07E04EA4606AA421C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:ed:bc:b7:c7:74:2c:c8:79:d7:20:21:9f:
32:5c:ce:13:22:7a:81:4c:26:78:2a:b3:65:2b:f9:
c8:01:28:af:87:f6:7c:4a:4b:34:75:d5:e3:52:31:
80:7b:ec:aa:e2:65:e0:bf:bd:f8:72:87:49:ec:cb:
19:2b:9e:e7:ea:d1:7a:43:fd:1e:b1:9e:4a:fb:c3:
bd:f9:06:39:af:54:23:ba:2c:17:69:ab:99:57:0b:
27:26:01:b9:21:b8:67:de:45:36:8c:b1:65:23:90:
b5:5e:5b:83:a7:1b:f7:3c:29:6f:9d:78:b7:7e:b4:
38:b6:da:ad:60:dc:8a:5e:b6:ee:94:ee:0d:c4:d1:
2b:9b:96:fa:fa:02:db:a4:2b:2e:34:66:28:84:d6:
74:a9:4a:bd:a4:e8:fd:bc:45:2a:90:8a:9f:93:7f:
20:e0:b0:b9:af:48:5d:74:e0:23:91:30:cc:b6:a1:
20:e2:6f:1b:32:ea:93:c6:18:12:99:d3:6c:75:3a:
f4:ab:77:2f:da:23:7e:d2:e5:d8:53:f0:3b:1a:19:
c8:5b:1d:29:20:4e:06:00:5e:33:8d:d1:64:aa:e0:
a8:25:96:42:b2:5b:2f:49:5a:b1:08:8c:ed:97:bb:
f9:76:f3:04:ff:57:28:f8:fe:79:f0:6f:e8:64:d4:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:C4:F9:EB:0E:BF:4E:DD:8F:A8:D0:7E:04:EA:46:06:AA:42:1C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.176.0/20
Signature Algorithm: sha256WithRSAEncryption
66:5f:e2:60:6d:5a:55:d9:71:a5:fa:e3:e1:c0:1c:0d:19:1f:
c5:b8:99:09:df:2e:05:72:44:d4:b1:24:20:c0:d5:66:c3:2d:
b6:26:de:2a:d7:be:6b:f8:f9:54:45:ef:01:69:a4:b1:22:f2:
ad:ae:a5:03:41:88:a8:c0:1a:8c:e5:d8:ca:8f:0f:c2:45:05:
be:18:ef:69:c4:59:da:be:de:38:60:46:d2:53:5c:00:d2:74:
e9:2f:7b:8f:bf:6b:96:e0:27:a0:4d:a1:9e:a9:8d:fc:5f:e8:
17:70:89:f1:0f:a7:37:3e:c6:b1:d3:31:94:89:7b:90:4a:4c:
cc:4f:41:5c:f9:ce:06:84:ae:50:ee:35:b6:1c:e5:1f:5f:46:
1b:93:0a:71:20:86:71:1f:45:67:ba:d0:b0:e9:22:33:9a:28:
95:2f:c9:d7:7a:62:e6:06:09:62:8e:54:e9:b8:2c:63:a0:f8:
48:36:32:a4:25:54:4a:07:75:f8:85:32:20:f4:c0:d9:db:87:
75:c2:47:1e:b5:71:eb:84:33:39:bb:c0:27:26:97:26:1d:2a:
f7:ac:45:53:8f:01:9d:6f:e2:5e:2c:cf:ac:e7:87:a8:13:5c:
e1:3d:fd:5d:f2:d8:9b:c3:87:03:fa:16:f0:96:3e:ba:cb:b1:
fc:93:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:56 2025 by rpki-client