Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
File: AS401190.roa (raw, json)
Hash identifier: 7+GJUToMfGZNkMfL//S1FH2QhlFLDHY/nRLKNLx3efc=
Subject key identifier: D7:F6:6D:6A:44:86:41:9C:CE:68:02:85:DF:F9:38:1E:E7:E7:E9:24
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6CFBF04325AE98C8F9E68B37D51F97D6C37F0F2B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
Signing time: Fri 14 Mar 2025 10:36:01 +0000
ROA not before: Fri 14 Mar 2025 10:31:01 +0000
ROA not after: Fri 13 Mar 2026 10:36:01 +0000
asID: 401190
IP address blocks: 150.241.192.0/22 maxlen: 24
150.241.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fb:f0:43:25:ae:98:c8:f9:e6:8b:37:d5:1f:97:d6:c3:7f:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 10:31:01 2025 GMT
Not After : Mar 13 10:36:01 2026 GMT
Subject: CN=D7F66D6A4486419CCE680285DFF9381EE7E7E924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:9d:40:cd:6a:e9:40:89:6c:1e:a0:37:1a:
f9:21:83:a2:58:74:6f:77:d9:9e:33:63:05:09:48:
7a:e2:68:9c:8c:59:df:37:69:7d:ea:51:f3:b5:d4:
83:42:10:45:5d:a3:38:76:39:f8:8b:99:d4:8e:1d:
3b:56:9c:7a:5c:32:8d:bf:e7:8e:2d:a3:47:14:9a:
d6:9d:eb:4e:27:5b:b6:88:2d:0d:b8:09:55:55:47:
4e:71:48:a5:41:0c:33:d0:e1:d6:96:6d:4d:75:65:
78:9b:16:fc:06:86:aa:17:63:d9:d4:f7:d0:25:5d:
ce:32:94:64:1f:aa:8e:09:ed:1b:50:00:f5:79:d7:
04:90:75:39:52:c3:b7:6f:32:29:1b:f1:c4:f8:96:
a0:6c:1b:5d:fc:50:46:7e:3d:11:30:10:8d:82:bb:
11:ae:08:6e:76:bc:fc:39:65:c9:02:85:9b:84:80:
1f:d8:a1:be:90:99:43:80:76:fe:49:88:30:fb:8c:
09:f9:3c:94:a5:70:7b:82:f7:bb:57:30:15:3b:4b:
1e:09:8a:63:07:5e:6a:63:45:22:99:80:a8:fc:aa:
4a:f7:d5:99:38:81:04:c2:5e:98:57:59:b8:a9:78:
f5:8c:8c:5d:08:80:dd:2b:8a:f8:87:9c:f5:85:bf:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:6D:6A:44:86:41:9C:CE:68:02:85:DF:F9:38:1E:E7:E7:E9:24
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.192.0/22
150.241.216.0/21
Signature Algorithm: sha256WithRSAEncryption
05:96:6a:9e:2a:c5:61:29:1a:2f:57:36:95:42:56:76:56:96:
92:d9:8e:d3:6b:11:e7:c7:58:4b:a3:a4:3a:15:40:ca:f2:3e:
77:86:e4:e7:55:21:1c:22:7a:37:c6:bf:06:66:88:9c:63:f8:
49:cb:d2:4b:ca:4a:78:3b:bf:41:5e:f9:61:37:42:eb:57:33:
c1:60:b4:aa:80:7c:04:98:88:e2:06:6c:cc:aa:e4:c8:82:38:
d9:76:be:db:ad:07:77:90:92:29:27:8b:b3:9c:f8:12:a1:a3:
98:8a:f8:e4:ea:2c:29:44:40:94:62:8e:ab:97:26:ef:10:52:
4b:94:00:b4:12:13:c4:59:94:42:a7:d1:3d:42:ef:01:b7:16:
fa:4a:27:8a:56:bc:3a:f8:a5:f2:fe:14:76:08:cb:1b:fe:09:
43:05:9d:6c:bd:96:a7:cd:2d:b7:ad:54:e6:de:f3:f8:f7:bc:
88:fa:18:5a:c2:7e:9e:2f:db:f5:b7:ff:90:d2:36:6a:ec:08:
f5:25:53:a1:fe:42:89:5e:6c:6b:4d:b5:c6:7d:b9:e0:34:fe:
1c:17:89:c5:9e:05:3f:22:d3:9c:eb:51:4e:57:02:bf:ca:df:
d6:4f:17:37:1a:fe:3e:d5:f2:14:63:91:a5:4d:d5:f2:3e:b1:
d9:44:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:49 2025 by rpki-client