Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40605.roa
File: AS40605.roa (raw, json)
Hash identifier: Kst46pU6quW5wyqoHv9XtagPFB28BqzDiZpOkw48Dss=
Subject key identifier: AA:14:B2:DC:62:F8:F8:C3:29:95:8A:B2:C1:D4:4B:81:DB:37:E1:8F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45EA101A8C01A576773E476E2411957CA97C7D81
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40605.roa
Signing time: Thu 05 Jun 2025 08:27:12 +0000
ROA not before: Thu 05 Jun 2025 08:22:12 +0000
ROA not after: Thu 04 Jun 2026 08:27:12 +0000
asID: 40605
IP address blocks: 162.141.0.0/24 maxlen: 24
162.141.1.0/24 maxlen: 24
162.141.2.0/24 maxlen: 24
162.141.3.0/24 maxlen: 24
162.141.4.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.6.0/24 maxlen: 24
162.141.7.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
162.141.9.0/24 maxlen: 24
162.141.10.0/24 maxlen: 24
162.141.11.0/24 maxlen: 24
162.141.12.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.14.0/24 maxlen: 24
162.141.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ea:10:1a:8c:01:a5:76:77:3e:47:6e:24:11:95:7c:a9:7c:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 08:22:12 2025 GMT
Not After : Jun 4 08:27:12 2026 GMT
Subject: CN=AA14B2DC62F8F8C329958AB2C1D44B81DB37E18F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:47:97:3b:13:27:fc:85:aa:8a:da:c5:c8:
4f:5b:db:46:b5:44:6f:1f:0f:fa:28:6f:84:c9:10:
62:29:70:1f:df:45:49:0a:a1:16:e3:0a:24:6c:dc:
04:54:5b:7d:8f:e3:da:49:80:4f:d8:a6:5d:d7:e2:
6c:a1:fe:cb:f5:64:fa:a0:df:86:10:18:a8:58:ec:
91:01:fb:6e:cf:bd:33:ef:8f:43:81:09:c7:4b:07:
65:63:67:c7:8f:23:37:4a:d9:f7:ad:57:68:3a:c3:
a3:e7:c1:a3:b2:f9:93:0d:ad:c9:20:76:19:06:c5:
69:1d:51:c3:5d:b7:e3:05:2e:85:64:07:cc:54:31:
90:a5:ee:07:21:1b:eb:5b:af:71:93:61:29:26:32:
10:00:50:37:d1:1f:a7:43:a3:37:94:f4:df:bf:8b:
ab:fa:b7:63:20:72:3b:d8:9c:66:bd:13:f9:85:8a:
1a:f3:71:6d:ce:6b:ef:cf:b3:b1:e5:4c:83:83:c3:
87:72:ec:1f:6b:89:a1:40:0d:fa:dd:0b:e6:12:5b:
21:b4:07:01:96:f5:28:ae:63:11:40:bb:0f:d5:dd:
6c:88:be:c9:51:c7:6b:f8:3c:54:b7:84:27:9a:5b:
a4:86:3a:51:5a:68:a2:63:1a:85:90:af:5d:63:7a:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:B2:DC:62:F8:F8:C3:29:95:8A:B2:C1:D4:4B:81:DB:37:E1:8F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.0.0/20
Signature Algorithm: sha256WithRSAEncryption
09:fa:7b:18:d3:44:bd:b8:32:b0:a5:9a:a6:4d:e0:5a:df:9f:
1d:8f:ff:ab:78:02:0e:c6:bc:bc:00:ec:30:33:0b:9d:7a:68:
76:b3:86:8d:98:7c:fb:b0:bf:75:75:3e:ac:ae:1f:dc:ba:8c:
ba:85:0e:f7:a5:88:38:2b:c9:7c:1b:1b:92:28:14:e9:18:3e:
e8:32:6c:05:3a:f6:1c:c2:5e:a2:01:a9:23:4b:36:38:09:65:
1d:66:18:76:b0:63:84:35:b6:20:f7:43:70:65:02:5a:01:c5:
6e:a9:a3:8e:a3:20:bb:7e:cc:e8:46:3b:ba:77:eb:17:f2:73:
a2:14:2a:ff:92:50:80:f9:bd:b5:90:2c:1b:f9:39:45:11:56:
3a:73:f5:98:0e:68:2b:14:c5:b8:34:ba:a4:e0:cb:a9:3e:15:
30:1a:48:25:fe:40:11:ed:34:ac:df:bc:d0:42:bb:59:07:56:
80:bd:04:b2:fb:f1:c2:01:a3:55:62:fc:87:a5:bb:7f:59:2c:
85:ce:fd:d0:8a:1c:90:f5:42:22:35:55:ef:92:22:71:bf:21:
71:eb:be:2b:b7:29:81:fd:68:c7:32:95:0f:6c:85:8a:48:34:
16:02:c0:99:3f:4c:aa:b7:19:f3:80:4e:34:da:ab:94:49:4c:
e8:0d:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:35 2025 by rpki-client