Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS43641.roa
File: AS43641.roa (raw, json)
Hash identifier: aleIjiAFFluarojqddEMyn6r2xr0nXt4KhTlT/uec8M=
Subject key identifier: EE:BE:E3:79:A9:74:04:66:18:51:37:A9:38:07:29:23:9E:62:43:78
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A86B38A16FD2DBF14F38AABBD4B0AB9D33CEAF4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS43641.roa
Signing time: Tue 03 Dec 2024 12:27:50 +0000
ROA not before: Tue 03 Dec 2024 12:22:50 +0000
ROA not after: Tue 02 Dec 2025 12:27:50 +0000
asID: 43641
IP address blocks: 148.135.144.0/24 maxlen: 24
148.135.146.0/24 maxlen: 24
148.135.148.0/24 maxlen: 24
148.135.149.0/24 maxlen: 24
148.135.151.0/24 maxlen: 24
148.135.157.0/24 maxlen: 24
148.135.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:86:b3:8a:16:fd:2d:bf:14:f3:8a:ab:bd:4b:0a:b9:d3:3c:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Dec 3 12:22:50 2024 GMT
Not After : Dec 2 12:27:50 2025 GMT
Subject: CN=EEBEE379A9740466185137A9380729239E624378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:00:dd:82:c4:88:af:27:a8:b4:2a:df:ac:
63:35:84:c6:ba:76:42:3d:97:bc:fb:95:d5:03:e8:
f9:16:cc:28:7a:5c:f0:9f:83:50:80:ed:39:5d:78:
73:1a:81:1d:68:98:8f:3a:2f:6c:f4:ad:01:36:01:
04:98:a1:04:da:d6:fb:5a:4b:61:80:6a:2a:a0:2d:
19:8b:2e:31:ee:8f:24:f6:f9:b6:ee:9e:2c:10:86:
8c:27:a5:a8:eb:7e:31:bb:7a:eb:c5:a6:48:c1:bd:
33:49:1a:d2:79:90:c2:51:e3:32:a5:b3:43:6e:53:
70:6a:95:7d:b4:a8:22:b4:61:03:4b:1a:09:62:d2:
16:b0:c7:8f:3b:79:61:7c:ab:64:c3:a5:49:42:a8:
a8:c5:b1:cf:5f:3e:8d:bc:43:4b:7c:a3:65:29:81:
b0:14:fc:fd:e0:7c:68:3e:6a:99:7e:36:7c:bc:36:
13:3e:2d:9f:e6:cf:6d:46:2d:c2:4c:93:28:f0:9b:
b9:53:9d:ff:04:8f:f2:71:bb:a5:a1:8a:22:47:7e:
c2:9e:00:0c:5c:11:dc:69:bc:42:d7:a4:4e:e4:cb:
f9:7d:49:e4:0f:ce:33:fc:22:72:70:0c:cc:8f:45:
2d:c1:f7:a2:14:34:fc:34:85:18:96:0a:19:5f:9a:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:E3:79:A9:74:04:66:18:51:37:A9:38:07:29:23:9E:62:43:78
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS43641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.144.0/24
148.135.146.0/24
148.135.148.0/23
148.135.151.0/24
148.135.157.0-148.135.158.255
Signature Algorithm: sha256WithRSAEncryption
4e:25:b8:cf:9e:82:87:69:34:fd:cf:bc:aa:1c:06:08:a6:41:
a2:c4:e3:7c:f9:e9:39:b3:5e:c6:77:0e:23:24:34:fb:57:ae:
99:bf:68:09:27:05:70:20:e7:54:2c:7e:ac:c8:0e:d8:01:6e:
cc:a1:12:c8:1a:6e:5f:23:d8:6b:47:b2:e9:b6:f4:e6:e7:a6:
b2:0f:58:50:84:6f:63:8c:23:1e:99:ff:f5:75:9f:e7:2b:d2:
76:ce:26:34:6c:94:c0:fa:30:c3:84:95:d1:4c:4a:15:f3:4d:
71:0e:ef:c0:be:6b:59:b2:f6:f7:41:48:39:af:30:31:dd:cd:
c7:12:72:41:7d:f2:99:af:97:0f:ef:66:04:2e:1e:37:e1:b2:
00:aa:97:57:24:13:ac:0c:78:b6:d5:2e:b4:8d:97:69:e0:44:
04:90:28:4e:e7:77:57:39:54:ec:ce:86:45:3f:11:1c:cb:18:
fa:36:8c:c3:e8:a4:e0:fa:a3:5f:77:2d:80:92:ce:57:20:12:
77:fe:eb:45:bb:88:d8:ed:54:aa:23:0e:c3:a5:ef:ff:bb:5b:
78:36:5e:d7:83:c2:2f:23:80:49:bf:3e:ca:ed:07:f0:43:a3:
67:3b:b2:12:45:e7:00:e2:52:a1:ed:b6:b0:3d:79:a3:4d:e0:
d0:22:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:53:02 2025 by rpki-client