Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44382.roa
File: AS44382.roa (raw, json)
Hash identifier: 6f+0+ir0VBfiqiB6sgle5QR3PGbtE3hpo/Sctm8igT4=
Subject key identifier: 35:06:F7:9E:6E:E5:D7:4F:15:57:39:6A:FA:E9:73:AF:F4:AA:D5:7F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4980C7C1022B1EB41BFAE8BA5E4242DEA41F8CE7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44382.roa
Signing time: Thu 06 Mar 2025 03:19:01 +0000
ROA not before: Thu 06 Mar 2025 03:14:01 +0000
ROA not after: Thu 05 Mar 2026 03:19:01 +0000
asID: 44382
IP address blocks: 148.135.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:80:c7:c1:02:2b:1e:b4:1b:fa:e8:ba:5e:42:42:de:a4:1f:8c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 6 03:14:01 2025 GMT
Not After : Mar 5 03:19:01 2026 GMT
Subject: CN=3506F79E6EE5D74F1557396AFAE973AFF4AAD57F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:96:1e:21:d6:25:12:d1:53:55:b5:10:f1:
fd:6c:1a:a7:89:50:f8:71:1d:97:83:b4:ee:18:79:
24:0d:e3:55:af:d8:81:c0:12:e4:2e:31:b7:48:f6:
20:cc:76:b2:da:65:f2:f8:62:0d:40:42:5c:be:04:
0e:29:cf:68:68:bf:d9:e1:13:66:e2:78:82:27:14:
20:6e:1f:08:5c:c1:75:84:ba:d6:4e:1f:9f:dd:29:
c7:75:b0:7b:a8:7e:ca:1f:5b:42:b3:e4:25:cf:26:
0c:b8:41:ed:28:f3:6d:92:ec:7b:cd:75:f3:52:55:
6e:b7:4f:22:a4:9f:1a:cb:48:87:a6:98:13:2e:f6:
5b:2c:7d:b4:29:11:28:75:09:2b:9c:07:f0:29:0d:
8a:fe:04:c6:4b:bd:c1:03:66:7d:14:68:55:8d:83:
d3:3d:9c:57:de:5a:14:19:f0:48:9d:e1:3b:54:ab:
3c:b2:02:10:48:9e:f7:d8:2c:ee:55:ab:cd:ba:10:
92:07:42:dd:5d:45:29:1f:51:b8:28:71:56:30:31:
a2:4a:fa:b0:70:32:a3:51:fd:c3:58:f7:fa:38:f7:
9d:95:6a:f6:dc:e1:3e:76:6e:3a:94:65:e8:27:32:
80:6c:37:3c:4b:45:c1:07:e3:1b:fc:64:fa:ed:da:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:F7:9E:6E:E5:D7:4F:15:57:39:6A:FA:E9:73:AF:F4:AA:D5:7F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.152.0/24
Signature Algorithm: sha256WithRSAEncryption
52:14:66:ff:0d:f2:3c:f1:2b:df:f9:f8:ec:b6:be:b2:63:fb:
c3:c5:d0:49:ea:0a:ab:0a:4a:ed:ee:43:71:dd:c5:03:ec:a4:
8c:11:c1:57:dc:f3:ac:c8:c3:4d:ec:3c:2f:07:19:58:b4:2a:
2c:77:58:4a:42:1d:47:d4:02:27:b5:fe:98:a5:84:6e:e9:b4:
70:4d:39:1f:c1:84:c9:c2:25:cf:ca:37:9a:52:51:ac:82:36:
01:32:a4:29:0c:89:df:8f:40:9a:9e:9d:2a:83:10:85:18:3e:
e6:f5:c7:55:77:85:59:47:3a:e9:81:33:46:f7:67:08:79:bb:
1d:c6:0b:fb:62:00:b0:22:b9:2e:68:c5:e3:dd:0b:be:bf:e9:
5d:8e:32:08:b5:37:81:7b:08:d4:a3:b0:63:22:e0:ab:64:73:
5d:19:8b:b3:de:0e:71:20:c7:d4:5a:08:de:ef:e3:c3:e3:29:
b2:46:08:c1:af:6a:51:13:bd:6c:c9:7f:98:ec:2f:e3:8f:68:
33:69:cc:ff:62:7b:8d:46:d2:53:0c:e8:db:e5:f1:a1:19:2f:
ca:4e:fe:a7:80:1f:19:ae:88:7f:d4:f9:6e:82:29:4e:ea:15:
35:7b:c7:c0:cc:b6:db:aa:af:87:f0:2e:31:79:fe:65:6d:3a:
a8:a9:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:40 2025 by rpki-client