Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: Xvar62tSOCnBzA4myANKYxIXZR5RhH7F/yaBG7LdNG0=
Subject key identifier: C4:A3:5B:1A:7B:D5:C5:03:50:4C:E5:F0:78:39:88:DE:84:BC:26:19
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6FAB442F624D65ADC7F9CC652EF19A33607C39C7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48266.roa
Signing time: Mon 03 Mar 2025 09:59:04 +0000
ROA not before: Mon 03 Mar 2025 09:54:04 +0000
ROA not after: Mon 02 Mar 2026 09:59:04 +0000
asID: 48266
IP address blocks: 148.135.154.0/24 maxlen: 24
148.135.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ab:44:2f:62:4d:65:ad:c7:f9:cc:65:2e:f1:9a:33:60:7c:39:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 3 09:54:04 2025 GMT
Not After : Mar 2 09:59:04 2026 GMT
Subject: CN=C4A35B1A7BD5C503504CE5F0783988DE84BC2619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:98:9d:f9:e4:2c:ff:98:9d:56:71:63:df:
d6:1c:43:5d:c9:94:e2:ff:a6:ac:9c:e7:9e:09:00:
c6:2e:4e:73:cf:54:2d:13:d3:25:6e:b5:a0:23:67:
1f:71:67:a9:97:8f:9f:9b:bf:4d:a3:3e:18:36:17:
a3:48:c1:99:71:28:81:1e:9d:3a:61:73:8a:58:ab:
1a:d4:10:d8:14:5f:22:17:d6:4b:3e:27:e8:7f:17:
ce:8d:b3:8c:c0:f3:58:6d:df:1f:de:c1:c1:37:5a:
6e:de:b3:4c:04:8d:a7:b5:9d:29:b1:73:b3:68:d2:
dd:ca:a4:23:e7:78:7c:e6:8b:bc:22:6f:09:8c:4f:
6c:23:84:3b:cb:3f:82:94:b5:00:6e:23:d3:45:a1:
af:c3:2b:99:63:95:94:2f:59:1f:0d:84:e0:bd:01:
67:c6:22:31:ec:44:f5:c3:1f:4d:7c:4f:72:55:42:
16:c6:d0:7d:40:bc:98:fa:1a:53:08:41:3c:0e:02:
27:0e:ad:45:05:78:fa:fe:07:3b:25:38:7d:f6:7b:
79:3a:39:d4:7a:07:ca:29:4e:00:f0:50:e2:e7:03:
37:9e:d7:38:35:97:31:39:86:8f:fd:c2:ca:8a:cb:
94:42:e2:ee:35:7c:f3:fc:0a:30:61:d2:eb:74:79:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A3:5B:1A:7B:D5:C5:03:50:4C:E5:F0:78:39:88:DE:84:BC:26:19
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.154.0/24
148.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ab:b0:39:b9:71:1b:d1:35:2e:d0:09:84:f5:c4:ac:cf:c9:
05:b1:99:41:80:dd:2d:c0:54:0e:f6:dc:3f:1b:f9:89:72:07:
36:dd:82:01:1f:fe:3f:3e:20:f4:62:b9:e9:37:e8:d4:96:7e:
d0:92:f1:be:e8:7c:0f:4b:ec:55:fa:3b:0b:0d:36:5f:20:9b:
73:8c:a3:5a:85:46:20:f6:fa:d2:93:6c:82:40:3f:56:0a:49:
46:75:b5:97:e0:e3:43:69:84:ee:66:eb:dc:51:96:ac:27:65:
60:45:a6:ed:e1:1a:e7:21:c4:28:72:e8:ff:cb:a1:99:4b:d5:
e5:04:f1:b3:1e:19:b7:89:24:0f:34:61:78:cd:dc:3c:b7:41:
ba:1d:dd:be:1d:9d:e6:6e:8f:bf:bc:41:95:68:67:9e:b1:88:
19:40:63:46:8e:97:95:8e:82:e1:9d:35:55:60:0d:54:4b:4a:
48:30:5e:69:85:a6:0e:b2:9f:3f:a1:87:b4:01:14:08:55:29:
09:84:dc:a9:9c:62:58:0d:47:bb:2e:23:63:51:51:67:2c:be:
4e:7c:8a:3e:a9:4e:1a:8e:25:f4:6e:26:74:58:3f:6a:9a:38:
4c:fa:9a:92:2a:ef:18:08:76:01:4b:00:a7:43:82:44:23:f1:
39:d7:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:04 2025 by rpki-client