Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
File: AS50304.roa (raw, json)
Hash identifier: 9duIYNulc1uZI1JV5G8t72XTZtPC8AViAknKmGSZQCQ=
Subject key identifier: 5E:B7:1E:04:4D:DF:72:DA:F2:E3:8F:22:B3:41:00:5D:E3:CD:38:E0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 215E6FC53404FA89E4BFB1B76969040EAF4E67D1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
Signing time: Wed 27 Nov 2024 12:50:02 +0000
ROA not before: Wed 27 Nov 2024 12:45:02 +0000
ROA not after: Wed 26 Nov 2025 12:50:02 +0000
asID: 50304
IP address blocks: 148.135.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5e:6f:c5:34:04:fa:89:e4:bf:b1:b7:69:69:04:0e:af:4e:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 27 12:45:02 2024 GMT
Not After : Nov 26 12:50:02 2025 GMT
Subject: CN=5EB71E044DDF72DAF2E38F22B341005DE3CD38E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:71:4a:fc:79:ae:94:a9:0a:8c:db:3b:46:
f1:d4:44:d0:d8:61:0c:3f:eb:c1:e4:64:cb:33:c3:
31:0c:fe:2e:0d:ab:60:57:69:a5:9a:43:63:3c:0c:
0c:13:af:eb:4c:64:7a:9b:7b:47:4e:aa:ce:61:52:
06:f4:05:4e:f7:c0:10:85:69:4d:1d:78:a7:0f:13:
42:24:0c:3a:3f:b4:05:48:f9:84:2f:40:83:14:3d:
50:68:e9:ad:6f:92:6d:b8:13:37:71:35:f0:b0:99:
e5:81:a9:e1:96:4c:a9:aa:cd:8d:b8:b4:de:3e:ad:
ed:70:2e:d1:cd:83:a8:77:0e:78:bd:61:c9:91:5b:
f8:d1:0e:ba:7b:ed:fd:c2:bb:00:63:93:98:3b:07:
27:99:25:39:68:c3:bd:07:ba:30:9f:b9:42:a2:fe:
a4:47:8a:3a:49:0d:23:f5:5c:51:46:a8:85:54:0d:
ae:d3:70:e7:09:64:38:2b:71:b2:84:3f:a1:db:20:
c2:40:11:d0:03:92:dd:0a:b8:1c:e6:42:f9:7b:9b:
e5:a5:c6:6e:fd:ce:7a:38:31:1f:1a:b9:e3:7a:d5:
19:2e:86:b6:ec:e5:ce:02:68:33:95:24:44:05:db:
14:03:fa:29:7e:88:13:ac:7c:05:8d:86:9c:28:c5:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B7:1E:04:4D:DF:72:DA:F2:E3:8F:22:B3:41:00:5D:E3:CD:38:E0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:74:3a:32:3d:aa:d7:dd:cd:ae:60:a4:7d:7f:da:d7:31:74:
3b:1a:6b:9e:f7:0e:43:31:f9:4b:50:e3:ea:de:40:c7:90:54:
37:eb:86:a6:90:4a:d2:5d:48:e6:0b:bc:00:a8:ea:15:85:c7:
9a:58:88:42:20:4b:bd:69:81:fd:93:a9:81:ed:95:50:68:78:
07:6f:c1:67:fd:5a:25:4e:f3:85:bc:27:98:fa:b9:d8:18:81:
6f:2f:45:e1:aa:7e:17:5b:05:2d:f3:ef:6a:59:5a:0d:a6:a1:
11:32:ce:f5:ac:68:d5:cc:90:fc:b0:ce:55:d3:4e:cf:f3:00:
60:cc:9e:f3:84:68:cf:c7:b7:e7:59:c3:0e:67:ac:ee:29:e2:
15:1b:a5:cb:15:bb:5b:96:4c:6a:79:e7:54:8a:8e:ec:97:ce:
6c:96:e5:94:16:0e:e1:ad:6e:5c:66:15:49:9d:ce:53:58:f9:
24:f4:e5:89:60:fd:7e:c3:7f:23:ce:25:ff:a2:b1:f1:49:0e:
32:e3:8d:ee:50:5c:5c:01:03:69:75:36:8b:c2:d0:ce:d8:14:
e6:78:70:50:c9:7a:43:8f:97:f0:24:ff:ce:66:2c:5a:db:61:
0d:c0:cc:99:e2:57:67:25:67:20:17:92:be:44:a7:b1:7f:ff:
0d:73:2d:1a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUIV5vxTQE+onkv7G3aWkEDq9OZ9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDExMjcxMjQ1MDJaFw0yNTExMjYxMjUwMDJaMDMxMTAvBgNV
BAMTKDVFQjcxRTA0NERERjcyREFGMkUzOEYyMkIzNDEwMDVERTNDRDM4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE3FK/HmulKkKjNs7RvHURNDY
YQw/68HkZMszwzEM/i4Nq2BXaaWaQ2M8DAwTr+tMZHqbe0dOqs5hUgb0BU73wBCF
aU0deKcPE0IkDDo/tAVI+YQvQIMUPVBo6a1vkm24EzdxNfCwmeWBqeGWTKmqzY24
tN4+re1wLtHNg6h3Dni9YcmRW/jRDrp77f3CuwBjk5g7ByeZJTlow70HujCfuUKi
/qRHijpJDSP1XFFGqIVUDa7TcOcJZDgrcbKEP6HbIMJAEdADkt0KuBzmQvl7m+Wl
xm79zno4MR8aueN61Rkuhrbs5c4CaDOVJEQF2xQD+il+iBOsfAWNhpwoxV7pAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUXrceBE3fctry448is0EAXePNOOAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTAzMDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACUh/ww
DQYJKoZIhvcNAQELBQADggEBAD10OjI9qtfdza5gpH1/2tcxdDsaa573DkMx+UtQ
4+reQMeQVDfrhqaQStJdSOYLvACo6hWFx5pYiEIgS71pgf2TqYHtlVBoeAdvwWf9
WiVO84W8J5j6udgYgW8vReGqfhdbBS3z72pZWg2moREyzvWsaNXMkPywzlXTTs/z
AGDMnvOEaM/Ht+dZww5nrO4p4hUbpcsVu1uWTGp551SKjuyXzmyW5ZQWDuGtblxm
FUmdzlNY+ST05Ylg/X7DfyPOJf+isfFJDjLjje5QXFwBA2l1NovC0M7YFOZ4cFDJ
ekOPl/Ak/85mLFrbYQ3AzJniV2clZyAXkr5Ep7F//w1zLRo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:53 2025 by rpki-client