Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa
File: AS50917.roa (raw, json)
Hash identifier: SoBboo8rq3Z+jxOQwx7zoV3zUZ27dnHPi8rArvzR8B8=
Subject key identifier: 6F:69:93:75:B7:51:AB:8C:26:07:43:7B:BB:65:F6:84:65:D6:01:9D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 23BE9169A81B8A4FF9C95FB93519539F69112EF3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa
Signing time: Tue 27 May 2025 00:00:06 +0000
ROA not before: Mon 26 May 2025 23:55:06 +0000
ROA not after: Tue 26 May 2026 00:00:06 +0000
asID: 50917
IP address blocks: 146.103.22.0/24 maxlen: 24
146.103.48.0/24 maxlen: 24
147.79.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:be:91:69:a8:1b:8a:4f:f9:c9:5f:b9:35:19:53:9f:69:11:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 26 23:55:06 2025 GMT
Not After : May 26 00:00:06 2026 GMT
Subject: CN=6F699375B751AB8C2607437BBB65F68465D6019D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:e7:ba:d0:88:e5:aa:8c:f4:24:d6:44:07:
71:43:51:94:a7:1b:21:13:81:65:44:77:e6:06:c7:
23:6a:ec:d8:26:00:2f:07:74:2b:d5:68:e3:9a:06:
8b:38:d3:61:9c:44:c5:34:d5:13:e8:86:b5:ca:dd:
6b:85:64:8f:e4:dd:49:fe:b6:1e:02:d9:55:38:ac:
e6:91:98:0e:33:09:9b:04:fc:16:8c:5a:cd:17:b3:
2f:b6:28:43:ae:1b:13:cc:f1:b9:0e:4d:8e:d4:26:
16:8d:78:5e:f5:85:ac:6b:96:b7:7a:b5:e5:f2:b2:
9c:83:2b:93:72:54:f7:52:cd:a1:78:83:1f:d0:00:
05:36:ad:2f:e4:f3:67:a0:98:1d:72:5b:ce:12:74:
13:81:e3:d1:9b:68:d9:66:31:86:d4:fa:35:c3:0f:
11:ab:05:48:21:78:13:36:8c:8d:02:84:43:42:b1:
5c:37:67:7f:da:c6:94:eb:d1:2d:3e:51:16:27:bb:
00:33:0d:ff:7d:86:d0:40:41:00:a8:45:40:c0:14:
1b:69:42:9d:99:6e:2c:b0:8d:9d:72:5a:04:f9:d5:
dd:12:86:fd:ac:41:3b:d7:3f:cc:48:28:f8:5d:b2:
31:fa:bf:4a:1c:af:88:7b:e8:63:81:6b:b2:ee:ab:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:93:75:B7:51:AB:8C:26:07:43:7B:BB:65:F6:84:65:D6:01:9D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.22.0/24
146.103.48.0/24
147.79.30.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d2:43:a5:8a:2c:bf:26:c1:13:81:76:aa:26:c8:13:14:6b:
52:e2:82:28:90:5f:af:a7:27:8a:7a:2a:61:1f:07:38:c6:9d:
0e:3b:43:07:18:71:93:ef:f6:76:75:a0:c9:45:90:de:88:65:
b8:72:08:b5:49:f0:63:46:b4:f0:bf:2e:cb:e3:54:f9:ba:0d:
2c:20:6a:84:3e:94:4d:b0:23:d4:2b:8d:c7:e3:ab:9c:84:30:
25:db:7a:b8:03:ea:b7:49:f0:45:af:4e:7c:43:9f:07:b0:14:
0f:49:a6:90:2f:1b:0e:38:b3:9f:c6:16:0a:34:ef:86:61:33:
51:af:e6:8c:4b:06:6b:fe:71:cb:99:e8:b3:41:60:b4:8f:3c:
69:28:db:35:f9:9f:54:2c:5a:d0:d5:62:b2:3d:34:86:54:db:
e4:2c:f4:9d:03:b3:2a:13:9d:04:e9:90:31:c6:fc:17:34:bc:
fd:44:8e:c0:3d:7c:65:2f:56:06:da:1f:17:93:09:89:fb:8c:
81:44:07:e1:80:d1:d1:3f:26:54:4b:74:4d:95:1f:2b:fe:72:
f8:b4:ab:e6:d7:51:75:f8:e2:a9:6b:9b:6d:b2:f3:79:b1:e8:
fe:f5:64:f2:e6:2b:fb:e2:04:18:59:44:d6:c1:a6:87:bd:4b:
cc:a7:f0:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:34 2025 by rpki-client