Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53850.roa
File: AS53850.roa (raw, json)
Hash identifier: dE+nLOclR5HQ4eJTWwFJJB9azAcs1oQqWibIPZjhRfI=
Subject key identifier: AE:EF:11:DF:E1:4E:15:CE:6B:F6:B4:44:ED:8B:34:B2:ED:B0:03:26
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 01C957CB3B4D3CB4A057701EBC7546CA01572FB3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53850.roa
Signing time: Wed 28 May 2025 14:51:10 +0000
ROA not before: Wed 28 May 2025 14:46:10 +0000
ROA not after: Wed 27 May 2026 14:51:10 +0000
asID: 53850
IP address blocks: 167.148.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c9:57:cb:3b:4d:3c:b4:a0:57:70:1e:bc:75:46:ca:01:57:2f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 28 14:46:10 2025 GMT
Not After : May 27 14:51:10 2026 GMT
Subject: CN=AEEF11DFE14E15CE6BF6B444ED8B34B2EDB00326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:09:7c:d3:0b:32:63:5c:b3:75:42:74:47:
d3:75:97:21:58:40:6a:1f:b1:68:b7:7e:b4:38:bd:
e9:b7:98:e3:34:86:d0:cf:a3:77:40:bc:29:bf:c0:
17:5b:8c:13:9a:a4:02:60:e0:60:6b:3a:2a:bf:a3:
a3:f6:e3:45:d7:34:f0:ca:d4:ec:96:d6:81:25:e6:
bb:b8:4c:f1:cf:b8:c9:04:34:f0:aa:00:08:a6:56:
f7:40:fc:ff:6d:8a:f8:e8:14:b3:62:d9:5d:b0:bb:
0e:e3:2b:72:69:8d:a6:ba:f1:8d:5b:63:8e:64:86:
83:5f:17:fd:db:e6:47:54:06:53:3b:7b:cd:4e:57:
ee:6d:7c:a0:40:90:1d:58:2b:9e:87:76:cd:82:7c:
18:88:c8:bf:18:a7:72:d3:18:b9:4b:01:36:cf:dc:
3b:c0:df:5e:ba:59:6e:15:52:4e:d8:08:38:c7:46:
3a:0d:47:6e:a8:cf:8b:02:de:d0:07:5f:fe:e4:23:
d7:41:fa:81:74:95:2c:cb:f9:79:be:07:87:98:3f:
33:fa:fe:37:94:3f:2e:1c:a0:b1:f0:a0:6b:80:3d:
dc:ad:11:d5:ab:41:27:53:7d:11:97:6c:dc:9f:43:
b1:67:a5:62:d1:cc:d4:c1:bf:cc:8c:48:be:ec:80:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:11:DF:E1:4E:15:CE:6B:F6:B4:44:ED:8B:34:B2:ED:B0:03:26
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53850.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.167.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a9:ff:40:a2:77:2b:29:5a:16:3f:7b:eb:85:ef:2a:fb:2c:
c4:9a:5f:9e:82:df:9c:f9:6f:f3:3f:f1:6b:55:5d:0d:65:64:
ef:a8:37:2f:64:11:b0:63:dc:6e:6c:91:ec:5d:ea:79:94:4e:
4e:cc:46:08:4e:e9:15:54:4a:5c:4b:dd:9b:4b:2e:e5:64:5a:
0a:1c:b5:53:c7:82:43:a1:da:dd:1f:71:7a:55:c2:b8:eb:d5:
b0:8d:a6:08:dc:10:70:3d:22:06:8b:ed:b6:3b:7a:1d:86:8c:
2c:18:3a:8e:fa:09:a7:8c:43:61:55:1b:e0:3f:4e:28:92:9d:
ed:03:3e:8c:6e:3e:14:cf:2c:4c:6e:12:a7:22:f4:6e:80:77:
51:44:cc:57:c3:7e:40:ee:7f:e5:43:8a:cd:bc:3d:d9:39:83:
28:30:46:c8:53:2d:14:c5:3a:0d:c4:c4:e9:4a:03:61:99:8e:
14:64:00:ff:16:e8:d4:80:91:94:22:5c:2b:92:9b:d6:76:68:
b1:21:e0:41:f5:f8:67:bd:9e:99:18:bb:f8:34:7f:e3:d1:9c:
30:93:ac:b7:7f:05:31:e6:5d:1e:06:6d:d6:66:dd:4f:4b:c5:
f0:1c:d9:0f:e3:99:eb:9f:12:78:2a:88:a6:76:54:4b:ca:46:
39:f2:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:03 2025 by rpki-client