Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
File: AS63150.roa (raw, json)
Hash identifier: k1Ku2tMTU/Eaxc2krPVLlf3NTsbsewPf5O2s4jqxbhw=
Subject key identifier: F8:09:06:15:51:30:84:7D:71:52:B8:C7:FB:7E:3E:3A:F1:34:47:B5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7E9471DCCF77E99C6986CA7BED57E3CD7F4011B4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
Signing time: Mon 19 May 2025 14:30:06 +0000
ROA not before: Mon 19 May 2025 14:25:06 +0000
ROA not after: Mon 18 May 2026 14:30:06 +0000
asID: 63150
IP address blocks: 143.14.111.0/24 maxlen: 24
148.135.184.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
155.117.18.0/24 maxlen: 24
155.117.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:94:71:dc:cf:77:e9:9c:69:86:ca:7b:ed:57:e3:cd:7f:40:11:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 19 14:25:06 2025 GMT
Not After : May 18 14:30:06 2026 GMT
Subject: CN=F80906155130847D7152B8C7FB7E3E3AF13447B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:1f:84:1e:d8:5a:7b:51:00:f5:fd:65:79:
60:34:29:94:f1:00:37:0a:f7:fc:66:ef:01:9f:aa:
f0:9f:34:8a:7d:68:54:7c:a0:63:88:73:1b:7b:77:
0a:51:73:5f:08:5b:da:4b:ef:04:d7:98:50:8a:24:
76:63:7a:9c:9e:ae:08:a3:89:68:94:21:2b:e1:77:
c0:70:63:b2:ce:5c:dc:3f:de:c1:8f:d1:31:91:d2:
b7:14:63:9f:d2:dd:c3:96:a4:5a:9a:4e:fe:92:97:
98:9d:50:31:99:4c:8b:f4:e7:8d:e2:60:a4:55:1d:
71:bc:66:f7:17:fd:45:0b:88:ab:d3:2f:61:d6:31:
7e:d7:14:04:1c:56:7a:a2:41:05:f1:5e:ec:02:5b:
a2:19:be:9a:3d:7b:82:a3:31:5c:c6:f5:c4:a9:59:
71:77:21:09:bd:a2:9c:79:f9:fe:b2:2b:36:1b:c3:
03:75:47:08:7d:75:d3:bb:4d:c4:2b:0f:38:86:8b:
8e:b6:2b:e8:c8:1d:ba:72:7e:65:8f:c4:bf:20:1a:
af:c2:c6:92:f6:86:e2:25:c5:46:ad:41:24:1e:b1:
e0:35:39:ef:a4:92:23:dd:b8:18:db:82:1f:99:26:
e7:a3:56:f7:3f:09:3d:3f:74:c0:60:24:96:9a:ec:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:09:06:15:51:30:84:7D:71:52:B8:C7:FB:7E:3E:3A:F1:34:47:B5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.111.0/24
148.135.184.0/24
148.135.187.0/24
155.117.18.0/23
Signature Algorithm: sha256WithRSAEncryption
71:72:06:a8:1f:4c:38:5f:b8:3d:57:0a:64:30:9c:cd:89:57:
f0:d7:b0:a8:6d:39:de:1a:86:fe:82:1e:a2:b6:c8:64:1e:4d:
8d:74:be:59:a4:95:22:91:af:b0:8f:68:71:09:0c:d9:0c:47:
93:b4:99:96:dd:4c:8e:5f:6b:78:e4:a0:d1:9e:42:54:3a:54:
5f:c2:2e:9c:44:bb:03:3e:bc:fb:85:89:c0:07:23:fa:b0:8b:
46:37:d0:f7:e4:ef:9a:0f:ac:d1:9b:7a:d5:ea:b8:1d:13:84:
17:02:87:77:ab:77:35:83:9c:ab:b6:c4:34:ca:3c:12:60:ad:
2c:1f:80:c4:64:b2:15:15:a3:a8:de:e9:73:64:46:24:ae:4c:
c0:13:78:0b:55:f1:c0:03:19:96:e2:a5:33:d7:81:75:d9:a7:
9d:8c:52:80:87:1e:1f:ff:96:91:3b:1a:af:ee:7b:b4:80:d5:
93:6c:05:38:10:15:bf:5f:cd:9a:c8:c5:cb:87:fe:91:69:84:
cf:44:19:3d:a9:ea:61:3e:18:b6:c2:8c:7f:97:5c:dc:11:67:
da:25:f2:33:9e:33:7a:02:aa:04:90:2e:97:ae:88:a7:25:52:
58:7d:94:59:c2:2a:e0:34:a8:96:f4:98:95:d4:5e:44:70:96:
36:78:f9:bb
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUfpRx3M936Zxphsp77VfjzX9AEbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA1MTkxNDI1MDZaFw0yNjA1MTgxNDMwMDZaMDMxMTAvBgNV
BAMTKEY4MDkwNjE1NTEzMDg0N0Q3MTUyQjhDN0ZCN0UzRTNBRjEzNDQ3QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ch+EHthae1EA9f1leWA0KZTx
ADcK9/xm7wGfqvCfNIp9aFR8oGOIcxt7dwpRc18IW9pL7wTXmFCKJHZjepyergij
iWiUISvhd8BwY7LOXNw/3sGP0TGR0rcUY5/S3cOWpFqaTv6Sl5idUDGZTIv0543i
YKRVHXG8ZvcX/UULiKvTL2HWMX7XFAQcVnqiQQXxXuwCW6IZvpo9e4KjMVzG9cSp
WXF3IQm9opx5+f6yKzYbwwN1Rwh9ddO7TcQrDziGi462K+jIHbpyfmWPxL8gGq/C
xpL2huIlxUatQSQeseA1Oe+kkiPduBjbgh+ZJuejVvc/CT0/dMBgJJaa7F+dAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQU+AkGFVEwhH1xUrjH+34+OvE0R7UwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMxNTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACPDm8D
BACUh7gDBACUh7sDBAGbdRIwDQYJKoZIhvcNAQELBQADggEBAHFyBqgfTDhfuD1X
CmQwnM2JV/DXsKhtOd4ahv6CHqK2yGQeTY10vlmklSKRr7CPaHEJDNkMR5O0mZbd
TI5fa3jkoNGeQlQ6VF/CLpxEuwM+vPuFicAHI/qwi0Y30Pfk75oPrNGbetXquB0T
hBcCh3erdzWDnKu2xDTKPBJgrSwfgMRkshUVo6je6XNkRiSuTMATeAtV8cADGZbi
pTPXgXXZp52MUoCHHh//lpE7Gq/ue7SA1ZNsBTgQFb9fzZrIxcuH/pFphM9EGT2p
6mE+GLbCjH+XXNwRZ9ol8jOeM3oCqgSQLpeuiKclUlh9lFnCKuA0qJb0mJXUXkRw
ljZ4+bs=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:25 2025 by rpki-client