Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
File: AS63150.roa (raw, json)
Hash identifier: q8AB1/1zOgUTwnjOLijWuuQgCW4FqohZRurFUubUbiY=
Subject key identifier: 86:AF:6F:51:B7:D1:66:80:E7:25:3C:89:EF:32:55:87:93:65:D2:E2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5752C9C14ED1457322D8FEED8688BB86EA6E90C7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
Signing time: Tue 08 Apr 2025 00:01:56 +0000
ROA not before: Mon 07 Apr 2025 23:56:56 +0000
ROA not after: Tue 07 Apr 2026 00:01:56 +0000
asID: 63150
IP address blocks: 148.135.184.0/24 maxlen: 24
148.135.185.0/24 maxlen: 24
148.135.186.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:52:c9:c1:4e:d1:45:73:22:d8:fe:ed:86:88:bb:86:ea:6e:90:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 7 23:56:56 2025 GMT
Not After : Apr 7 00:01:56 2026 GMT
Subject: CN=86AF6F51B7D16680E7253C89EF3255879365D2E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:ba:a3:c8:aa:fc:94:fe:6e:64:07:07:6a:
f7:8f:35:ec:3a:51:b8:09:c1:6c:a8:b2:54:c1:58:
94:0a:b0:7c:e6:4b:6e:a3:1c:32:58:f3:45:ac:10:
26:e9:e9:7c:d5:f1:8e:b8:78:5c:64:b8:d0:fc:34:
95:09:e6:68:04:ab:f1:5b:e1:45:59:3e:0f:32:f4:
c4:45:f0:f0:86:31:ba:ba:db:6d:17:c0:0d:a8:02:
e3:26:45:8c:24:71:35:41:e9:04:be:a7:a8:4d:87:
9b:4f:66:d8:f3:cd:90:86:78:f2:40:d2:71:2d:d6:
e3:30:33:fb:83:2b:25:b1:74:a7:8d:0c:36:41:45:
f7:34:4e:62:9d:e3:48:b1:a0:1a:bb:15:2d:93:af:
5b:d9:c6:4d:9e:8e:e2:c2:33:7a:86:7d:09:ca:c9:
ae:e7:10:47:df:ee:dc:f7:8e:e2:39:d7:50:f4:56:
d1:f6:24:56:bb:b6:07:3c:87:11:b3:1a:3c:3f:29:
43:6d:01:b4:95:cb:ad:41:85:dc:0e:d1:37:8f:63:
13:b8:82:cd:49:f5:12:6a:d2:d1:7f:c7:62:15:f0:
fb:3e:93:8d:71:27:54:53:54:ea:43:ff:dd:86:b8:
c9:e8:6b:2e:af:7c:d2:ff:66:4e:7d:5e:25:d4:de:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:6F:51:B7:D1:66:80:E7:25:3C:89:EF:32:55:87:93:65:D2:E2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:a7:20:c7:f2:4a:ce:07:55:0a:06:58:30:5b:24:b7:1f:cf:
10:61:fb:9f:00:06:66:b7:cd:e7:74:fa:33:8a:1f:66:f4:53:
4d:68:9e:74:46:22:d5:94:ff:a6:ef:28:71:c9:ec:07:50:26:
17:b2:79:f4:df:8e:57:62:7f:95:19:c8:e5:00:32:39:c6:c6:
64:d5:96:62:24:0e:14:33:18:3f:95:fb:32:5f:e0:9b:75:15:
1f:11:b9:1d:47:c1:5f:ab:09:2c:fd:bf:a4:4d:5a:a0:57:57:
76:bd:72:48:ec:db:9d:4d:d4:ca:b0:d6:aa:bc:1b:b7:55:a0:
73:46:43:cb:a3:da:a7:83:3d:23:0d:a5:0f:4a:c1:f1:4a:e0:
8a:76:de:b8:c7:72:b5:3b:b3:62:30:e0:9e:c7:04:38:04:c3:
3b:fa:c7:4d:62:49:8f:26:d4:df:d7:3a:07:16:f6:46:23:f1:
89:aa:47:cc:39:40:69:c1:a6:7e:d5:a4:4b:1b:7f:83:4c:1c:
64:f8:ab:b7:23:80:15:08:af:8e:71:7c:dd:5e:b2:73:0f:51:
9c:17:8d:97:52:d3:da:ba:39:fe:c6:c0:89:bd:3c:b9:96:4c:
82:55:70:75:e8:55:23:90:f6:8e:b8:ff:df:f0:3d:77:c4:ed:
98:f1:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:32 2025 by rpki-client