Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS23437.roa
File: AS23437.roa (raw, json)
Hash identifier: MGY0BbUclitpaE3xllGwcKMV0M5rBmvVY+YepG18P6Q=
Subject key identifier: D8:59:1A:12:C8:F3:BE:5D:33:2C:AF:0E:F1:93:BC:9A:C2:9D:AC:DB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 699AF060DE7A0C308DC70FC0367391F92398D309
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS23437.roa
Signing time: Mon 31 Mar 2025 07:44:23 +0000
ROA not before: Mon 31 Mar 2025 07:39:23 +0000
ROA not after: Mon 30 Mar 2026 07:44:23 +0000
asID: 23437
IP address blocks: 185.137.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9a:f0:60:de:7a:0c:30:8d:c7:0f:c0:36:73:91:f9:23:98:d3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 31 07:39:23 2025 GMT
Not After : Mar 30 07:44:23 2026 GMT
Subject: CN=D8591A12C8F3BE5D332CAF0EF193BC9AC29DACDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:bc:39:57:e0:2b:bd:8e:e1:67:d4:3f:b1:
7f:8c:72:7d:d5:95:01:dc:df:5f:fe:7d:c7:28:62:
51:e2:2f:3c:95:96:3c:98:6c:50:a0:1d:e4:55:f7:
c4:78:fd:48:64:b9:6e:be:64:34:58:6d:05:b2:b9:
73:5a:18:e5:db:e6:e8:8d:95:e1:7c:6d:e7:af:7a:
cb:ed:7a:38:6e:a3:ee:4f:04:f0:86:49:55:d6:89:
b0:8f:3e:a6:71:d7:41:bf:5c:1d:99:e5:56:90:c5:
ca:29:83:61:45:bb:be:65:5e:b1:75:62:8c:0d:1b:
f3:0b:a8:c4:e0:bf:be:f1:35:65:ad:9c:8a:e0:d6:
6e:4d:97:3c:72:60:3f:6a:7e:4f:50:ed:ff:81:3e:
75:a5:93:61:1c:eb:df:26:eb:45:17:cd:f2:cc:9b:
a9:a8:f0:2d:d6:bd:ef:e8:ed:32:0c:8b:27:74:0b:
11:f3:a9:54:b7:26:4e:4f:b4:cf:87:c2:e6:26:2d:
e0:fe:fd:5d:ec:7a:fd:35:30:cd:03:1e:5c:66:df:
c2:09:e6:50:ad:ca:42:cf:68:f3:ad:a2:0d:b8:b3:
68:93:9d:11:26:e2:0f:59:77:6c:5f:15:03:94:8c:
da:18:fb:b3:6e:aa:1b:2b:ef:2d:c2:ae:bc:90:83:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:1A:12:C8:F3:BE:5D:33:2C:AF:0E:F1:93:BC:9A:C2:9D:AC:DB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS23437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fb:65:78:40:ac:ab:96:4c:2c:f9:f8:1d:ce:b8:40:d8:85:
ac:fe:97:0e:72:92:4a:43:8e:fc:11:45:dd:da:fe:11:f2:1d:
1a:51:22:37:c2:14:cf:76:a3:c7:e1:fc:ba:88:d6:9e:b8:87:
6b:27:e0:4b:a6:ec:fd:7d:44:74:83:20:8f:ff:b9:f2:3a:55:
07:a6:ea:d2:82:3f:3a:71:12:1d:cf:d3:a1:c1:02:90:60:0b:
04:2c:4a:fd:08:4e:d0:6e:e5:7b:7d:a2:6a:c0:23:b0:42:8e:
00:c6:43:23:df:46:0b:56:a3:bf:da:0c:8c:59:48:ac:e5:40:
77:a6:93:6d:54:a7:af:c0:9f:19:3b:77:81:8f:f9:06:e5:78:
bc:ab:d0:75:a8:fe:ec:6c:8f:8a:3c:46:26:6d:f9:8a:a9:3d:
27:c9:12:5c:82:f7:c6:c3:ee:ec:91:77:9e:33:68:56:e9:4e:
a9:37:20:64:79:02:fe:0d:53:61:6c:16:ca:44:97:f4:0d:aa:
5e:ea:b9:d5:39:4f:64:f4:8f:97:43:f9:b9:b8:03:30:53:cd:
4f:28:58:6b:83:3d:a8:d7:0d:2e:7b:db:7b:e9:02:e8:4b:50:
f2:6f:7c:cd:4c:56:f8:4f:78:f9:5a:51:fd:da:64:5b:6b:73:
69:c4:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:54 2025 by rpki-client