Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133504.roa
File: AS133504.roa (raw, json)
Hash identifier: i+gVHJmkrtnpTRcCrt8Wt6DwEW++cMjao/u9pihQ4q0=
Subject key identifier: BD:9E:D9:D0:2D:33:C0:C7:52:27:06:3C:38:9F:00:83:16:9E:B3:DD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F6102AD3B48F46132B8A6D18BB98A040EF4C4CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133504.roa
Signing time: Tue 27 May 2025 11:44:39 +0000
ROA not before: Tue 27 May 2025 11:39:39 +0000
ROA not after: Tue 26 May 2026 11:44:39 +0000
asID: 133504
IP address blocks: 2a13:9500:69::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:61:02:ad:3b:48:f4:61:32:b8:a6:d1:8b:b9:8a:04:0e:f4:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 11:39:39 2025 GMT
Not After : May 26 11:44:39 2026 GMT
Subject: CN=BD9ED9D02D33C0C75227063C389F0083169EB3DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:d2:e1:aa:c0:c2:7c:52:ab:ac:27:22:4e:
c8:69:58:d8:b1:b4:48:ec:15:68:08:d4:bb:a0:c2:
88:05:ed:36:5b:2d:62:bf:98:fc:83:73:79:d2:50:
3f:75:1e:b5:56:34:00:3c:c1:dd:54:08:e6:cc:f1:
66:45:a0:61:bd:f4:60:25:82:1b:ad:53:fb:eb:32:
c7:1b:18:d5:c6:48:ac:5b:09:5b:1a:b2:be:a5:49:
01:bd:66:b8:1c:24:a3:cc:0c:4c:88:3c:d0:e4:a0:
21:85:2d:1a:31:b2:1f:bc:56:51:36:42:49:8f:be:
d5:9a:6f:6e:61:a6:32:40:ac:3f:e8:f6:17:71:64:
47:f3:0b:a6:a8:f9:26:1b:d3:e7:e9:b9:31:b7:40:
4a:1f:ef:e4:18:76:bb:b6:79:f3:36:0c:02:8e:f4:
76:76:a3:db:04:71:10:10:7e:ee:ba:6c:a5:1a:c0:
a2:25:d6:44:68:c8:6b:d0:3e:19:45:56:66:9c:f0:
f1:7f:fb:21:89:25:44:ee:b7:2b:64:fb:0f:7a:39:
77:2c:9d:d1:f5:38:93:6d:b8:94:43:87:1f:3f:0e:
28:e5:9c:c5:71:1f:65:dd:ae:a2:bb:cf:af:6c:c0:
07:92:9a:55:56:85:c1:1a:50:a6:8b:f4:fb:b5:34:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:D9:D0:2D:33:C0:C7:52:27:06:3C:38:9F:00:83:16:9E:B3:DD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133504.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:69::/48
Signature Algorithm: sha256WithRSAEncryption
13:65:5e:be:36:18:0d:9b:0a:b1:76:b6:e1:5e:e6:4f:ad:b2:
5d:a0:44:b7:db:39:ab:f7:a1:15:f1:dd:4a:6c:14:83:3c:fd:
66:5e:f6:7f:fb:c7:39:4b:50:1d:a9:8b:2a:79:a3:c2:ab:e5:
44:56:6a:e4:e0:5b:24:f9:33:10:a7:35:e8:2c:d1:ad:4f:09:
f7:a2:0b:39:3f:45:e0:a3:69:11:db:d8:bc:77:9a:77:14:45:
8c:8e:1c:49:f8:07:a0:22:a9:58:bb:2f:f6:d9:4e:f9:39:47:
d5:04:c0:5c:ec:28:d6:a9:35:05:43:98:7f:e4:cd:5e:ef:2a:
63:7f:29:d9:ad:64:bc:d1:72:db:53:c3:c7:e9:f4:db:c0:a9:
19:f5:6f:d8:e2:a2:3f:55:47:fb:be:c3:2c:5c:58:2e:c9:27:
ff:4a:f0:57:5a:5f:dd:aa:1c:e6:a2:46:18:e0:a8:4a:83:ea:
ec:5d:cd:ee:34:4c:2f:56:2f:18:23:63:de:4f:86:09:a4:6b:
15:a3:c8:1e:80:fd:ca:01:f0:46:6f:0b:14:51:ea:af:1e:cc:
15:db:20:df:dd:bc:5c:56:b0:8d:06:1f:e8:3a:b3:4e:71:f3:
9f:99:b0:1c:67:37:83:70:ac:c7:7e:fd:9c:ef:64:9a:94:9c:
a4:af:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:15:35 2025 by rpki-client