Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152390.roa
File: AS152390.roa (raw, json)
Hash identifier: uDEVPyFDaIuiWA8mKOHBIPQ+qFyd1m89FsDeLr9S10E=
Subject key identifier: 14:D6:E8:62:69:CC:04:17:C2:E6:69:1B:E7:E1:9D:F8:35:57:07:BE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A1A264CEDAE40523CECF487DA6F2EB8BE428DD3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152390.roa
Signing time: Fri 16 May 2025 18:13:24 +0000
ROA not before: Fri 16 May 2025 18:08:24 +0000
ROA not after: Fri 15 May 2026 18:13:24 +0000
asID: 152390
IP address blocks: 2a13:9500:48::/48 maxlen: 48
2a13:9500:4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1a:26:4c:ed:ae:40:52:3c:ec:f4:87:da:6f:2e:b8:be:42:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 16 18:08:24 2025 GMT
Not After : May 15 18:13:24 2026 GMT
Subject: CN=14D6E86269CC0417C2E6691BE7E19DF8355707BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:f4:60:b1:9b:92:59:a9:0f:e4:d4:43:71:
e2:2b:89:96:0e:1b:2e:7e:59:b7:5a:64:16:b9:ea:
13:55:be:a8:e8:82:9b:78:14:cf:1f:7f:d9:63:64:
4e:64:bc:ca:e6:48:44:5c:df:8b:79:ea:62:67:ac:
d5:e8:09:bb:e5:f1:ce:6f:5c:71:d8:61:89:eb:f8:
4d:53:c5:2a:e0:40:bb:0b:4f:d7:7e:cc:8d:e1:f7:
74:20:2b:dc:59:85:a5:17:9e:a8:77:de:50:dc:bc:
22:14:ad:1e:80:af:56:7e:61:5d:51:71:ed:cc:0b:
88:60:f8:3d:4a:11:29:e9:0c:66:84:5e:bd:ca:4e:
f5:27:2d:57:42:30:32:e9:05:20:88:0b:e7:f9:47:
21:57:5c:63:8e:45:51:d6:03:75:f3:da:65:c3:f2:
87:14:bb:31:d7:05:87:73:3e:e8:df:dc:54:df:a9:
5f:fe:51:07:6d:13:d7:36:35:54:11:0f:17:db:8e:
54:41:7e:1d:91:09:1b:41:07:7a:9f:5d:7b:bb:74:
7b:de:d5:5a:9d:bd:a3:da:18:69:84:eb:a6:62:d3:
2a:61:b3:ad:49:01:01:3c:de:ea:a8:3b:bd:99:4c:
04:e0:a7:94:0a:22:46:57:49:06:e7:7a:9d:da:cf:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:E8:62:69:CC:04:17:C2:E6:69:1B:E7:E1:9D:F8:35:57:07:BE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:48::/48
2a13:9500:4c::/48
Signature Algorithm: sha256WithRSAEncryption
46:0a:cb:66:6b:09:25:52:c9:c3:10:28:a9:b9:e6:a3:84:31:
f0:70:e9:6a:3d:44:4c:52:a4:59:e9:89:c1:e1:8f:0e:77:d4:
ce:12:be:77:df:30:ee:36:28:8e:ab:7e:9d:78:70:f8:27:23:
68:54:72:1c:1d:07:1b:b1:a3:3f:c6:dc:a5:db:d7:25:af:dc:
df:8d:00:3d:12:e1:94:51:cc:bf:19:5f:40:9a:8d:16:ca:cd:
b7:e8:85:27:19:71:de:1b:88:70:7d:e9:a6:f8:ee:47:0d:55:
4e:b0:f1:73:42:cb:6b:46:21:d9:22:0c:45:32:59:5d:81:f5:
54:89:19:b9:1e:3f:8e:ee:de:88:04:1a:f0:92:72:fb:76:7e:
0b:72:b8:77:5b:41:f0:be:87:d2:36:0f:62:14:77:b9:2a:dd:
10:8f:61:6e:24:fa:a0:c1:93:4a:59:d1:50:ae:ef:1c:45:53:
c4:ac:69:0b:7b:d0:2a:c2:53:95:01:12:39:0e:6f:c6:cf:0b:
cf:13:ac:4b:75:01:84:93:50:a8:9c:80:90:6b:0f:af:f6:37:
28:2f:17:ce:dd:29:5a:df:f0:3f:f4:8b:0b:4e:f2:94:1b:42:
cd:5c:d9:59:f4:40:4a:8c:c5:74:fc:0c:03:9e:3f:1a:d5:d7:
32:df:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:14 2025 by rpki-client