Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152599.roa
File: AS152599.roa (raw, json)
Hash identifier: 4QodHM72CP5DT/X5f5Y6K+/OGri8QJwLee6qbOTgTeo=
Subject key identifier: 59:EE:F3:E8:EE:33:DE:7C:19:3E:10:F8:9E:5A:C9:6E:61:0B:AB:E4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30874F08A2EE163E13B08C8DE285DB222AA61E8E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152599.roa
Signing time: Thu 29 May 2025 18:27:42 +0000
ROA not before: Thu 29 May 2025 18:22:42 +0000
ROA not after: Thu 28 May 2026 18:27:42 +0000
asID: 152599
IP address blocks: 2a13:9500:73::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:87:4f:08:a2:ee:16:3e:13:b0:8c:8d:e2:85:db:22:2a:a6:1e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 29 18:22:42 2025 GMT
Not After : May 28 18:27:42 2026 GMT
Subject: CN=59EEF3E8EE33DE7C193E10F89E5AC96E610BABE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:98:36:75:6d:f2:bb:a0:96:ce:fa:37:57:
f2:ce:d4:db:b9:9b:48:86:84:ce:35:3a:d7:0a:2c:
59:2c:a0:c9:74:88:6f:53:7f:1b:7f:6b:ed:00:b5:
33:59:bd:02:6b:9f:23:7f:6a:e4:e4:6c:46:41:f8:
85:f9:cc:19:90:81:2d:d0:bb:68:c6:73:e4:9d:7b:
e9:79:b1:ce:62:1f:b5:59:f6:84:26:8d:96:37:d4:
78:89:5d:c3:64:07:85:88:75:99:0c:b3:35:bb:10:
63:c8:e1:2d:81:35:cc:bf:dc:5c:5d:d7:af:b2:8a:
05:9f:46:42:d4:06:be:7c:6d:84:ef:8d:2c:c3:af:
d5:2e:06:96:1e:d0:67:aa:af:aa:37:25:62:9d:fb:
1d:b0:ab:40:cf:ff:26:e7:91:c0:96:cf:28:32:92:
7a:3b:21:72:d5:db:82:8e:81:d1:e7:12:c1:bb:28:
de:f1:81:4c:7a:bf:90:f0:b3:f6:65:15:ba:3e:4b:
bf:c3:36:a0:d9:9d:0f:75:32:0a:24:87:77:ad:8f:
5d:85:ef:2b:5e:c2:9d:34:28:51:50:8c:c5:3c:b9:
2a:90:4d:7e:c0:19:6c:d7:13:7f:f9:41:fa:e0:82:
f7:c2:75:a0:74:f6:32:13:42:13:aa:d9:ce:39:92:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EE:F3:E8:EE:33:DE:7C:19:3E:10:F8:9E:5A:C9:6E:61:0B:AB:E4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152599.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:73::/48
Signature Algorithm: sha256WithRSAEncryption
95:7c:88:37:93:3e:9f:df:b9:ed:64:c0:d3:c6:43:20:51:9a:
56:1e:56:60:29:f6:04:6c:e8:d6:9e:f0:b1:2e:ad:72:35:a8:
b1:03:f5:ec:8d:03:df:3a:44:ff:48:b3:6d:ce:f2:1a:7b:a8:
d1:dd:c7:4c:a7:7f:1a:9e:e7:8a:2c:08:9b:bc:5f:7b:89:7e:
2e:db:0b:1a:03:4e:1e:f3:e6:3c:15:54:49:e7:64:9d:ae:ab:
14:37:27:5d:fa:75:81:cf:84:68:b9:ef:7b:3c:52:03:ba:fe:
e2:20:ce:b6:18:e7:10:f1:57:13:85:77:59:7b:80:3f:72:b4:
77:0d:01:90:8b:30:bf:6c:99:42:38:7d:47:7d:51:5c:ed:12:
8c:f5:02:d2:e3:62:a1:25:f5:6a:17:e8:ef:7f:ce:16:54:15:
19:70:aa:ea:4a:6e:77:c7:60:5e:1e:2e:87:3a:90:9c:7b:98:
39:6a:1e:c1:77:17:bf:92:19:2d:ed:d9:be:ae:88:d2:c3:a2:
19:95:56:7d:f7:b6:0c:13:9e:23:30:8c:56:80:71:6f:bc:8c:
a1:1c:90:5f:3a:98:6f:31:b4:34:5c:2a:08:dc:f1:12:b5:07:
69:57:d0:ef:27:54:f5:3b:3a:08:af:f4:0d:06:30:e2:19:18:
aa:5f:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:30 2025 by rpki-client