Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: 0B3lqU+KuEopa+O4F32qRRmFFfcpCkCWyKw+LwDN5oU=
Subject key identifier: B4:9C:60:DD:03:BA:6E:AB:43:8D:0F:AB:02:BB:CE:92:D6:29:50:93
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5D7418BE7139A748521FE0DCB283B290063FCE4B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS53356.roa
Signing time: Tue 20 May 2025 14:35:33 +0000
ROA not before: Tue 20 May 2025 14:30:33 +0000
ROA not after: Tue 19 May 2026 14:35:33 +0000
asID: 53356
IP address blocks: 45.149.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 02:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:74:18:be:71:39:a7:48:52:1f:e0:dc:b2:83:b2:90:06:3f:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 20 14:30:33 2025 GMT
Not After : May 19 14:35:33 2026 GMT
Subject: CN=B49C60DD03BA6EAB438D0FAB02BBCE92D6295093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:65:b8:69:e3:4d:a9:3d:41:96:4a:f7:a4:
e6:62:f0:49:d8:59:90:a6:8c:a6:85:b2:90:e9:8f:
f7:76:1b:b1:eb:12:4a:55:6c:73:5b:1e:f2:a0:27:
e6:09:f7:1c:67:c6:c8:61:ac:7d:82:83:1a:16:92:
66:cf:7a:15:a4:df:14:67:0c:6a:38:8b:f8:09:45:
7b:61:19:ed:b5:be:97:19:f7:ca:a0:c5:ed:6d:10:
d9:46:2e:1a:d0:52:51:82:0f:c1:29:3b:5f:72:9c:
c3:8a:a3:4d:eb:5d:0e:c0:b4:6d:36:93:bc:4b:6e:
08:e1:e4:0d:4f:de:23:28:12:00:e6:e2:42:61:6d:
32:28:5e:16:b1:8f:60:7c:c5:e2:8c:ae:f1:70:00:
87:5f:8e:45:50:98:bb:01:f5:1f:ac:a5:3d:60:eb:
31:25:e0:e4:24:d3:8e:fd:f7:d9:70:74:be:3a:ad:
3a:e6:ff:1e:64:ef:2f:84:de:50:82:61:f9:85:fb:
75:d6:87:7a:2f:34:5f:f4:30:d0:bd:9a:f0:1b:30:
f6:b5:58:a0:93:99:1e:76:95:0e:68:85:31:30:e8:
0d:50:cc:d2:b9:e3:72:17:d5:a6:14:53:78:71:12:
9d:69:9a:0e:b6:ba:c0:9b:28:6f:af:cc:83:36:7f:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:60:DD:03:BA:6E:AB:43:8D:0F:AB:02:BB:CE:92:D6:29:50:93
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:57:77:e9:8b:f1:fe:b4:31:ef:40:a7:0c:1f:ea:4d:c5:82:
2b:0f:9b:09:de:2e:8a:aa:f7:8d:24:46:98:60:53:ec:f4:10:
81:7d:58:22:a7:dd:0c:95:b6:1a:d9:68:e6:d4:35:27:5c:3c:
ef:16:90:3f:6d:ae:49:87:5b:61:ab:76:8b:01:95:c9:b3:dd:
fc:77:02:7b:75:03:90:96:df:e7:bf:78:e3:65:7d:f5:1a:51:
74:37:0b:94:dc:14:c1:0b:18:1b:c2:6e:a3:84:62:7d:4d:ae:
56:56:b1:8f:b6:89:a1:fd:42:82:67:70:d4:29:7c:2f:90:d2:
e2:29:70:b1:8e:23:a0:fa:4d:b5:c9:ce:55:2d:5d:45:f4:ac:
9d:2a:ba:10:b4:ac:39:63:a0:ad:5c:3b:3a:a2:fa:1d:e7:60:
30:79:6b:b5:5f:e6:6f:68:04:32:9f:f4:c5:0b:1b:34:30:69:
8b:24:f7:11:02:f1:31:6b:25:82:f3:f5:9c:e4:51:60:4a:ec:
d6:54:2a:74:25:1d:6c:90:78:78:47:f6:a3:b5:ea:3c:f6:ee:
6a:7e:10:e0:cd:7e:73:cc:77:05:59:2d:0c:22:ec:e1:f5:ac:
5d:7d:4c:2f:65:b8:b5:11:82:29:b7:3e:24:41:7c:62:1d:74:
ae:9f:d6:ab
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUXXQYvnE5p0hSH+DcsoOykAY/zkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA1MjAxNDMwMzNaFw0yNjA1MTkxNDM1MzNaMDMxMTAvBgNV
BAMTKEI0OUM2MEREMDNCQTZFQUI0MzhEMEZBQjAyQkJDRTkyRDYyOTUwOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tmW4aeNNqT1Blkr3pOZi8EnY
WZCmjKaFspDpj/d2G7HrEkpVbHNbHvKgJ+YJ9xxnxshhrH2CgxoWkmbPehWk3xRn
DGo4i/gJRXthGe21vpcZ98qgxe1tENlGLhrQUlGCD8EpO19ynMOKo03rXQ7AtG02
k7xLbgjh5A1P3iMoEgDm4kJhbTIoXhaxj2B8xeKMrvFwAIdfjkVQmLsB9R+spT1g
6zEl4OQk047999lwdL46rTrm/x5k7y+E3lCCYfmF+3XWh3ovNF/0MNC9mvAbMPa1
WKCTmR52lQ5ohTEw6A1QzNK543IX1aYUU3hxEp1pmg62usCbKG+vzIM2f9EfAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUtJxg3QO6bqtDjQ+rArvOktYpUJMwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNTMzNTYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtlbkw
DQYJKoZIhvcNAQELBQADggEBALFXd+mL8f60Me9Apwwf6k3FgisPmwneLoqq940k
RphgU+z0EIF9WCKn3QyVthrZaObUNSdcPO8WkD9trkmHW2GrdosBlcmz3fx3Ant1
A5CW3+e/eONlffUaUXQ3C5TcFMELGBvCbqOEYn1NrlZWsY+2iaH9QoJncNQpfC+Q
0uIpcLGOI6D6TbXJzlUtXUX0rJ0quhC0rDljoK1cOzqi+h3nYDB5a7Vf5m9oBDKf
9MULGzQwaYsk9xEC8TFrJYLz9ZzkUWBK7NZUKnQlHWyQeHhH9qO16jz27mp+EODN
fnPMdwVZLQwi7OH1rF19TC9luLURgim3PiRBfGIddK6f1qs=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:34 2025 by rpki-client