Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS53850.roa
File: AS53850.roa (raw, json)
Hash identifier: zbMUmBesCpmlboHYu6et/XivLL9msbdh57/uKcvXrcM=
Subject key identifier: 22:19:1B:E1:24:83:9C:8D:C6:EA:29:2E:33:F0:A7:3A:D3:33:CC:D6
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 547239D6DDBAAD28C642CD4287A7EF1A9928204E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS53850.roa
Signing time: Fri 30 May 2025 06:24:44 +0000
ROA not before: Fri 30 May 2025 06:19:44 +0000
ROA not after: Fri 29 May 2026 06:24:44 +0000
asID: 53850
IP address blocks: 2a14:7581:9f43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:72:39:d6:dd:ba:ad:28:c6:42:cd:42:87:a7:ef:1a:99:28:20:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 30 06:19:44 2025 GMT
Not After : May 29 06:24:44 2026 GMT
Subject: CN=22191BE124839C8DC6EA292E33F0A73AD333CCD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:ba:35:f8:ab:b8:45:e0:10:2c:27:8c:78:
4a:6e:84:48:6f:ba:2b:2a:9a:a1:eb:2d:e6:22:53:
4e:41:01:30:6a:ec:d4:41:5e:e7:77:4f:dc:12:2a:
16:0d:db:71:cc:a9:1b:b1:19:aa:77:d8:59:30:42:
9c:da:94:cc:92:2b:63:6f:ea:0f:e9:a8:26:b2:67:
67:fe:44:ab:95:61:81:27:f7:90:7d:72:e4:f7:d2:
4b:cb:0a:16:ec:1e:e0:b3:53:3a:9e:69:d7:4b:57:
cc:e1:f1:4c:cc:8e:18:b1:73:86:0a:cb:6e:06:8b:
3f:c9:32:c8:a1:71:cc:4d:f9:88:67:9b:cb:a1:48:
f2:ee:76:aa:84:64:cd:39:2b:f3:1d:39:6e:ce:00:
68:33:c7:01:68:f4:e9:11:ad:de:62:43:b7:fb:d9:
02:cd:af:af:01:73:3b:52:4a:45:c0:87:c5:64:7b:
48:b1:54:fd:c4:e5:58:b9:af:11:63:f7:fe:f9:78:
ad:c1:ac:2c:4c:25:6d:c1:4a:0e:8e:23:2a:7f:5e:
67:08:19:de:91:44:dd:93:1a:06:01:c1:14:f9:d3:
fe:b5:fe:6a:38:23:a9:db:46:ce:3f:3b:c5:ee:d8:
22:f2:d9:12:62:1e:54:a9:68:91:48:84:4c:dd:ec:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:19:1B:E1:24:83:9C:8D:C6:EA:29:2E:33:F0:A7:3A:D3:33:CC:D6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS53850.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f43::/48
Signature Algorithm: sha256WithRSAEncryption
55:e7:6b:c5:02:db:41:6d:96:ae:f4:dc:06:e4:d9:f5:30:b4:
54:03:43:2e:91:02:c4:45:84:fc:fb:6e:b0:8c:70:04:f9:c7:
f3:3b:88:f3:56:34:5c:33:2e:47:39:d7:05:af:0f:a7:c4:45:
f8:10:66:30:4f:78:78:81:d7:e9:26:2d:29:38:8e:34:4e:24:
4d:70:e5:0d:6f:81:0a:14:b2:85:30:51:a1:e2:1d:a9:f8:a4:
a3:25:90:81:4f:12:46:84:41:2a:ec:33:9c:f2:41:2e:e9:73:
3f:d0:76:7b:5c:b4:38:c6:f8:a8:09:2f:f6:c4:74:d4:33:c2:
40:ad:45:45:78:51:65:18:b7:81:fc:9e:36:bf:25:94:42:17:
48:23:ba:2f:89:b3:30:57:01:40:62:ff:fb:f5:d3:9d:5e:4a:
d5:12:f4:dc:f3:f5:2c:63:37:de:22:e4:31:4a:46:6d:44:e5:
be:1c:72:fb:5f:8f:57:71:1f:52:e8:38:4e:0e:e0:f2:14:cd:
8e:d5:62:48:b7:3c:70:45:11:7c:f2:aa:1d:34:14:2b:91:9e:
58:a5:3d:c1:da:d8:3e:75:e9:43:f7:db:b6:15:c7:c8:de:11:
13:aa:ff:fc:1e:49:4f:e1:ca:58:d9:f2:d9:e6:0b:c0:c4:4b:
83:95:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:15:20 2025 by rpki-client