Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51559.roa
File: AS51559.roa (raw, json)
Hash identifier: /AcxJuyGcwsgZq8wiS8ei3O+I0F+yKw7o6CWEd8yZ7w=
Subject key identifier: AD:DA:C4:EA:69:DB:FB:9B:A0:24:B1:0A:AB:30:70:14:EC:B6:2D:61
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1E4EE1C09FD811CC37163A5BDD107361461B09BC
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51559.roa
Signing time: Wed 02 Apr 2025 15:00:37 +0000
ROA not before: Wed 02 Apr 2025 14:55:37 +0000
ROA not after: Wed 01 Apr 2026 15:00:37 +0000
asID: 51559
IP address blocks: 85.235.73.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 01:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4e:e1:c0:9f:d8:11:cc:37:16:3a:5b:dd:10:73:61:46:1b:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 2 14:55:37 2025 GMT
Not After : Apr 1 15:00:37 2026 GMT
Subject: CN=ADDAC4EA69DBFB9BA024B10AAB307014ECB62D61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:4e:97:99:87:c9:9f:20:c2:71:0f:fa:b0:
f1:73:2e:cf:06:9f:22:f0:41:27:21:05:1e:82:27:
5b:d1:e9:ec:66:72:53:72:b9:06:d3:68:b9:09:54:
e9:ad:08:6f:97:e8:e3:ab:59:f9:1f:6e:f2:b8:d1:
30:45:00:d9:fa:f1:60:7a:49:54:99:25:8a:66:0d:
b8:f0:54:51:6c:ec:92:05:c0:2a:31:9b:90:ff:34:
27:58:5c:9d:92:48:0e:c1:0d:3a:7e:ed:19:60:bd:
ae:cc:65:74:81:fe:48:ac:c7:ee:78:d6:aa:ea:1c:
4b:15:63:ef:f8:c4:d1:fd:85:75:a7:04:cd:1b:3c:
07:12:57:05:84:55:16:72:d8:b8:bb:2a:66:30:38:
85:78:6a:2a:a4:e4:74:58:5e:df:64:65:2f:64:38:
99:6f:b5:fa:1e:6e:76:12:9a:a4:a6:21:9a:76:6b:
f9:45:92:a0:72:55:d0:15:2a:fb:43:98:4e:2d:9e:
ef:72:03:1f:8f:ff:6d:c8:fa:d4:93:57:89:df:a1:
53:3a:3d:08:34:4f:02:76:de:df:80:4f:13:32:ad:
d5:b7:2f:52:20:a7:ad:c6:d2:18:78:72:fb:9d:ee:
b9:81:5b:e6:8c:9a:5a:b1:66:14:d0:ee:7e:31:08:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:C4:EA:69:DB:FB:9B:A0:24:B1:0A:AB:30:70:14:EC:B6:2D:61
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
59:44:45:86:4a:1d:24:5a:6e:74:8f:0f:18:cb:d4:b5:1d:03:
44:aa:93:20:af:d1:8f:ff:d9:95:01:7e:f4:07:ee:a0:44:86:
30:7e:16:6c:9a:4e:b4:fa:c2:55:dc:29:cc:98:1b:81:d5:25:
44:a7:c6:56:3d:dc:98:5f:96:e7:7f:ce:56:22:dc:8d:d9:18:
d9:b9:00:fc:2b:51:2b:fb:c3:16:47:2b:74:74:87:09:71:13:
2f:7c:7f:c7:d3:a7:1e:fd:fe:63:86:c9:80:81:e4:8b:6e:f6:
fd:ee:9e:e5:da:0c:f7:e3:a7:ec:4b:43:fc:1b:2e:55:fe:e5:
06:d8:20:cf:f4:88:ef:ce:53:cf:c7:5a:d5:1a:ef:a9:73:71:
9c:4f:38:07:7c:27:46:71:d2:58:b7:47:8d:11:e1:21:6c:e5:
db:f8:50:cc:ab:11:a7:f3:26:2c:3e:01:5b:39:c3:3b:bf:43:
78:7e:49:c9:b9:5a:d8:a5:57:e4:d5:ed:a7:14:5a:b8:0c:77:
9e:82:6d:dd:79:94:80:3f:97:c0:41:19:9d:d9:4f:aa:07:8a:
19:44:e9:eb:10:3f:a5:f8:fe:0d:cd:16:fa:85:70:55:7c:f6:
56:1c:f1:70:a8:ee:92:d1:33:b6:81:5d:db:aa:ef:cf:fa:44:
8b:97:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:36:23 2025 by rpki-client