Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS134094.roa
File: AS134094.roa (raw, json)
Hash identifier: WWKiE16bfy6kkUqPU+wwT1g4FmyvxI/xZSfmy9F4wOc=
Subject key identifier: EB:A6:80:1B:61:FB:8D:05:46:BF:EB:47:F8:B4:1E:E3:C6:04:B6:67
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 302B9D61AA136F6260B3C432727A88BBFD070B69
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS134094.roa
Signing time: Thu 29 May 2025 13:46:58 +0000
ROA not before: Thu 29 May 2025 13:41:58 +0000
ROA not after: Thu 28 May 2026 13:46:58 +0000
asID: 134094
IP address blocks: 141.11.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2b:9d:61:aa:13:6f:62:60:b3:c4:32:72:7a:88:bb:fd:07:0b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 29 13:41:58 2025 GMT
Not After : May 28 13:46:58 2026 GMT
Subject: CN=EBA6801B61FB8D0546BFEB47F8B41EE3C604B667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:82:13:3d:f2:68:93:ff:93:7c:a7:3b:e1:
74:6e:c2:7e:5d:86:5f:d2:80:f1:aa:7f:0a:4d:2b:
bb:f2:d0:df:23:95:d4:f5:71:47:34:78:f2:6d:2c:
4d:b2:e9:5f:2f:77:cf:42:65:6c:43:b2:83:1b:81:
ba:96:ab:47:60:b6:b5:5c:b9:f6:54:b7:79:03:25:
aa:c6:4e:99:d2:fd:e3:b8:ac:18:46:e0:9d:4b:58:
04:34:6e:23:71:55:4c:3f:20:0e:a8:d3:68:ac:fc:
b3:b3:d4:4f:25:15:54:4e:f2:b2:93:b4:b2:70:2c:
1b:f9:3c:a6:01:f7:33:aa:04:bf:c4:81:83:3e:c9:
39:3d:fe:c9:93:b5:18:08:8e:e2:9a:66:2b:b2:ba:
95:20:4b:1f:ed:25:fd:5e:85:5d:01:00:c9:43:d1:
c4:fb:87:88:da:3c:7a:11:e1:90:36:00:82:c2:64:
e6:27:76:95:c1:54:5f:94:d7:8a:71:68:9c:78:dd:
ef:d5:2f:42:df:4f:2e:1c:b9:2f:01:57:24:48:4a:
3f:84:6c:ff:85:46:27:28:e5:ce:e4:ca:9e:f9:e3:
7a:2b:b4:80:cc:a8:23:cf:0e:4b:26:8f:e4:1a:36:
11:0d:5e:12:82:41:9c:c5:59:3d:cd:45:a4:d8:f0:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:80:1B:61:FB:8D:05:46:BF:EB:47:F8:B4:1E:E3:C6:04:B6:67
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS134094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.245.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4f:53:7c:3c:eb:77:8f:90:3d:44:b7:d6:40:d9:39:d4:b3:
07:60:0d:88:ef:93:b9:87:63:fb:04:a6:db:1a:d7:de:60:56:
52:64:95:30:86:86:4d:bc:9e:ee:f5:2f:15:69:52:db:a9:94:
4c:07:eb:b9:8b:0c:2a:a8:4f:54:77:cc:83:89:b2:30:59:a3:
31:95:33:b3:1e:f4:95:e9:ce:83:97:39:ab:02:5a:84:ab:01:
82:3b:7b:5e:cb:5b:3b:e3:31:14:1d:be:a3:56:f7:72:c3:65:
2b:0f:6a:47:d0:2c:c0:42:29:9f:3c:ef:07:80:ca:fb:de:6f:
52:fa:53:c8:39:f9:e1:f5:7f:1b:89:0b:af:9d:89:c8:43:2f:
16:53:db:64:89:19:9b:e5:62:ee:c0:b6:9e:bc:d1:fe:76:01:
4c:13:82:0b:58:cc:f5:e3:43:2a:e2:74:1a:4c:68:90:64:fc:
fc:a9:c5:96:14:ca:14:fa:f0:50:2e:bc:83:ba:7f:12:a9:ce:
66:10:f7:f9:6e:bb:e5:d8:b8:98:36:4c:8a:2d:75:f7:96:5a:
e4:1d:81:77:66:87:1b:5f:b7:c7:4d:ee:e9:ee:5a:f9:fa:92:
a3:b1:df:f7:89:f6:a5:34:87:7d:b5:fd:56:88:41:55:99:b0:
83:42:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:00:49 2025 by rpki-client