Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: ms0syjmSzp6rAfCRfNpN6TsWhP48RDRgByiJ9TCvNco=
Subject key identifier: 7A:DE:6E:16:1E:7C:2C:02:1E:39:7D:90:1E:4B:D5:90:F1:6C:B9:FF
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1C16765F948A75C069C9098CDF846A397896EAA0
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS174.roa
Signing time: Tue 12 Aug 2025 14:10:07 +0000
ROA not before: Tue 12 Aug 2025 14:05:07 +0000
ROA not after: Tue 11 Aug 2026 14:10:07 +0000
asID: 174
IP address blocks: 143.20.34.0/24 maxlen: 24
143.20.35.0/24 maxlen: 24
143.20.80.0/24 maxlen: 24
143.20.81.0/24 maxlen: 24
143.20.99.0/24 maxlen: 24
143.20.108.0/22 maxlen: 22
143.20.132.0/23 maxlen: 23
143.20.158.0/23 maxlen: 23
143.20.162.0/23 maxlen: 23
143.20.166.0/23 maxlen: 23
143.20.176.0/23 maxlen: 23
143.20.186.0/23 maxlen: 23
143.20.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 01:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:16:76:5f:94:8a:75:c0:69:c9:09:8c:df:84:6a:39:78:96:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 12 14:05:07 2025 GMT
Not After : Aug 11 14:10:07 2026 GMT
Subject: CN=7ADE6E161E7C2C021E397D901E4BD590F16CB9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:8f:0f:cd:da:bf:d1:bd:b9:de:89:ba:66:
15:02:88:43:89:9f:54:ea:a7:34:ba:ee:a3:e2:5e:
a4:08:86:26:9f:d5:b3:94:b9:07:06:13:ae:f7:83:
4a:95:67:d2:5a:fd:0c:fb:05:c3:06:19:2e:a9:f2:
99:b3:f7:cc:73:e0:b5:bb:92:52:4c:c1:91:3d:ce:
17:8e:8f:b2:c5:2d:29:8e:98:12:a4:df:12:2c:68:
a4:3f:86:3f:12:c9:92:9b:c1:05:0f:cc:e5:de:59:
f7:15:ab:ea:66:41:26:e1:c7:f8:11:8a:f7:80:cc:
f0:6e:4e:3d:62:6f:00:fd:ff:e9:40:c4:4d:5c:1a:
ca:7e:8a:19:7b:d1:6f:d7:81:f5:32:dc:2e:a7:1b:
f3:97:9b:10:35:44:37:58:b1:ca:d0:14:2b:65:5d:
bf:af:5a:1c:6d:d7:3a:63:1c:42:cc:a0:31:6f:8c:
71:54:41:c5:41:1a:23:29:7d:0e:00:a7:95:94:d0:
cc:1f:f9:0e:9c:88:87:dc:a3:12:bb:f9:95:36:c0:
2d:4d:0a:bb:42:c1:ae:aa:f5:25:6f:16:d1:c9:77:
05:f7:2f:ab:be:2a:5a:0d:23:c5:ea:f7:11:71:87:
b8:df:5e:70:65:dc:9c:78:61:e7:88:64:00:c9:ff:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:6E:16:1E:7C:2C:02:1E:39:7D:90:1E:4B:D5:90:F1:6C:B9:FF
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.34.0/23
143.20.80.0/23
143.20.99.0/24
143.20.108.0/22
143.20.132.0/23
143.20.158.0/23
143.20.162.0/23
143.20.166.0/23
143.20.176.0/23
143.20.186.0/23
143.20.192.0/23
Signature Algorithm: sha256WithRSAEncryption
72:7a:54:a1:f8:f9:75:6d:ce:bf:92:55:9d:c2:b5:81:b7:c1:
f8:97:f1:72:3e:ca:37:fb:02:12:10:e1:4c:db:96:a9:28:17:
70:2e:e3:e3:0b:2a:97:24:3c:84:7e:03:5f:a7:89:d3:09:bc:
df:83:22:3e:eb:2f:44:f2:6e:b7:5e:0f:63:57:ff:f4:8c:ef:
14:04:98:0f:a0:31:19:87:2e:76:1e:62:a2:ec:3a:07:0c:f6:
60:1c:20:dc:63:30:94:1b:1f:db:bd:2c:1a:90:3e:92:cd:4d:
52:42:ca:14:b2:15:a3:cc:17:53:18:06:65:55:eb:23:e5:92:
1e:47:8a:79:c2:2d:4d:75:58:8b:bf:ed:5e:a3:3b:d7:14:49:
d1:16:d7:5f:de:20:a3:34:29:c5:77:cf:e3:5c:cf:52:95:89:
2d:af:1e:55:8d:e3:68:52:07:60:50:23:cf:f2:52:6e:87:b1:
ce:cf:4b:18:25:07:7e:48:7a:53:a7:3e:d6:74:c2:3e:37:03:
16:99:8e:d2:75:88:44:fa:d7:e1:9b:00:b7:2e:88:20:84:b2:
c9:ad:3c:78:79:42:e7:9b:d6:22:2e:42:83:a6:89:f7:bb:95:
d3:bf:46:f6:d9:bd:cd:77:fa:b4:6d:07:d3:77:b5:3e:31:45:
d5:0b:90:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:38:05 2025 by rpki-client