Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: p9GOtVy++A2q5kSjzpq3wZLSb2KORXZijNYbn25PmlU=
Subject key identifier: 20:53:6B:DD:BA:37:86:6C:A4:47:46:3E:0D:37:25:4B:18:42:29:20
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4267CDE273A66C5A072D9C7819E97A44E5E5BE79
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
Signing time: Fri 06 Jun 2025 07:11:35 +0000
ROA not before: Fri 06 Jun 2025 07:06:35 +0000
ROA not after: Fri 05 Jun 2026 07:11:35 +0000
asID: 393942
IP address blocks: 143.20.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:67:cd:e2:73:a6:6c:5a:07:2d:9c:78:19:e9:7a:44:e5:e5:be:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 6 07:06:35 2025 GMT
Not After : Jun 5 07:11:35 2026 GMT
Subject: CN=20536BDDBA37866CA447463E0D37254B18422920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:21:d8:de:c3:d1:08:ef:42:4b:90:b0:d0:
81:0c:ef:31:a1:ba:4d:66:81:af:de:b6:b8:b1:ca:
de:27:ec:89:c7:e2:4d:4c:97:d2:69:ac:e5:ad:a7:
a9:dd:07:4d:bd:dd:f7:4b:6c:a9:7f:84:73:72:67:
a7:53:bc:25:6d:59:bd:1a:89:14:89:ef:0f:90:52:
cf:d8:f7:7b:e6:e7:2a:0d:a6:34:e5:5d:3a:c8:10:
9e:9d:88:b4:83:79:95:21:80:dc:9a:fa:8c:d9:88:
15:e3:0c:be:83:7e:fc:b6:dc:ad:a8:7a:9b:31:de:
19:40:58:f4:5a:bc:9f:97:80:97:4c:60:6f:5f:a7:
cf:17:2b:ef:b0:d3:c9:ee:28:9f:cc:4d:c4:0e:46:
fb:d6:02:f0:f7:ea:2a:37:57:f1:8c:76:d4:3f:31:
6f:69:fe:35:32:76:0e:20:34:8c:86:ef:eb:5d:00:
b2:62:70:cd:f2:7a:9e:23:a7:a2:a8:4d:f2:28:2b:
1f:76:b6:07:bb:9c:a9:9e:64:ab:97:33:ef:c8:e0:
64:b5:28:a2:b0:73:fc:b3:0e:60:cf:d4:cd:b8:62:
3b:c3:fd:40:e5:fa:0d:3f:df:b3:d3:a8:42:80:92:
2b:b2:a0:c8:ab:b8:fe:43:8a:7f:e6:a8:4c:26:1b:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:53:6B:DD:BA:37:86:6C:A4:47:46:3E:0D:37:25:4B:18:42:29:20
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.91.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:94:35:e1:32:01:7e:fe:e0:69:de:ac:c8:7b:10:9a:aa:fe:
6a:18:b5:e3:f5:42:25:aa:06:0d:03:f1:97:cc:aa:05:80:ac:
59:c3:f5:20:63:c7:8c:81:ca:f8:46:c6:6c:fe:a6:73:11:ea:
34:48:2d:a4:f0:61:e1:0d:4f:c4:22:57:45:00:3b:9e:ba:26:
75:a6:28:5a:e8:cf:6d:09:ab:bf:07:52:f2:e4:12:b6:8d:db:
a0:1f:7c:c7:1f:10:32:de:99:80:89:eb:a9:38:d7:85:c3:d0:
ab:f5:d9:28:e0:ba:3f:cc:dd:30:47:17:3a:9c:ff:c8:6a:9e:
f6:77:d0:74:8b:06:1e:a2:29:45:51:a0:3c:51:31:ea:74:0e:
9d:1c:65:12:e7:40:c3:90:b2:d8:97:65:d2:bc:bd:97:71:25:
b7:4e:43:11:6e:3a:05:40:a4:02:05:6d:ae:96:b6:71:2d:ea:
6d:7f:04:94:7f:54:f6:83:8b:2b:8a:cd:2a:18:df:c6:25:95:
08:28:ea:d8:b1:ef:0f:f5:df:01:4b:b2:48:30:0d:79:77:54:
5c:39:bd:03:4b:21:7c:57:fe:bc:fa:ea:1c:92:2b:94:0d:49:
37:7c:12:d1:2a:b8:41:c7:56:cb:71:4b:0d:27:e5:d0:38:a1:
ee:03:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:15 2025 by rpki-client