Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16589.roa
File: AS16589.roa (raw, json)
Hash identifier: Sy1eTlwRevQHCWVdESV9XUR8Bhl8HvchukksXrTRmWI=
Subject key identifier: 1A:A2:82:AF:9B:97:6B:D7:CA:15:D9:00:F3:9F:04:3E:B2:09:1B:5D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1569EA7C72E78151AE4ABAC845A29E001B188AFC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16589.roa
Signing time: Mon 24 Mar 2025 18:26:41 +0000
ROA not before: Mon 24 Mar 2025 18:21:41 +0000
ROA not after: Mon 23 Mar 2026 18:26:41 +0000
asID: 16589
IP address blocks: 95.134.7.0/24 maxlen: 24
95.135.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:69:ea:7c:72:e7:81:51:ae:4a:ba:c8:45:a2:9e:00:1b:18:8a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 24 18:21:41 2025 GMT
Not After : Mar 23 18:26:41 2026 GMT
Subject: CN=1AA282AF9B976BD7CA15D900F39F043EB2091B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:8b:5c:0c:c7:e3:0b:b6:c9:16:38:0f:08:
8e:d0:d4:5d:38:e2:38:66:5e:c8:e5:6b:78:ec:3a:
6f:32:5c:d6:58:65:8b:04:cf:af:cc:7d:19:b8:8e:
34:a0:43:2c:a4:06:4b:48:d0:5f:b4:11:a0:49:af:
25:00:77:4d:ec:8a:4e:3b:00:24:4b:16:00:d3:a6:
06:99:df:b8:f9:f6:5f:35:73:28:07:d8:b3:52:5c:
46:d2:4d:63:9d:27:9e:7b:17:e8:3e:08:8e:2f:5d:
61:10:8e:7f:3f:15:66:60:c9:73:e7:b1:58:19:c6:
6b:3b:6a:1d:ea:7f:1d:2d:9c:19:c9:52:77:89:6a:
c8:65:60:d4:46:2e:28:9b:5c:86:ae:8c:2c:b9:d8:
f6:75:75:c2:88:4a:ad:ea:3d:3f:4f:db:29:f7:13:
56:7e:23:59:c1:30:31:3b:6e:df:20:14:be:79:2b:
88:f5:85:73:13:7e:04:fd:d6:9d:d4:07:86:52:bb:
8f:c3:1c:f0:e7:1d:5c:e2:8a:c2:36:1b:fd:92:7a:
72:c9:e7:35:57:27:56:45:c9:96:d6:a8:f6:26:69:
3d:db:77:cb:f7:c0:dc:97:25:9e:f9:fc:13:ca:79:
a5:19:c2:ff:3c:c3:fc:79:21:02:e3:e0:6f:a7:83:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A2:82:AF:9B:97:6B:D7:CA:15:D9:00:F3:9F:04:3E:B2:09:1B:5D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.7.0/24
95.135.100.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5b:b4:13:44:5a:d3:73:b0:6a:1c:f8:2e:73:6e:93:96:32:
e9:c2:1f:fe:d1:df:0e:6e:2e:92:dd:63:84:bf:3f:18:98:84:
3a:f4:bf:7e:e6:f0:37:1b:06:7e:96:8a:e7:74:e4:7e:0b:a9:
74:00:2b:a1:cc:f0:ca:75:38:8a:19:4d:1a:95:e1:c7:d7:e9:
c0:14:6d:c2:9f:a1:83:1a:31:9a:0a:dd:b4:d3:e2:82:c0:a1:
f6:bb:d1:76:dd:83:76:25:ed:3b:83:ee:fd:e9:49:b2:1a:1c:
c4:b4:fe:e4:3e:45:68:d0:4e:6a:71:df:6a:c8:8d:12:3a:24:
5a:28:05:cb:cc:c5:39:38:99:f9:3e:b6:30:39:48:70:d1:3f:
ed:12:30:da:6d:8b:5b:96:f9:07:3a:13:36:90:21:48:dd:65:
4b:39:f6:73:e0:59:0b:21:44:7a:a3:3c:75:16:ee:3e:b4:1b:
67:5a:6c:ad:91:d1:9d:b5:a6:b6:09:9a:dc:f0:b4:c9:be:12:
95:a0:a5:f8:0e:6a:e1:f8:88:57:ca:71:d3:34:0b:47:67:a4:
d0:8f:d2:3a:5d:c6:8e:e2:2a:a2:03:2e:75:39:43:e5:b9:4e:
53:53:95:e1:48:6d:51:1f:e8:d8:cb:01:25:8f:12:5f:d5:bc:
74:44:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:05 2025 by rpki-client