Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
File: AS19577.roa (raw, json)
Hash identifier: 4GWuPCbf5KY9Vf+W3CVvi3c+KiFvPIsnFCXaHZliuo0=
Subject key identifier: 51:E0:84:75:CA:C4:6F:BA:93:6D:D5:91:20:07:3E:E7:8F:EB:E5:5B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 28F4C1A20E2735F37145007E93AFE9705C13EAC8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
Signing time: Fri 28 Feb 2025 20:22:07 +0000
ROA not before: Fri 28 Feb 2025 20:17:07 +0000
ROA not after: Fri 27 Feb 2026 20:22:07 +0000
asID: 19577
IP address blocks: 46.202.33.0/24 maxlen: 24
46.202.40.0/24 maxlen: 24
91.124.241.0/24 maxlen: 24
92.112.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f4:c1:a2:0e:27:35:f3:71:45:00:7e:93:af:e9:70:5c:13:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 28 20:17:07 2025 GMT
Not After : Feb 27 20:22:07 2026 GMT
Subject: CN=51E08475CAC46FBA936DD59120073EE78FEBE55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:ec:02:47:6a:ee:7f:15:55:de:8a:74:79:
0d:65:c8:23:0d:79:81:47:5c:20:02:ea:1c:d0:1e:
ba:91:92:4b:3f:65:8f:f7:18:7a:e8:7a:83:21:31:
15:9e:2c:7e:5c:d4:16:cb:bd:b1:23:0e:fe:42:e7:
54:45:f2:bc:f9:c3:df:7d:cd:e6:f7:27:6a:2b:f1:
43:d4:8d:64:ad:9d:73:d9:e0:8d:b5:3d:5f:8c:22:
96:68:f9:a9:ec:78:31:a6:eb:5a:52:fd:f1:ab:fd:
00:0e:4d:56:f5:f2:b9:d0:3d:21:d2:15:92:e4:0f:
59:be:92:98:81:66:38:1c:4d:0a:12:b0:3c:40:fd:
c1:a9:dd:a8:10:d2:87:b1:79:56:90:fb:34:45:b4:
5c:08:fa:c9:13:b5:73:9d:bc:81:ec:71:1e:7c:a9:
40:8a:45:0f:74:0a:4d:0d:34:53:bc:c4:e8:01:6a:
05:4f:45:6c:6a:22:3c:f9:05:2f:1c:bf:88:e6:ac:
07:37:2f:fd:fc:60:92:31:ef:40:39:b2:33:68:f5:
cc:7d:52:d3:f5:87:7c:6d:6a:4e:22:7f:59:10:7d:
f1:d5:a9:0d:5d:03:48:c1:91:d6:90:d7:21:34:4f:
40:08:19:a4:a9:76:50:f8:c5:51:db:ad:70:c4:a8:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:84:75:CA:C4:6F:BA:93:6D:D5:91:20:07:3E:E7:8F:EB:E5:5B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.33.0/24
46.202.40.0/24
91.124.241.0/24
92.112.6.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e8:bc:f2:ed:1e:ae:bd:fe:a6:6a:b6:aa:b1:e9:16:9a:8d:
9e:77:e0:39:56:b4:96:06:df:2b:81:c1:cd:2b:cf:86:80:e6:
e9:ee:1c:f3:5b:91:14:a5:49:7e:28:4d:a5:fa:e2:fe:f7:c3:
9c:4f:0e:5e:f9:6d:ee:75:79:33:37:a9:a8:5b:0e:6b:6d:54:
a1:4b:28:e3:66:13:53:d7:67:c2:a4:a5:48:04:b5:c4:44:41:
26:a9:9b:64:18:84:75:ec:a8:ef:30:81:ff:af:47:86:5a:b4:
83:b2:56:8b:ce:9f:02:93:0b:ab:1a:50:7e:d2:fe:71:0c:0c:
27:8a:c8:cd:4d:7e:09:3e:40:72:b9:53:f1:28:ed:68:37:fd:
6d:78:2a:7d:67:f1:6b:a8:36:18:ac:8f:52:96:e4:98:d0:f6:
15:91:34:bb:21:f2:5b:4d:d0:99:14:6e:ef:4e:dd:53:58:07:
28:f3:60:5b:2d:dd:44:04:8e:16:74:d4:52:68:21:81:d4:55:
d3:70:2f:d3:44:f7:86:8e:41:5f:ec:2b:8b:45:fb:b0:77:fe:
83:f8:f3:1a:19:97:71:6a:46:19:f5:1d:69:c0:9e:b2:e3:14:
8d:c2:ed:f5:d2:07:e2:2f:ef:b2:fc:45:bc:41:81:22:5d:30:
7a:14:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:05 2025 by rpki-client