Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43641.roa
File: AS43641.roa (raw, json)
Hash identifier: XkffvUGsy66AAYS/YL3eaJEYS2zGSL/TpCLg9dfMy5E=
Subject key identifier: 39:D5:A4:84:91:77:63:16:2D:A9:3D:88:B7:94:EA:07:B3:20:83:38
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3923C602E33B0A613D56392C8A9E124CF6A26292
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43641.roa
Signing time: Tue 15 Apr 2025 18:42:17 +0000
ROA not before: Tue 15 Apr 2025 18:37:17 +0000
ROA not after: Tue 14 Apr 2026 18:42:17 +0000
asID: 43641
IP address blocks: 46.202.57.0/24 maxlen: 24
46.202.59.0/24 maxlen: 24
46.202.60.0/24 maxlen: 24
46.202.63.0/24 maxlen: 24
46.202.64.0/24 maxlen: 24
46.202.67.0/24 maxlen: 24
46.202.68.0/24 maxlen: 24
46.202.71.0/24 maxlen: 24
46.202.74.0/24 maxlen: 24
46.202.77.0/24 maxlen: 24
46.202.78.0/24 maxlen: 24
46.202.227.0/24 maxlen: 24
46.202.248.0/24 maxlen: 24
91.124.32.0/24 maxlen: 24
92.113.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:23:c6:02:e3:3b:0a:61:3d:56:39:2c:8a:9e:12:4c:f6:a2:62:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 15 18:37:17 2025 GMT
Not After : Apr 14 18:42:17 2026 GMT
Subject: CN=39D5A484917763162DA93D88B794EA07B3208338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:d8:02:27:c4:f0:b1:76:0d:09:bb:dd:9d:
72:40:49:a5:d1:7a:91:9a:0b:58:d6:cc:61:47:ef:
4c:7d:93:aa:53:67:ae:6b:9b:9f:b9:3a:f5:97:0c:
e7:9f:ac:c3:2f:ad:6c:3b:da:39:cc:80:b9:18:90:
32:4c:9a:81:78:9e:95:ff:dd:58:d3:1b:07:0c:0d:
b0:ac:e8:70:3f:26:6f:5e:32:0a:16:c3:36:17:a9:
a0:c6:11:07:c0:f7:cc:04:80:f6:1d:e1:ff:53:44:
d7:30:cc:db:99:4d:e6:30:50:5c:d7:a3:89:78:8e:
6c:ca:61:6c:b8:49:fe:de:f9:32:b0:2e:7c:66:08:
ef:b4:2e:86:75:9d:18:38:99:6b:05:ed:7a:89:fa:
e1:18:fe:41:93:2a:36:69:a0:56:98:cf:0e:7c:e1:
8d:bc:18:3c:b2:ee:c4:ac:d0:fe:5d:8a:73:fa:79:
97:d8:79:e7:1f:9b:17:d1:c2:b0:bf:c1:ab:39:54:
6b:a9:25:0b:8c:37:33:c9:3b:ed:6a:9e:b7:44:15:
51:c3:26:8a:32:a6:78:27:1a:ec:59:a5:ce:66:35:
4f:07:52:25:1d:c8:3b:95:93:f2:f7:07:32:e0:10:
d2:77:e1:55:3c:28:26:a0:1b:1c:5f:3b:86:c1:bf:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D5:A4:84:91:77:63:16:2D:A9:3D:88:B7:94:EA:07:B3:20:83:38
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.57.0/24
46.202.59.0-46.202.60.255
46.202.63.0-46.202.64.255
46.202.67.0-46.202.68.255
46.202.71.0/24
46.202.74.0/24
46.202.77.0-46.202.78.255
46.202.227.0/24
46.202.248.0/24
91.124.32.0/24
92.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cb:39:f2:47:8b:5f:bb:19:c9:e9:86:dd:d0:c7:1b:9e:a9:
6d:cc:37:ae:03:f9:d4:91:be:f1:6f:9f:34:2c:f5:0c:37:75:
05:3d:2b:11:30:63:3b:00:45:a7:1a:2d:82:6c:4e:3f:ba:99:
4f:7e:3d:87:87:19:d3:66:af:f6:30:d5:1f:bd:b4:ba:60:84:
23:06:3d:9b:d4:09:4b:25:ec:2f:e6:c2:41:ad:30:60:bd:db:
9f:d0:a0:a6:07:3b:8a:a9:27:08:da:17:b0:73:82:9d:b8:cb:
0f:3a:bb:5c:c3:4b:6a:c8:80:70:05:d3:be:3c:48:06:72:36:
e1:a8:41:78:bf:16:3b:4b:d7:4e:88:1b:93:26:83:72:bf:3a:
49:c5:d3:ab:83:52:fe:45:50:36:f5:27:49:08:1b:3d:8c:d9:
5b:de:97:48:16:cf:3e:00:13:3d:59:03:c3:bc:f0:bd:4f:16:
cc:96:f2:ae:8d:c7:7c:41:6c:1a:ca:a3:3b:d7:da:e5:db:a8:
b4:b3:07:1c:a5:5a:2a:38:b2:c9:91:7b:78:ca:c5:f6:59:e5:
b8:ef:6f:2a:53:61:4d:ae:dd:6f:1c:d5:da:99:e0:c6:da:54:
f4:57:28:28:69:75:42:b2:a6:d8:c7:7e:a2:9a:ef:c9:bf:60:
db:14:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:09:58 2025 by rpki-client