Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
File: AS55410.roa (raw, json)
Hash identifier: ANRfv/9iDKVPgHUKjvY4Idw2Xz5qkIm8VK9Vt7HOrOc=
Subject key identifier: 98:79:97:9A:0B:F1:46:EC:12:A9:5C:AC:69:98:68:09:70:1A:C5:D1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4D2C04F4E52A10CFA1D7E9F7ADE57333CB9BC251
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
Signing time: Tue 03 Jun 2025 16:54:08 +0000
ROA not before: Tue 03 Jun 2025 16:49:08 +0000
ROA not after: Tue 02 Jun 2026 16:54:08 +0000
asID: 55410
IP address blocks: 92.112.24.0/22 maxlen: 24
92.112.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2c:04:f4:e5:2a:10:cf:a1:d7:e9:f7:ad:e5:73:33:cb:9b:c2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 3 16:49:08 2025 GMT
Not After : Jun 2 16:54:08 2026 GMT
Subject: CN=9879979A0BF146EC12A95CAC69986809701AC5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:1b:4e:03:55:7b:09:24:20:71:c5:7d:4c:
98:55:fc:d1:8d:54:21:e5:aa:97:73:07:93:d5:a0:
d4:d2:07:c9:24:06:5b:62:5f:83:76:62:db:7f:94:
42:6a:d1:97:33:1a:9e:22:9a:57:55:53:d2:35:22:
e8:cf:9e:22:a9:ee:99:26:f5:2f:96:8b:57:d4:cc:
3c:ba:cb:c7:fc:aa:11:60:4d:a0:8a:e0:e9:36:9f:
1a:59:bf:41:c4:6b:e9:de:23:1f:b4:58:06:f1:3f:
ff:d6:95:33:2f:b7:a8:9a:32:bf:57:c2:0e:0d:22:
11:22:85:85:83:6d:97:72:41:bb:8d:97:fb:a3:75:
88:75:ae:ce:98:8a:3f:d5:1c:93:76:12:3b:98:19:
f2:16:c0:12:37:bb:b8:8c:f2:01:5d:eb:f3:ce:f5:
a3:9a:58:57:9d:48:58:35:90:08:67:51:42:22:c2:
8b:8e:e3:b2:70:1f:4f:0f:c9:3e:e1:b5:25:bb:d1:
9e:d6:95:da:97:88:5c:fb:29:67:20:2a:9f:02:2b:
4a:56:da:5b:fc:41:bc:fc:6a:46:59:99:b9:26:31:
ad:32:7a:b1:cc:79:3f:f4:c0:7d:ec:b9:6c:ed:70:
13:4e:11:92:a7:e4:b3:a6:f4:fd:6a:e0:49:aa:ac:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:97:9A:0B:F1:46:EC:12:A9:5C:AC:69:98:68:09:70:1A:C5:D1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.24.0/21
Signature Algorithm: sha256WithRSAEncryption
32:dd:73:67:79:6b:ea:f4:a0:d6:89:51:60:7f:95:b2:ca:10:
36:03:99:3d:86:a8:15:9f:c7:83:af:5a:b5:53:4c:6a:18:99:
a1:49:77:44:84:cf:ad:3c:70:7c:d0:a7:05:0e:db:39:65:ce:
2a:ba:c0:7b:d5:e2:ca:de:a3:82:87:9e:8d:82:14:2d:fb:de:
21:24:e4:11:cb:e5:a8:93:bc:36:a0:88:4c:cf:0d:90:3a:aa:
6f:cf:b4:bd:8b:6b:94:ae:33:25:14:50:2c:ac:42:cd:14:a0:
f2:02:4a:31:83:94:dc:cf:77:c2:72:b5:dd:3e:7e:04:36:57:
92:a7:e5:ab:7d:f9:68:71:fd:38:41:61:d5:8a:34:a4:c3:f5:
8f:5a:4e:2c:19:8e:f9:5c:66:e2:2b:03:e5:01:92:16:4b:d2:
86:b5:05:c2:20:e4:a4:5c:d8:b1:80:98:47:bb:65:c2:0e:37:
03:16:fd:f6:f2:21:42:59:92:11:19:b7:fc:1d:26:ee:04:9e:
1b:dc:d3:e7:6c:e6:f6:87:79:6d:af:c1:5f:71:3d:e8:d4:1f:
db:aa:9a:34:ca:7b:d6:6c:cb:6d:c1:86:49:10:9e:c8:72:26:
64:57:8b:34:da:0a:6a:ca:9c:15:c6:18:fc:47:5b:dc:a1:32:
f3:ba:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:12:06 2025 by rpki-client