Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: 1RcIefLJPbCSEmY43U4k49QokCmJlnWLyt1N6IMAfbc=
Subject key identifier: BD:26:D9:7A:60:2F:51:25:A0:4E:D9:81:3B:1A:DA:0F:56:31:DC:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6B4D9DEABF36017C3723F35DBE79F7A9F115E4A0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
Signing time: Fri 25 Apr 2025 10:20:13 +0000
ROA not before: Fri 25 Apr 2025 10:15:13 +0000
ROA not after: Fri 24 Apr 2026 10:20:13 +0000
asID: 10103
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.103.0/24 maxlen: 24
96.62.152.0/22 maxlen: 24
96.62.156.0/22 maxlen: 24
148.135.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4d:9d:ea:bf:36:01:7c:37:23:f3:5d:be:79:f7:a9:f1:15:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 25 10:15:13 2025 GMT
Not After : Apr 24 10:20:13 2026 GMT
Subject: CN=BD26D97A602F5125A04ED9813B1ADA0F5631DC12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:be:2f:7b:58:77:5a:86:2e:3b:9d:57:fa:
e3:8d:19:20:ca:ce:37:c4:e4:c8:ee:ba:85:b8:ca:
ae:53:67:00:03:13:ad:f2:ef:2a:28:d7:a0:43:7f:
2f:ff:18:d2:02:5c:17:87:86:a6:4f:f3:47:5e:e4:
2b:08:bd:3b:db:22:7f:bc:48:62:ad:32:bf:6f:97:
ae:6d:60:da:ef:d5:44:3c:2f:47:74:9f:cd:d5:2f:
ac:73:e2:fc:c7:20:f4:7a:26:ee:25:d2:de:b2:53:
c2:ab:f5:ba:75:dc:22:04:23:4e:4e:a8:37:5a:ef:
26:f9:65:08:0f:90:34:c3:65:d0:bf:11:bd:33:13:
d5:99:4d:91:bb:d5:a0:2d:02:26:d6:87:fc:51:dc:
44:28:dd:0c:de:93:a6:73:95:44:ee:5b:d8:06:b1:
c8:b8:a3:22:2b:c4:98:39:b2:cb:31:c6:07:6d:38:
22:17:cb:e2:b8:8b:fb:80:ca:de:03:2e:66:4e:0b:
ff:26:57:e2:83:7c:ac:be:8a:e8:88:bc:85:b0:4b:
ca:25:07:87:c0:ac:ab:1c:50:70:b6:23:fc:e9:5d:
24:e0:06:2c:1f:db:56:b5:57:e1:38:66:62:04:81:
08:5f:e3:24:4d:b7:a5:15:f8:4f:40:fe:f1:7b:2e:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:D9:7A:60:2F:51:25:A0:4E:D9:81:3B:1A:DA:0F:56:31:DC:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.103.0/24
96.62.152.0/21
148.135.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:10:ea:79:43:fe:a6:1a:d0:24:87:8f:5b:f5:b2:69:d5:fa:
c9:c7:94:31:48:a2:59:78:34:03:82:bb:f9:11:fd:b4:6e:9a:
f9:24:a7:c6:00:68:02:8e:5a:51:c9:19:59:f1:9e:91:cc:8d:
60:ee:95:20:f5:4b:e6:26:54:b5:b9:00:bb:b6:37:c5:45:79:
9a:96:ba:59:e0:b7:ef:ce:12:b5:37:26:c7:6b:d8:69:f3:21:
a9:14:d1:fb:70:f5:58:cb:43:aa:c7:35:e8:b7:9b:a7:8a:78:
41:74:97:66:4c:fc:15:a8:49:a8:5e:44:64:e8:52:3a:27:b1:
50:ac:8e:c5:9e:46:76:38:89:da:e1:75:57:9d:ca:f7:48:27:
ad:ac:62:3e:d8:0a:ae:09:cd:e6:dd:06:ea:9d:c3:0e:d3:30:
05:7d:95:1d:d3:b0:05:2a:b2:e1:cf:18:5e:04:6f:ac:77:fe:
7b:37:0f:7e:18:b8:d2:61:f6:2b:e3:1a:47:8f:c4:5d:57:3a:
82:18:93:0e:ff:0d:cd:5c:f3:95:8d:0a:aa:6e:a0:9f:11:7c:
b1:5e:03:92:a6:84:00:cc:cf:94:ab:3a:5b:79:23:02:6d:e9:
7c:b0:e9:82:47:a1:8d:bc:04:e7:91:33:45:1d:f8:d1:d8:0d:
b1:1a:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:50:13 2025 by rpki-client