Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS133199.roa
File: AS133199.roa (raw, json)
Hash identifier: fcTriwtBy7ruzkU1Un3sBVpVCNstm6R6BoQaLdNtkXo=
Subject key identifier: F4:F2:73:B7:60:3C:D4:8F:92:22:21:25:5B:EE:47:B4:B0:18:5C:57
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2A022271197D9D81714749ADB852135DA64D2CA0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS133199.roa
Signing time: Sun 15 Jun 2025 05:58:43 +0000
ROA not before: Sun 15 Jun 2025 05:53:43 +0000
ROA not after: Sun 14 Jun 2026 05:58:43 +0000
asID: 133199
IP address blocks: 155.117.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 14:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:02:22:71:19:7d:9d:81:71:47:49:ad:b8:52:13:5d:a6:4d:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 15 05:53:43 2025 GMT
Not After : Jun 14 05:58:43 2026 GMT
Subject: CN=F4F273B7603CD48F922221255BEE47B4B0185C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:9c:f0:74:01:9c:60:4a:48:91:cd:c2:10:
b4:40:0d:8a:51:78:59:fc:8e:32:4b:31:5c:df:d2:
37:49:a8:12:10:9e:df:aa:40:24:f2:2a:63:ef:12:
32:04:1d:b9:26:11:01:3a:88:a5:09:1f:2a:7e:85:
92:ba:92:19:3f:6a:a5:14:f8:5f:48:72:07:4f:2c:
73:97:09:8c:c0:00:1b:22:e4:fa:34:68:33:e1:dc:
87:ce:a5:58:a7:11:f7:2e:b8:03:dd:5d:c4:d6:ff:
84:1c:56:ae:45:d6:de:8f:e6:35:70:c4:9e:a8:4b:
e3:50:bd:82:d9:91:ed:7f:27:01:fd:91:c5:2b:17:
90:e8:6b:c0:9a:8c:85:0e:eb:4f:d3:a7:84:2e:6c:
10:d5:2f:30:be:07:3f:86:b0:9a:b3:8a:81:c3:29:
67:72:7f:5c:31:ae:6c:00:3d:5a:70:83:12:27:d2:
5d:35:81:66:36:02:e2:b6:d0:ce:2b:d6:a7:b7:01:
14:72:f0:96:15:29:60:1c:c7:b6:14:aa:5f:4d:93:
75:f6:67:45:f9:81:7a:db:4c:df:5f:57:23:36:7d:
16:2d:c7:e7:df:43:fa:60:27:34:de:43:76:a3:d9:
74:a2:90:32:c0:be:2a:00:76:ae:c8:68:85:3c:69:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F2:73:B7:60:3C:D4:8F:92:22:21:25:5B:EE:47:B4:B0:18:5C:57
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS133199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.118.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ac:bc:d2:d7:f3:6e:84:01:33:9e:a5:f9:9c:d3:cb:a8:93:
15:c6:f7:14:ea:e1:81:47:93:2f:a7:05:40:27:a9:cf:64:ee:
7e:b2:12:60:f5:a4:1b:f3:43:c8:eb:f8:d9:ee:1e:8a:ca:ab:
a1:ac:d3:e3:0c:23:b8:fd:96:1b:e3:1e:42:70:3b:48:bb:37:
de:17:26:20:ea:d5:2b:0b:08:1d:3f:24:bd:89:ed:bc:c2:1e:
9d:1d:04:ac:28:c9:45:39:1f:fb:4c:5a:70:3a:9c:bb:77:3d:
40:f2:6a:32:e6:37:28:27:1b:42:9b:fe:58:73:0b:66:f0:25:
e5:5f:ca:69:10:17:75:e7:c1:4d:25:5f:a8:02:d5:9f:b0:8a:
fa:88:86:43:24:dd:a9:95:47:8f:dc:2b:f6:5b:16:42:b8:02:
bf:34:96:9f:a8:32:4e:4b:c0:a2:eb:6a:38:f7:71:0b:33:3f:
f0:f2:fd:1b:84:71:c3:d7:a8:98:e1:82:f8:11:7b:dd:ae:44:
e9:7e:bf:bf:c8:c3:a1:b5:47:dd:4d:b6:44:39:2d:d0:cc:27:
6c:80:8e:ac:16:0f:0e:5e:8e:62:50:a4:8b:82:9b:4d:d6:2b:
fd:ce:94:75:d3:be:2d:d4:50:1e:fb:ab:33:ac:ed:a0:eb:49:
97:70:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:38:46 2025 by rpki-client