Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: iN0KyZ9W0VnlDk20JneSF9t84gZCuoEIeVq4Rlwtypc=
Subject key identifier: EB:DD:78:73:7A:E3:BE:BB:C0:42:32:BA:03:D3:79:04:B9:18:E9:77
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4629A95536CD4B6E5AD20D4E776D4751F21A6AC2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137897.roa
Signing time: Wed 16 Apr 2025 11:43:50 +0000
ROA not before: Wed 16 Apr 2025 11:38:50 +0000
ROA not after: Wed 15 Apr 2026 11:43:50 +0000
asID: 137897
IP address blocks: 147.79.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:29:a9:55:36:cd:4b:6e:5a:d2:0d:4e:77:6d:47:51:f2:1a:6a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 16 11:38:50 2025 GMT
Not After : Apr 15 11:43:50 2026 GMT
Subject: CN=EBDD78737AE3BEBBC04232BA03D37904B918E977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:e8:e8:db:b3:a4:e0:4c:10:c4:76:b5:39:
d2:c3:4b:ee:f4:80:f4:67:c7:52:da:ef:66:b4:42:
be:5c:e0:01:29:fe:e1:9d:96:cb:7c:50:2d:eb:24:
e8:9c:cb:2c:54:59:54:d8:ca:1a:bc:1e:35:47:fc:
48:11:f0:24:28:e6:bd:57:03:ea:34:d1:8d:77:46:
25:84:8b:12:41:df:f4:71:c0:7d:2d:fc:96:3c:74:
d7:2b:f1:f4:79:44:ac:bd:c4:09:83:e4:f4:96:3c:
1b:b3:65:cb:b9:35:21:29:69:84:88:bb:a3:4a:2f:
2f:ac:a6:ff:84:d2:d1:34:6b:1f:5a:68:48:dd:95:
f5:ea:98:8c:11:2a:e1:62:18:45:23:e2:34:a3:14:
6a:79:67:bb:dc:ab:5b:54:4f:ac:0f:ed:ee:60:dc:
cc:af:96:a3:24:a2:52:01:ba:eb:19:8c:ea:ea:e4:
56:c1:cc:ed:b1:32:96:25:ea:8d:61:14:6c:1a:c7:
ab:b9:37:a1:f6:11:73:56:2d:d4:17:13:49:df:24:
34:f4:84:23:67:d9:f6:2d:57:6c:8b:c6:53:46:10:
31:d3:0c:c7:ab:df:a6:c6:dc:cf:32:24:31:8e:e9:
f3:36:72:8a:98:a5:2e:d2:0f:25:9b:39:bd:ec:d6:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DD:78:73:7A:E3:BE:BB:C0:42:32:BA:03:D3:79:04:B9:18:E9:77
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.62.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:10:d7:ff:8a:56:3e:d9:bb:d1:9c:5e:0c:bd:52:3c:7a:88:
b7:7d:1a:55:45:21:cf:6e:c1:88:6b:df:78:d6:76:57:d1:7b:
96:5d:87:c8:cc:29:17:c7:25:b3:80:e9:59:90:ae:16:4f:4b:
7a:c3:18:65:4c:97:1d:57:62:25:cf:d7:4e:cf:a7:43:ee:d7:
fa:85:53:d8:3b:30:03:6d:92:3f:5d:21:ce:42:f9:ea:50:7e:
ad:dc:92:9d:fa:9c:38:cb:e4:62:46:b6:b3:41:73:ae:a4:33:
98:ec:61:02:18:7a:00:c1:fe:93:e6:44:d9:80:6e:d6:bb:e6:
56:e8:19:11:6c:e4:72:2a:07:a4:ba:07:f2:23:fd:0b:4b:55:
9f:55:28:f9:f2:6f:fc:a6:05:e6:7f:61:72:03:4c:d3:ac:8a:
8c:29:1c:43:e6:3d:d8:89:40:7d:b3:7a:d4:d9:a0:c2:7a:bd:
ae:d5:f1:f8:17:75:76:b1:81:ff:97:ba:0d:1a:38:e6:4b:0c:
18:99:a4:c8:41:81:cc:e1:d9:d8:18:5b:82:dd:db:58:ee:0c:
a5:79:bb:99:95:13:ad:04:a6:2a:1b:19:11:69:1d:c0:67:5c:
c4:34:4d:a6:91:b5:06:52:ca:ec:67:a6:73:f2:72:22:a8:80:
a7:1c:35:25
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURimpVTbNS25a0g1Od21HUfIaasIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA0MTYxMTM4NTBaFw0yNjA0MTUxMTQzNTBaMDMxMTAvBgNV
BAMTKEVCREQ3ODczN0FFM0JFQkJDMDQyMzJCQTAzRDM3OTA0QjkxOEU5NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlcOjo27Ok4EwQxHa1OdLDS+70
gPRnx1La72a0Qr5c4AEp/uGdlst8UC3rJOicyyxUWVTYyhq8HjVH/EgR8CQo5r1X
A+o00Y13RiWEixJB3/RxwH0t/JY8dNcr8fR5RKy9xAmD5PSWPBuzZcu5NSEpaYSI
u6NKLy+spv+E0tE0ax9aaEjdlfXqmIwRKuFiGEUj4jSjFGp5Z7vcq1tUT6wP7e5g
3MyvlqMkolIBuusZjOrq5FbBzO2xMpYl6o1hFGwax6u5N6H2EXNWLdQXE0nfJDT0
hCNn2fYtV2yLxlNGEDHTDMer36bG3M8yJDGO6fM2coqYpS7SDyWbOb3s1rQhAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU6914c3rjvrvAQjK6A9N5BLkY6XcwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM3ODk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk08+
MA0GCSqGSIb3DQEBCwUAA4IBAQC6ENf/ilY+2bvRnF4MvVI8eoi3fRpVRSHPbsGI
a9941nZX0XuWXYfIzCkXxyWzgOlZkK4WT0t6wxhlTJcdV2Ilz9dOz6dD7tf6hVPY
OzADbZI/XSHOQvnqUH6t3JKd+pw4y+RiRrazQXOupDOY7GECGHoAwf6T5kTZgG7W
u+ZW6BkRbORyKgekugfyI/0LS1WfVSj58m/8pgXmf2FyA0zTrIqMKRxD5j3YiUB9
s3rU2aDCer2u1fH4F3V2sYH/l7oNGjjmSwwYmaTIQYHM4dnYGFuC3dtY7gylebuZ
lROtBKYqGxkRaR3AZ1zENE2mkbUGUsrsZ6Zz8nIiqICnHDUl
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:53:30 2025 by rpki-client