Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151407.roa
File: AS151407.roa (raw, json)
Hash identifier: hOdwBw8YmILISx5O7UwTg+tKcbW7QcATYKo+/Yft61U=
Subject key identifier: 22:71:49:C8:93:90:15:FB:B6:72:45:73:07:F1:1E:4D:A9:86:EA:9B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7CD723D38340A518872B7C42F67F5926E75F6737
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151407.roa
Signing time: Wed 30 Jul 2025 14:51:15 +0000
ROA not before: Wed 30 Jul 2025 14:46:15 +0000
ROA not after: Wed 29 Jul 2026 14:51:15 +0000
asID: 151407
IP address blocks: 155.117.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d7:23:d3:83:40:a5:18:87:2b:7c:42:f6:7f:59:26:e7:5f:67:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 30 14:46:15 2025 GMT
Not After : Jul 29 14:51:15 2026 GMT
Subject: CN=227149C8939015FBB672457307F11E4DA986EA9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:0d:86:0b:c7:c9:8c:22:dd:d0:76:51:65:
b9:ed:72:68:ce:c8:5f:62:a6:ee:cd:97:fd:57:d5:
cf:b7:03:9b:d4:8e:74:af:29:57:ec:d9:42:43:d8:
52:77:2b:c8:b5:19:b8:82:0a:17:b9:8e:f8:a7:40:
f2:73:b8:61:9a:08:72:6c:3b:88:0e:8e:ed:97:31:
28:f0:2c:f6:3b:e7:98:72:96:ca:ae:a4:66:f9:50:
a7:2d:a1:25:c6:a7:83:db:a2:79:00:56:d9:82:43:
66:68:08:3a:8f:0d:9e:4e:d6:35:4e:e7:ad:be:71:
d5:d8:08:d0:1c:22:b3:12:37:42:18:fc:95:30:19:
10:61:2c:75:8d:43:52:08:82:a7:79:68:5c:d2:f4:
5d:9a:3c:90:04:89:9d:d7:a0:09:df:70:5f:32:cc:
31:98:08:da:bc:da:ab:ca:76:33:87:43:b4:ac:14:
bc:5a:f8:01:46:58:bd:97:16:13:c0:19:8b:da:c6:
f4:f5:c3:36:b0:dd:0c:d5:bc:d2:ae:ee:84:85:35:
bb:15:d7:9c:25:bb:09:cd:42:10:f0:9b:0c:08:70:
df:f6:02:a8:23:e2:a2:71:53:4f:04:bd:a3:44:ed:
ab:47:e9:d6:58:a7:b7:43:eb:fa:13:ca:10:cd:f0:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:71:49:C8:93:90:15:FB:B6:72:45:73:07:F1:1E:4D:A9:86:EA:9B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.96.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f2:d1:2a:dd:4f:95:57:ae:3c:ac:b3:e2:92:ec:50:98:34:
41:3a:8d:c3:91:dd:b7:c8:02:77:4f:f8:32:00:77:62:c5:00:
bc:6d:f1:c1:9d:d9:d7:dd:2d:a5:2c:0b:82:88:d3:18:37:a4:
4c:c9:5d:b5:1f:f9:d3:6e:f3:5a:17:42:50:41:d9:6a:a4:b1:
4b:8d:7e:6f:3f:d1:65:1c:b1:7a:75:56:ba:86:79:cf:dd:97:
3e:b2:c7:8f:78:ec:2b:da:73:61:7a:20:5b:ab:e9:dd:72:f2:
b4:74:01:14:0c:d0:f0:3d:55:ca:54:f5:9b:4b:14:43:c2:a0:
0b:92:8f:64:ed:45:3c:a1:03:bf:fe:bb:5b:76:24:83:54:25:
e9:75:e6:32:72:7c:ba:72:9e:83:7d:d7:29:9c:87:02:f2:6f:
ea:d8:4e:92:3d:e6:2a:e4:86:da:72:74:24:3a:5c:f5:f8:fc:
2c:3f:09:8e:3e:a9:d9:4a:89:c3:ee:51:66:91:a2:e1:cc:c1:
1e:5a:73:8c:95:9a:c6:2e:44:26:b8:37:c0:fe:d2:54:54:81:
76:6f:08:30:2d:4e:45:0f:09:dd:9d:7f:19:85:a0:2f:8a:67:
6b:1a:4f:8d:54:4e:70:f8:23:66:a0:73:a2:f9:b0:64:dc:87:
a3:d2:79:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:08 2025 by rpki-client