Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210661.roa
File: AS210661.roa (raw, json)
Hash identifier: SZoGIa6OVo6LcwnwfI4hbkTJWx7HlUUyWjmFCJ6FWds=
Subject key identifier: D1:55:73:CA:2D:F3:5D:30:60:D5:1F:09:4D:4F:FC:8B:17:8E:05:70
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 29D4B5CEF715EE2FCAB1C2AF31296892654AD141
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210661.roa
Signing time: Sun 13 Apr 2025 16:51:59 +0000
ROA not before: Sun 13 Apr 2025 16:46:59 +0000
ROA not after: Sun 12 Apr 2026 16:51:59 +0000
asID: 210661
IP address blocks: 150.241.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d4:b5:ce:f7:15:ee:2f:ca:b1:c2:af:31:29:68:92:65:4a:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 13 16:46:59 2025 GMT
Not After : Apr 12 16:51:59 2026 GMT
Subject: CN=D15573CA2DF35D3060D51F094D4FFC8B178E0570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:83:fb:0f:2d:41:27:f1:8e:e6:e3:1b:82:ac:
52:91:66:ae:b6:04:d7:f8:33:c9:52:07:e6:ed:9c:
80:d9:34:22:f7:7f:5b:b7:cd:9b:f5:be:b8:ae:f7:
e4:dc:65:44:11:02:a1:17:5f:10:5b:ae:e3:dd:b3:
87:fb:09:e0:a3:b2:13:57:e0:4f:60:95:74:e9:14:
9a:59:a4:ef:a1:36:8e:a5:80:70:98:6a:1f:11:29:
6a:5c:f5:f0:4d:1f:72:d1:4a:cf:91:18:b1:2c:b1:
ba:12:fd:8f:8f:43:31:0e:83:07:d3:01:d6:09:96:
1c:a3:a1:42:dc:ba:d1:3f:97:c6:cc:2e:5a:f7:66:
e1:6f:e3:c4:26:8c:8e:38:b7:dd:00:51:31:30:72:
dd:80:c4:ed:1e:03:ff:dd:4e:b1:ea:90:56:3e:88:
e7:a4:a8:4f:07:4d:ac:33:74:35:93:10:90:db:43:
85:c8:2d:90:a3:bd:6e:e7:33:59:fa:a5:4c:27:87:
b8:4b:46:35:39:14:5b:1b:c2:cb:0b:2c:ae:81:58:
90:cf:34:b3:30:c9:64:5e:5b:f0:93:aa:dc:11:0d:
53:50:81:b5:96:dc:6e:3a:60:e9:e5:18:49:67:a0:
8e:65:6d:d4:0d:3b:3c:d6:47:35:a7:79:9e:ca:17:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:55:73:CA:2D:F3:5D:30:60:D5:1F:09:4D:4F:FC:8B:17:8E:05:70
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.253.0/24
Signature Algorithm: sha256WithRSAEncryption
45:03:07:93:fb:c9:a9:39:43:6f:6d:f9:cb:55:72:7d:ed:55:
34:89:3c:57:00:0a:9b:29:86:8f:92:60:c1:97:dd:2c:10:9b:
06:e6:1c:9a:e7:21:01:9e:86:12:c7:2e:da:97:7f:4c:1f:df:
a2:2f:54:f8:b7:b8:a8:c4:e3:22:3f:11:7e:b7:d3:8e:19:98:
a2:85:dc:f0:13:cb:3f:02:56:83:54:52:c4:94:c2:ea:e2:dd:
b2:52:58:a1:b9:e9:15:02:03:4b:da:6a:d7:f0:2d:de:82:75:
85:14:20:0f:d8:53:2b:42:6a:08:41:27:71:73:f1:5b:0e:01:
4a:45:e5:aa:10:89:b5:00:b7:77:5d:29:12:8e:31:8f:3c:75:
36:e6:47:40:a2:3e:23:18:3d:a7:2f:26:d4:37:31:af:70:82:
59:1d:dc:29:97:c7:24:4c:1f:ca:80:f0:b6:41:64:a9:0f:ef:
75:66:f4:56:ef:df:48:b2:ad:41:d2:dc:35:c6:f8:69:85:00:
5e:68:8d:9f:69:14:d2:93:a6:3c:33:30:2d:d7:f3:ab:3d:da:
7b:2d:31:16:2f:e6:e5:e9:27:50:db:c1:33:cf:a1:af:fd:25:
d2:a1:46:79:f4:79:dd:ba:d6:c5:74:38:86:c1:f2:cb:d5:2a:
50:7b:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:10 2025 by rpki-client