Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: gLLJbTstwt/JwZLOLvUSpVPckIAPf64JCAqJyszaJRQ=
Subject key identifier: 47:FC:38:88:65:A8:8A:8A:2B:96:E0:22:A2:4D:BF:3E:9C:1E:C1:74
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 695C977A1C77F60BD5BE66468A1FE1D5CA2A8647
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215304.roa
Signing time: Wed 30 Jul 2025 05:03:43 +0000
ROA not before: Wed 30 Jul 2025 04:58:43 +0000
ROA not after: Wed 29 Jul 2026 05:03:43 +0000
asID: 215304
IP address blocks: 96.62.115.0/24 maxlen: 24
96.62.152.0/24 maxlen: 24
143.14.1.0/24 maxlen: 24
148.135.181.0/24 maxlen: 24
155.117.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5c:97:7a:1c:77:f6:0b:d5:be:66:46:8a:1f:e1:d5:ca:2a:86:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 30 04:58:43 2025 GMT
Not After : Jul 29 05:03:43 2026 GMT
Subject: CN=47FC388865A88A8A2B96E022A24DBF3E9C1EC174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:67:f8:80:c8:e1:5d:1c:ab:3a:51:6f:6d:
3e:db:39:b8:07:91:0e:61:24:3a:d9:79:a9:55:e7:
f5:d5:76:5d:d1:a5:0d:e8:34:55:24:41:4b:f5:37:
0f:6a:9f:09:81:aa:a2:0b:e1:78:54:d5:a3:d7:80:
17:86:8c:df:46:d3:de:d3:99:ef:54:0d:24:14:24:
3e:9f:3a:19:34:da:fc:c6:e1:18:cc:26:47:a6:76:
c0:0f:1c:b1:ed:3a:67:64:42:09:93:5b:57:b6:76:
bb:3f:fa:4d:a3:ed:54:6b:3f:f0:28:2d:bf:04:34:
0c:c6:de:5f:4e:1f:24:5e:52:73:a0:4a:ae:1a:29:
58:82:f4:8e:85:c5:45:ca:b2:21:04:a2:5b:a8:38:
00:34:c0:6e:7a:49:96:79:4c:ec:f3:56:2f:fa:80:
10:72:fc:5c:1c:64:a3:a4:5e:4e:d3:cc:bb:d6:1d:
3e:34:c6:62:37:d7:ba:09:59:15:2a:54:ad:01:92:
06:77:1c:59:31:9b:40:a9:16:c1:d9:31:7d:bd:0f:
57:35:f8:e9:dd:f1:bb:f4:66:c3:07:d2:1a:52:dd:
5f:5e:db:93:5a:7b:6c:15:64:5b:77:91:3e:7b:3d:
3a:23:48:16:83:84:14:58:cf:f4:9a:74:58:41:ce:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:38:88:65:A8:8A:8A:2B:96:E0:22:A2:4D:BF:3E:9C:1E:C1:74
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.115.0/24
96.62.152.0/24
143.14.1.0/24
148.135.181.0/24
155.117.201.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:97:1d:41:af:78:2a:9c:7e:bf:3c:a0:52:14:82:0a:4a:28:
b7:05:c5:f1:00:89:02:c1:b2:cc:7c:5e:93:12:94:92:33:7b:
dd:8d:20:67:4c:5e:66:f9:63:68:39:6a:00:a3:c6:d6:c1:a4:
32:4b:b2:e8:50:9c:36:0c:8b:af:4e:56:fb:4a:c3:7b:da:a5:
93:1c:f5:ff:a1:a8:d6:96:6a:06:97:98:50:96:ba:a6:1f:ac:
e9:9a:e1:92:d6:8f:0a:ad:42:a6:85:88:4a:91:d7:56:0d:8d:
53:85:88:ff:38:a6:77:f0:95:44:8b:6f:75:ed:cf:87:3b:6f:
5f:2c:9a:11:16:f4:3f:92:38:fb:48:f0:81:b3:40:26:30:29:
80:3d:3f:59:49:de:3a:3d:55:60:ee:00:eb:ca:3a:a9:78:eb:
6b:0b:7e:eb:d2:0b:3d:46:46:92:48:3b:1e:83:1d:7d:7c:44:
6c:f9:75:a4:94:e7:12:63:ea:b5:47:04:93:2d:71:0e:c8:64:
82:47:fe:6d:81:a9:ee:e0:3b:a4:cc:47:83:e4:dc:ac:a1:88:
00:12:a0:56:59:23:a8:c0:03:6d:ab:1d:39:db:58:9c:0b:48:
d0:6d:50:d2:0b:3d:07:1c:0a:fa:e4:c2:26:fe:df:b1:6b:5c:
6a:63:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:14 2025 by rpki-client