Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4515.roa
File: AS4515.roa (raw, json)
Hash identifier: VF7VXeDuMa7+uC0DiIcKhOg73maz1Hcw0b475fTnHYs=
Subject key identifier: 24:F8:7E:67:E1:43:FB:6C:B5:FB:AC:96:0A:A4:A8:BE:ED:2D:09:9A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1588BFC66C0B7F5BFC2B6E92271C8F45B7018C96
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4515.roa
Signing time: Wed 16 Apr 2025 11:43:50 +0000
ROA not before: Wed 16 Apr 2025 11:38:50 +0000
ROA not after: Wed 15 Apr 2026 11:43:50 +0000
asID: 4515
IP address blocks: 147.79.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:88:bf:c6:6c:0b:7f:5b:fc:2b:6e:92:27:1c:8f:45:b7:01:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 16 11:38:50 2025 GMT
Not After : Apr 15 11:43:50 2026 GMT
Subject: CN=24F87E67E143FB6CB5FBAC960AA4A8BEED2D099A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:e0:ea:99:1d:b2:21:9e:8a:28:34:24:83:
10:d4:ab:63:6f:b5:f3:7b:89:b1:83:f9:57:fa:b8:
a6:af:90:fa:c4:5f:be:6d:82:3b:8e:88:fc:25:96:
93:88:eb:8f:34:2a:e1:8a:76:cc:cb:9c:44:b8:31:
f6:f0:23:82:55:2e:21:eb:e9:02:a9:61:64:fd:28:
9b:3d:5a:97:c6:44:19:8b:f5:c3:61:f4:9f:dc:2f:
b7:14:49:c6:7a:31:8f:27:37:c9:1e:65:70:3a:d1:
df:84:d3:a3:ab:f4:78:b7:4e:c7:53:ae:31:25:18:
a1:b7:f3:75:bc:23:98:09:bd:86:e7:3d:1d:a3:dd:
4f:7b:9b:ee:65:db:6a:eb:6a:d4:7c:f2:6e:6c:48:
09:a6:8c:0b:ac:08:42:d8:c8:11:ee:59:7f:f6:48:
7a:d8:79:af:26:43:f2:f3:c9:89:ea:e1:ce:04:fa:
42:70:ba:31:d7:52:8c:f6:54:a1:0c:22:fa:e5:3f:
f7:dc:d8:fa:5d:7b:7f:f1:83:e0:11:dc:4e:32:ce:
6c:0a:40:5c:16:ef:06:30:21:1e:a8:7d:39:76:e0:
1c:2a:c2:7a:c9:c9:f1:77:5c:cc:27:2a:e1:01:2a:
41:4b:6a:fd:e5:67:37:74:fc:30:8e:1e:94:d8:8e:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:7E:67:E1:43:FB:6C:B5:FB:AC:96:0A:A4:A8:BE:ED:2D:09:9A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.62.0/23
Signature Algorithm: sha256WithRSAEncryption
39:37:ae:66:66:2a:44:e3:25:04:00:7f:d2:81:bf:d2:a7:df:
e8:04:85:84:24:72:ae:68:4a:b7:3d:6f:75:dd:2c:28:1f:1b:
6e:a4:0f:b9:ca:b7:2e:56:88:98:3b:8f:21:3c:5f:2d:bf:0d:
ed:3c:72:78:5a:c8:e6:59:a4:90:b7:6a:71:30:5c:3f:d9:2f:
01:da:13:1b:f5:2c:3e:ea:33:5b:0b:2e:d5:b0:6c:8a:d7:a6:
92:69:62:f5:fd:e0:df:7f:bf:03:ee:09:9c:8e:95:f2:71:9e:
b2:d2:a3:b9:e1:bb:81:a5:d5:29:d3:af:85:97:85:1f:e4:7a:
a0:2d:f6:91:78:8e:16:33:22:45:d5:36:10:76:c8:a6:64:d0:
23:39:ae:d8:c7:e0:b8:f8:ac:24:41:35:79:d5:e6:77:f9:7e:
39:f1:cc:25:75:cd:26:09:00:e6:86:64:c7:65:7c:68:20:fa:
03:a4:cb:fe:47:b3:1f:54:23:6e:11:13:34:48:bf:21:3e:59:
49:ec:d2:e7:2f:70:ab:c8:05:3c:c5:7e:c4:50:e4:24:a0:71:
7a:3d:55:6a:cd:bd:ab:f5:13:e7:27:17:67:09:d2:bc:0d:00:
b4:22:7a:86:6f:2d:3c:87:86:00:91:18:bf:38:41:20:8b:00:
70:c2:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:39:33 2025 by rpki-client