Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132978.roa
File: AS132978.roa (raw, json)
Hash identifier: X8XvFWfo40YVX4mhiOm2NLF8gRp9kZp4CpMf7/fBsic=
Subject key identifier: 4E:CA:65:46:47:67:E6:69:DF:B1:25:39:8F:13:03:31:1F:B6:EF:BD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3DB126FDED0C22617110455BD4DF669CE8B5B482
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132978.roa
Signing time: Fri 04 Apr 2025 12:24:02 +0000
ROA not before: Fri 04 Apr 2025 12:19:02 +0000
ROA not after: Fri 03 Apr 2026 12:24:02 +0000
asID: 132978
IP address blocks: 103.141.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b1:26:fd:ed:0c:22:61:71:10:45:5b:d4:df:66:9c:e8:b5:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 4 12:19:02 2025 GMT
Not After : Apr 3 12:24:02 2026 GMT
Subject: CN=4ECA65464767E669DFB125398F1303311FB6EFBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:03:50:1d:f6:1d:63:87:24:6d:f1:29:95:
49:30:ac:32:45:f7:24:a5:05:f2:03:46:1c:7a:c8:
43:50:ad:90:a6:e2:aa:ee:d0:7d:7e:45:e8:26:d6:
7c:89:f4:a1:3b:1e:c9:56:42:e1:1e:87:31:9e:a1:
58:63:d5:4f:4c:07:95:02:a8:bd:11:94:50:20:1b:
28:7d:dd:25:14:c2:0f:66:c3:bd:5d:08:de:7d:f6:
5d:16:c7:21:d0:a9:43:8d:14:81:eb:ab:09:7f:a1:
7b:3e:4c:eb:38:23:dc:b3:08:21:6a:d7:12:f0:93:
d8:ba:c9:89:3d:d6:ca:19:2b:40:85:db:24:8d:43:
1e:91:cd:2c:11:b8:82:99:4c:9a:f2:9f:34:f4:eb:
8a:be:d8:f5:35:f8:23:e0:23:8b:79:b8:1a:91:53:
cf:5b:b1:88:15:e7:71:80:ae:07:6a:21:89:d4:9a:
20:4a:b9:5d:61:ea:a7:58:c6:b8:6e:f0:25:ea:8b:
48:53:ca:f7:38:7f:74:73:2c:57:62:c3:44:f1:0f:
d5:a5:75:06:ac:d8:94:14:be:1f:1d:a3:99:eb:a2:
d4:88:5d:5e:44:2a:d7:bd:7d:22:1a:8d:74:66:d3:
ab:44:62:81:e4:11:d0:73:01:d5:b4:56:87:22:1e:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CA:65:46:47:67:E6:69:DF:B1:25:39:8F:13:03:31:1F:B6:EF:BD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132978.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:78:b5:6b:db:6d:64:16:3c:92:03:95:42:ba:b2:d8:a5:b9:
c6:ce:24:08:4e:1b:0d:6a:0c:99:4a:6d:96:c7:e9:48:5c:da:
1a:25:66:45:e5:cb:8c:26:f9:7a:b7:a4:b8:fc:66:be:c0:64:
07:47:a2:b9:2f:b4:18:57:3d:78:98:7e:6e:73:7e:e5:39:23:
44:e8:1b:8d:9c:d0:9f:55:96:04:12:69:5d:a8:a0:83:e7:d6:
fd:05:37:26:f8:77:c5:fc:bd:40:1d:98:c3:64:90:09:c2:37:
05:b5:70:f7:8d:7c:a1:b5:af:72:5f:dd:e5:78:48:53:3b:91:
12:27:f6:fd:27:56:da:ce:96:ad:03:15:1f:c2:40:89:0b:a2:
4f:a5:28:f6:9d:f0:b2:22:08:0d:87:24:40:f4:47:87:a8:fe:
de:cd:6f:57:b3:da:4b:99:c4:cb:5f:50:cd:df:60:62:61:ad:
f8:c4:ab:fe:73:19:3b:82:c9:97:f8:e0:54:95:7a:42:8e:fe:
ed:48:9b:61:0e:74:6c:32:9a:1a:74:62:ee:23:97:ec:77:c1:
77:b7:27:19:7a:94:64:34:68:27:1b:3f:ee:b1:78:aa:8e:9a:
c1:59:22:59:69:f4:e0:59:d9:41:11:03:c7:ad:96:cf:43:fe:
24:0e:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:39:25 2025 by rpki-client