Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30823.roa
File: AS30823.roa (raw, json)
Hash identifier: a73CHgPF2l2xLdKhNO/FJKKKuSFzKkVuOalMqvYJLhY=
Subject key identifier: 9F:10:F6:01:E1:5A:0B:C0:62:E5:69:E5:DD:1F:67:F7:DE:EC:4F:93
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 11EDEB77131F2670D95DC0E96ED3BFB82A7DAF4B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30823.roa
Signing time: Sat 02 Aug 2025 00:00:42 +0000
ROA not before: Fri 01 Aug 2025 23:55:42 +0000
ROA not after: Sat 01 Aug 2026 00:00:42 +0000
asID: 30823
IP address blocks: 45.137.116.0/24 maxlen: 24
45.137.117.0/24 maxlen: 24
45.137.118.0/24 maxlen: 24
179.61.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ed:eb:77:13:1f:26:70:d9:5d:c0:e9:6e:d3:bf:b8:2a:7d:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 1 23:55:42 2025 GMT
Not After : Aug 1 00:00:42 2026 GMT
Subject: CN=9F10F601E15A0BC062E569E5DD1F67F7DEEC4F93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:0a:7a:ca:62:34:3e:1d:ae:ec:0a:7d:fc:
f2:c8:01:2d:7c:62:dd:53:ce:ee:8e:d0:6e:92:87:
c4:41:a2:45:36:2c:66:0e:05:f2:60:05:85:70:6e:
ed:ca:74:f4:f4:2a:17:fb:fa:86:ff:a2:a2:6f:42:
5c:8f:88:c7:a8:ea:14:7b:b7:84:20:3b:b4:53:54:
f9:bb:98:41:1b:b7:f2:e4:ef:70:1c:60:d9:df:6e:
82:6f:a9:14:3e:31:12:3c:a7:77:28:8b:fd:39:ca:
99:b8:6a:b1:4c:e4:36:00:73:85:5d:eb:20:0c:52:
09:16:06:da:01:f9:15:87:ea:d6:8b:cc:23:1e:ad:
31:83:95:4f:8f:b5:14:8a:30:af:9b:eb:02:47:85:
7c:e2:ea:83:02:89:97:3c:e1:4e:59:40:99:96:28:
b7:c5:bf:d2:3f:32:c1:79:84:91:d0:40:ff:e3:ba:
17:a3:62:bf:0d:d8:bc:65:c7:3b:e2:27:54:d1:72:
62:d7:c0:05:4c:59:09:7a:af:ae:f5:01:be:44:42:
7e:39:49:e4:9d:84:6a:28:7f:3b:80:45:d5:da:d1:
e2:16:67:cc:64:aa:51:58:10:c1:5c:df:e3:40:a0:
1a:26:24:2c:a9:3d:a6:fe:d2:b6:7c:1f:68:a0:6a:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:F6:01:E1:5A:0B:C0:62:E5:69:E5:DD:1F:67:F7:DE:EC:4F:93
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.116.0-45.137.118.255
179.61.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:23:f3:0e:61:8e:3a:6f:e8:bf:78:4f:e3:56:54:7a:3b:b5:
0b:b4:15:d5:00:d9:15:07:28:04:f1:84:3b:be:c0:46:99:66:
b8:a1:22:e1:8b:ea:89:f2:f5:29:58:af:8d:e8:ed:34:ec:3d:
c8:a1:b9:fe:61:44:03:7a:aa:ad:c6:43:30:a9:9a:90:12:63:
69:6e:a1:dc:89:18:fc:f9:b6:e9:a9:27:c7:55:01:33:a6:ca:
f7:49:de:0f:08:f6:93:40:68:95:77:a4:de:0a:21:fa:2c:3e:
03:49:a8:0d:11:6e:28:84:49:2f:f2:8a:21:02:e6:b6:16:5e:
cb:12:b0:30:03:ed:58:35:6f:5a:22:13:13:80:fa:0f:95:dc:
b1:1a:aa:68:6e:c8:cb:d3:eb:ab:a6:54:23:05:ef:0e:b4:36:
68:80:93:fa:f1:17:47:4d:c5:15:09:d3:d6:f9:f4:ac:dd:89:
55:f0:15:84:af:99:e2:41:c6:da:63:31:6b:3e:c2:d8:e2:63:
a2:ce:32:52:30:08:56:d4:d4:58:2a:ec:85:2c:11:4f:bc:a5:
7d:4e:6a:25:2e:eb:ac:ed:b6:33:36:75:d3:02:b8:69:45:80:
e4:02:d6:74:dd:0d:ca:39:38:9d:cc:55:c3:8e:56:84:ed:7c:
ec:40:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:07 2025 by rpki-client