Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30823.roa
File: AS30823.roa (raw, json)
Hash identifier: VxI3HLB5vAHNqLzeTpjcuij5rwOm+XZxb0iNf4s9nqc=
Subject key identifier: A2:39:09:8E:AB:79:45:1D:4D:8C:A5:AC:E7:86:76:D1:6B:51:8A:4B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 02148CAA8FA90C98C2BFD6975966977BC938FA72
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30823.roa
Signing time: Thu 05 Jun 2025 15:54:08 +0000
ROA not before: Thu 05 Jun 2025 15:49:08 +0000
ROA not after: Thu 04 Jun 2026 15:54:08 +0000
asID: 30823
IP address blocks: 45.137.116.0/24 maxlen: 24
45.137.117.0/24 maxlen: 24
45.137.118.0/24 maxlen: 24
179.61.237.0/24 maxlen: 24
181.214.240.0/24 maxlen: 24
191.101.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:14:8c:aa:8f:a9:0c:98:c2:bf:d6:97:59:66:97:7b:c9:38:fa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 5 15:49:08 2025 GMT
Not After : Jun 4 15:54:08 2026 GMT
Subject: CN=A239098EAB79451D4D8CA5ACE78676D16B518A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:58:55:5b:63:de:41:12:a6:ef:04:b7:18:
49:f5:23:f9:47:41:11:f0:2d:e4:47:c6:66:c6:e4:
1d:5f:43:66:74:d3:8a:2d:25:91:d1:b4:ad:20:4c:
4b:83:a2:0a:c0:a2:30:ae:d2:65:a9:68:f3:c2:fb:
85:3d:fb:97:fc:c7:0d:a6:48:33:ce:0a:5e:fc:0a:
f2:d9:b4:bb:c4:f0:a8:9c:f2:87:b0:ed:cf:bf:d5:
66:c1:30:c6:47:41:7d:6a:0c:9d:71:16:2f:bd:a7:
ac:ad:de:81:86:d1:bd:05:33:f7:97:e5:79:a4:6a:
4d:ef:7a:10:b6:28:83:ef:19:98:ca:5a:af:c3:e7:
e2:79:4c:be:32:f7:3e:e4:10:46:19:83:09:86:81:
8f:91:54:73:10:39:fd:e9:c6:04:bd:37:56:01:b9:
12:07:65:f1:4d:e9:8b:07:c8:82:20:e5:95:ad:7b:
8a:ca:2c:7b:55:1f:27:f6:c2:5f:76:71:12:a3:2f:
f5:b7:59:9d:6a:7c:00:76:c0:ed:3f:e2:3b:92:fb:
ee:2d:f7:29:56:50:de:c0:f2:20:7c:72:bf:6f:32:
c1:18:fd:b7:29:3f:bb:32:51:46:34:2c:04:f4:d5:
e5:7c:df:f4:55:88:0d:f9:a8:f7:b9:59:9c:cd:06:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:09:8E:AB:79:45:1D:4D:8C:A5:AC:E7:86:76:D1:6B:51:8A:4B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.116.0-45.137.118.255
179.61.237.0/24
181.214.240.0/24
191.101.206.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5b:6b:8d:44:fc:1c:03:db:0f:58:51:d9:72:24:53:65:88:
b6:de:c4:40:b1:e0:16:a6:df:1c:01:91:49:0b:f3:6f:2b:a8:
fc:60:8f:0f:f8:5e:9e:09:d4:96:01:78:0d:77:ab:3a:34:6c:
d8:90:fe:5c:09:d0:9b:70:92:74:81:e0:5b:07:c2:00:32:a7:
14:69:c3:2b:93:1f:48:25:47:3a:be:0c:0f:d0:97:01:4a:0e:
74:e2:99:a4:20:84:12:c1:25:16:dd:0d:92:41:8a:b4:79:24:
98:ff:92:46:43:3f:cf:ae:5c:b7:46:24:d7:89:37:a0:88:f4:
c8:ba:5a:97:cd:c2:56:86:da:4d:5d:55:38:fd:36:1f:66:62:
07:1b:d4:6d:40:b0:2b:de:a3:0d:81:a4:98:bd:66:f7:d1:53:
10:6b:40:e0:15:d0:54:16:19:00:1b:af:7f:6a:69:ce:e5:31:
44:62:c0:54:be:d9:af:8c:7c:65:1c:83:93:a1:61:a0:ac:5a:
60:3b:16:9c:a6:a3:a6:25:60:a0:14:64:8e:84:84:45:33:5f:
cf:ef:ba:4a:45:6c:e3:20:43:f4:a2:2d:33:6f:47:e3:a0:07:
69:0d:82:a6:35:ac:f0:5b:80:c6:9e:2e:1e:ca:be:6b:2b:e8:
db:c8:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:30:46 2025 by rpki-client