Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS136557.roa
File: AS136557.roa (raw, json)
Hash identifier: ozqOYPNltCKNklJVEnDia05Cn9XKtr0dPFMimACvwzM=
Subject key identifier: FC:E1:4A:BB:6B:73:92:1F:73:6D:41:E7:F0:4F:9F:6C:D5:FC:F8:FC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 16FB943111478F20AB51B98C321ED470DD7415E0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS136557.roa
Signing time: Wed 14 May 2025 10:54:08 +0000
ROA not before: Wed 14 May 2025 10:49:08 +0000
ROA not after: Wed 13 May 2026 10:54:08 +0000
asID: 136557
IP address blocks: 45.135.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fb:94:31:11:47:8f:20:ab:51:b9:8c:32:1e:d4:70:dd:74:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 14 10:49:08 2025 GMT
Not After : May 13 10:54:08 2026 GMT
Subject: CN=FCE14ABB6B73921F736D41E7F04F9F6CD5FCF8FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:77:97:69:42:c5:89:a4:c2:ac:60:00:d9:
34:33:ab:d0:73:93:7c:4e:49:83:2b:57:58:ac:2c:
73:6f:b8:74:56:3a:a6:a1:fa:c2:74:83:0a:d8:58:
be:18:5e:ba:ed:bf:23:53:92:f1:3f:c0:99:03:82:
4b:52:51:bc:00:15:07:db:20:1b:b9:f6:1a:80:0f:
09:4d:b9:76:bd:72:09:2f:c8:04:50:09:21:3a:ff:
fc:37:e1:49:cb:9d:e9:d1:a9:d9:07:ee:79:a9:29:
7c:e9:2b:9e:f6:4d:e5:2d:c0:5e:17:01:78:a7:2f:
25:11:93:d5:52:e9:2b:53:b4:6b:d9:fa:50:ea:fc:
a4:bf:8d:e9:5d:4d:62:3c:22:21:be:2f:b9:97:7e:
2b:c6:51:ff:5d:f6:55:59:9f:01:a4:8b:e8:fe:b6:
3f:14:32:e7:94:0a:f1:6e:68:e4:8c:df:ab:36:ed:
90:35:03:3a:0e:d5:49:8a:fe:55:b0:25:9b:b4:40:
ad:c5:17:74:80:2f:58:0b:f5:3d:9e:12:ff:65:e0:
a5:e2:bd:01:44:7e:26:6b:f4:df:31:85:af:31:14:
9c:64:a0:25:b1:55:1d:b8:f0:e6:c8:ae:60:86:8c:
82:a3:2f:55:22:14:d6:85:cc:0a:08:bb:e8:22:f2:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:4A:BB:6B:73:92:1F:73:6D:41:E7:F0:4F:9F:6C:D5:FC:F8:FC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS136557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:38:f7:bd:99:b6:8d:e1:48:15:96:43:f3:59:46:86:4f:2a:
f2:e5:ea:1b:38:2d:78:7f:a7:65:e1:36:b0:b2:fd:be:2c:78:
5d:39:8a:d4:eb:6b:42:64:c2:f4:5d:d9:e6:d6:11:e3:28:54:
66:14:83:0e:80:cb:5a:64:c6:dc:25:5c:39:96:0f:7d:d0:2a:
43:5e:db:45:2a:7f:88:52:11:f4:ad:b9:35:25:fe:fe:b0:b0:
a5:f8:5d:5f:05:4c:93:cf:e5:e1:ba:58:d8:6e:75:68:84:14:
39:d4:1b:8a:42:9f:d9:70:12:09:0e:ad:08:de:10:1c:d6:e7:
d1:10:a1:06:b8:42:af:c0:c8:20:ed:4c:d3:39:bd:18:2e:e2:
5f:50:3c:7f:10:8d:ea:31:46:68:ff:41:df:e6:0d:c4:ad:a7:
ec:93:bf:b2:c2:9c:48:84:82:9a:b5:6e:9a:5a:79:89:97:62:
e5:6b:88:fc:9d:57:42:91:4b:dd:07:4e:d1:32:11:85:fb:08:
7e:84:c0:88:6c:41:89:73:b6:7e:26:0a:8e:e2:a3:44:a1:7c:
f9:7f:85:13:6c:05:72:11:6e:11:53:e0:a1:11:f8:2f:7e:a4:
c9:2d:1a:91:35:13:40:59:36:a5:5c:a9:40:96:35:fa:a5:58:
25:72:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:39:38 2025 by rpki-client