Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS154049.roa
File: AS154049.roa (raw, json)
Hash identifier: 3STjV053Jq6Efm9IELi57xvTQC5vhH8T/swvjgS1B8s=
Subject key identifier: AD:44:F9:B7:D1:0F:F1:89:A5:BB:33:98:7C:15:D2:B2:64:E3:4B:55
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 14E9080D909607B0D48A4D24F234FDABF2C2AD36
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS154049.roa
Signing time: Mon 04 Aug 2025 17:27:00 +0000
ROA not before: Mon 04 Aug 2025 17:22:00 +0000
ROA not after: Mon 03 Aug 2026 17:27:00 +0000
asID: 154049
IP address blocks: 45.152.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e9:08:0d:90:96:07:b0:d4:8a:4d:24:f2:34:fd:ab:f2:c2:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 4 17:22:00 2025 GMT
Not After : Aug 3 17:27:00 2026 GMT
Subject: CN=AD44F9B7D10FF189A5BB33987C15D2B264E34B55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:21:84:d6:e2:10:56:2a:d7:32:94:29:b8:
23:7a:81:61:19:0a:64:1e:98:27:f4:2a:83:16:b1:
5a:02:e4:18:9e:2a:64:06:b0:23:65:6e:5d:68:7c:
24:cd:4a:03:44:db:fb:66:9b:f4:5e:b2:9c:58:dc:
9d:eb:81:c8:d9:b2:6e:34:59:c8:26:83:fd:a7:48:
f0:70:a9:43:0e:77:e4:01:b5:9a:b1:18:6d:41:dd:
ad:d8:aa:0e:3f:51:94:b4:fb:76:a6:3d:d8:09:26:
05:b6:c7:3b:a1:2b:94:85:a7:1c:a7:35:f6:0e:ed:
d8:ec:68:21:c5:5a:75:29:be:83:a1:17:0a:8a:a0:
b4:98:d7:1e:23:55:f4:43:f7:b6:39:a4:09:f4:ba:
7c:7a:cb:a6:2b:40:9a:0d:86:ed:94:a5:5b:36:e7:
c4:3c:15:af:93:0e:0d:39:57:e0:27:d9:39:7b:2d:
f6:4b:fc:f5:75:ff:5f:95:80:7f:69:ef:2e:5f:a2:
3b:a3:a3:5f:9e:14:c5:ae:d8:56:62:c4:3b:5f:d4:
94:ae:7a:59:81:e6:53:d3:15:3e:a8:03:d7:90:7d:
96:be:4a:2c:ff:46:21:05:19:75:24:3e:1b:31:3c:
fe:c4:ec:cb:58:32:3e:62:32:fc:4c:a1:37:53:ec:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:F9:B7:D1:0F:F1:89:A5:BB:33:98:7C:15:D2:B2:64:E3:4B:55
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS154049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.242.0/24
Signature Algorithm: sha256WithRSAEncryption
03:38:89:f6:9f:40:6d:99:8d:58:57:51:8e:a7:21:c2:60:26:
21:9d:04:48:a7:73:e3:9a:91:a6:f2:72:63:df:90:ba:ed:b9:
3d:7e:a0:54:2e:94:46:2e:39:36:fb:64:dd:fd:0e:d1:22:de:
c8:82:ef:bb:7f:07:60:c8:d7:4b:52:0b:4f:34:64:9d:87:98:
c6:ab:b4:ab:01:38:0a:d1:83:a1:5e:54:bf:8f:98:9a:ba:53:
ed:8f:81:ec:b1:55:f6:e5:52:21:e4:1a:0b:9e:cb:85:47:eb:
62:34:5c:59:59:bf:c6:14:8e:9f:0a:fc:70:cb:ae:d6:3b:dc:
7f:df:47:2b:88:80:e2:de:6e:59:34:c9:3a:3e:f1:f6:5d:a0:
dc:15:2b:7a:a5:83:41:fa:a8:33:1d:40:9a:be:8a:71:00:cb:
7a:d9:e6:82:96:76:35:a2:67:a7:63:ea:0b:0a:af:3c:9b:03:
83:5e:49:77:b6:5f:83:cf:0c:6d:37:36:aa:fc:f6:e0:47:ab:
56:6e:b8:ba:1f:f3:84:65:d0:58:f5:9f:e4:f4:c3:1a:48:50:
87:e7:ac:d1:03:e3:db:73:45:f2:94:fd:d8:bb:1b:14:52:1a:
9a:3b:1a:10:91:50:ed:db:59:a2:e7:e6:23:3a:a4:48:de:82:
1b:0e:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:41 2025 by rpki-client