Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: jIW49xIp8anJlUhoz6JlJvUXy60/uQsDz3xep0UP3Cs=
Subject key identifier: EE:6C:1C:1F:9B:E7:A0:C6:A6:E9:4E:1D:89:F6:7F:3E:37:EF:CF:86
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 55A0082DD2BF65D06F7D15B94541DB8CCB5C0B72
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS174.roa
Signing time: Wed 16 Apr 2025 00:01:14 +0000
ROA not before: Tue 15 Apr 2025 23:56:14 +0000
ROA not after: Wed 15 Apr 2026 00:01:14 +0000
asID: 174
IP address blocks: 139.28.32.0/22 maxlen: 22
141.98.48.0/22 maxlen: 22
176.53.157.0/24 maxlen: 24
176.53.159.0/24 maxlen: 24
193.38.44.0/24 maxlen: 24
193.38.45.0/24 maxlen: 24
194.93.48.0/24 maxlen: 24
194.93.49.0/24 maxlen: 24
194.93.50.0/24 maxlen: 24
194.93.51.0/24 maxlen: 24
194.93.61.0/24 maxlen: 24
194.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Apr 2025 22:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a0:08:2d:d2:bf:65:d0:6f:7d:15:b9:45:41:db:8c:cb:5c:0b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 15 23:56:14 2025 GMT
Not After : Apr 15 00:01:14 2026 GMT
Subject: CN=EE6C1C1F9BE7A0C6A6E94E1D89F67F3E37EFCF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:e4:fc:dc:e9:ab:9b:38:53:2c:6a:83:4b:
14:59:b4:c9:a8:eb:23:15:8d:94:30:57:09:0f:6f:
3b:ab:03:6b:bc:f5:c7:a6:40:67:a7:34:cc:e1:11:
68:2d:c8:15:4e:0b:dd:4f:2d:09:4e:55:88:2c:52:
36:a0:56:67:a8:ac:4e:8f:85:cc:15:17:50:79:da:
f1:f0:bc:eb:32:ff:8f:68:cb:15:2a:ad:18:bc:6a:
7d:4f:4e:68:f9:2c:e2:cd:f5:3c:c7:c5:f3:89:aa:
17:47:73:12:c9:5b:59:2a:19:12:0d:0a:da:6d:8c:
2b:34:a8:9b:f8:89:7e:58:84:b3:76:d4:94:4f:f8:
fe:80:a1:a3:0c:4e:5c:0b:a0:8c:eb:a1:81:62:38:
8c:2e:0d:a4:c9:23:7a:60:06:a7:64:ef:54:2e:a5:
1c:7a:2d:35:7b:7f:dd:07:7d:50:a5:af:15:df:6a:
ae:34:af:15:7a:58:2e:3a:56:1e:a3:d3:f0:89:79:
e9:13:59:ea:b1:c3:c5:e4:65:ec:34:6d:a6:ba:36:
52:10:43:8b:83:00:d3:0a:8c:65:81:3e:6b:23:ac:
14:7b:4f:ed:e0:2a:67:a0:e2:bc:c0:07:46:04:0c:
08:b0:e5:d3:79:be:65:b9:75:22:fa:f9:a6:47:2a:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:1C:1F:9B:E7:A0:C6:A6:E9:4E:1D:89:F6:7F:3E:37:EF:CF:86
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.32.0/22
141.98.48.0/22
176.53.157.0/24
176.53.159.0/24
193.38.44.0/23
194.93.48.0/22
194.93.61.0/24
194.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:90:d7:1d:27:c5:08:5d:3a:86:cb:18:bb:0b:6c:26:59:79:
26:b3:85:8d:45:5b:ca:3a:3f:71:50:dc:60:d8:ed:de:b4:cc:
83:53:b0:ec:9d:6c:d6:8e:d2:01:91:a1:a1:07:50:79:f6:65:
ef:43:54:6b:f6:64:8b:3f:d9:7f:fb:bf:6b:72:67:21:51:64:
bd:43:49:b9:a3:b2:d7:e9:cb:13:6f:02:db:c2:0b:40:14:e1:
e3:75:e8:3d:b5:1e:35:14:02:f9:8d:c5:9f:50:31:99:ff:a2:
68:e6:1c:65:ad:ce:01:7d:dd:57:d2:d2:6b:db:5c:ae:25:5c:
89:1c:2f:36:1e:7d:1a:cb:ef:28:96:58:65:7d:f7:67:cf:52:
93:5e:46:fe:4c:91:b6:b6:ac:db:ab:16:22:1a:2e:6a:3b:27:
64:58:4a:bc:f8:db:e8:99:26:5c:32:d7:99:48:19:0b:b5:fa:
a8:41:bc:1d:91:11:ae:42:30:e0:76:1e:ed:75:cc:d8:e7:fc:
9e:fe:53:64:4d:43:82:ab:16:a2:1b:dd:44:34:a2:9c:9c:fb:
9d:60:37:f4:3b:90:50:bd:81:74:f4:04:f4:35:24:68:2e:f6:
c3:cd:12:41:d0:36:d7:d1:af:be:96:6f:ce:35:ed:9b:99:66:
82:24:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:16:03 2025 by rpki-client