Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: mH/lugWzFXtT3VyF8JBIGoJpb2r7dC6EySQLJnYjjJo=
Subject key identifier: EB:58:EF:7D:59:84:35:81:25:D0:96:09:3B:93:AB:49:38:43:71:67
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 289C880075334D900A33BDB54D851CEBEE98C414
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS22427.roa
Signing time: Tue 22 Apr 2025 02:01:44 +0000
ROA not before: Tue 22 Apr 2025 01:56:44 +0000
ROA not after: Tue 21 Apr 2026 02:01:44 +0000
asID: 22427
IP address blocks: 193.38.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 16:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:9c:88:00:75:33:4d:90:0a:33:bd:b5:4d:85:1c:eb:ee:98:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 22 01:56:44 2025 GMT
Not After : Apr 21 02:01:44 2026 GMT
Subject: CN=EB58EF7D5984358125D096093B93AB4938437167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:eb:08:0e:db:31:86:e7:01:5b:f7:1a:1e:
11:a6:67:3a:ca:32:71:06:43:1b:13:96:14:d5:2a:
d9:fc:cb:4c:2b:89:4f:be:0f:05:1f:71:68:06:04:
90:15:a2:ca:7c:57:8d:91:73:6c:51:9a:11:74:f3:
36:74:55:24:59:79:05:03:1f:cb:66:ae:8e:97:f4:
e8:f5:40:9d:69:10:25:69:3d:b5:b7:1d:f3:c3:ca:
af:43:6d:b2:ba:95:6b:3b:15:2b:f3:dc:5e:eb:85:
97:ba:a9:18:fc:1c:86:aa:0f:b4:8b:45:b5:79:9e:
f4:29:13:e3:98:f3:34:c4:95:90:b0:06:a9:38:c2:
1d:ae:0c:50:f4:e8:31:4d:19:f6:81:8e:2d:34:b5:
21:3e:e1:36:9a:b2:9c:7b:44:6c:d8:35:89:ed:17:
65:80:36:cb:c2:2d:1c:52:2e:88:fd:90:67:38:a8:
1d:d0:05:13:92:bd:89:42:92:ba:80:46:e5:e1:ed:
da:af:2a:e4:13:d7:40:28:47:af:62:dd:12:42:8f:
7b:50:66:74:bf:3c:3d:8f:86:75:12:31:9b:e1:4d:
94:28:fa:f6:1d:29:61:70:ae:d7:66:de:fe:ac:a3:
3d:94:7f:35:bc:9f:2e:64:ac:43:9e:94:69:cf:6c:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:EF:7D:59:84:35:81:25:D0:96:09:3B:93:AB:49:38:43:71:67
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.47.0/24
Signature Algorithm: sha256WithRSAEncryption
30:91:fa:d4:35:e2:c3:10:b4:14:49:31:20:28:10:9c:47:db:
59:15:08:69:bb:5e:9a:bc:90:71:01:e7:63:d2:96:d3:b5:ed:
3e:39:8e:99:ef:88:6d:4c:d1:39:5f:0c:99:71:5f:af:9b:56:
1a:e3:e1:b1:af:eb:9a:b4:fa:a3:41:9d:0c:10:67:21:6f:79:
14:91:0f:f8:8c:d5:0d:c9:74:c0:2f:54:5d:4c:cc:24:09:15:
83:21:19:57:b3:df:c2:69:96:2e:4a:4f:e4:e5:27:aa:ef:68:
8e:b9:d4:eb:2f:96:8b:78:a1:19:ec:1c:79:d2:61:86:9b:2b:
27:1b:8b:35:ea:50:98:92:4c:bb:aa:81:6e:e8:01:52:4e:cb:
4e:4d:8f:4f:80:e9:18:6b:4b:07:3a:34:63:15:42:57:45:3a:
78:23:88:e7:b2:1a:35:cd:a0:b1:e4:03:d3:b9:3b:79:9b:7a:
80:e2:b6:ec:04:44:47:36:c4:05:92:88:f7:d3:d9:24:9e:d2:
a8:0f:6b:ed:3b:b7:92:f0:36:2e:4f:e8:98:95:5e:4a:1c:9a:
5a:f6:40:36:81:91:aa:47:17:5d:23:ce:bd:7d:e4:66:3e:8f:
66:8c:8f:db:70:ac:f6:0f:57:f7:30:cb:e6:c9:21:7a:b7:a3:
c3:db:02:fb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUKJyIAHUzTZAKM721TYUc6+6YxBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTA0MjIwMTU2NDRaFw0yNjA0MjEwMjAxNDRaMDMxMTAvBgNV
BAMTKEVCNThFRjdENTk4NDM1ODEyNUQwOTYwOTNCOTNBQjQ5Mzg0MzcxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTl+sIDtsxhucBW/caHhGmZzrK
MnEGQxsTlhTVKtn8y0wriU++DwUfcWgGBJAVosp8V42Rc2xRmhF08zZ0VSRZeQUD
H8tmro6X9Oj1QJ1pECVpPbW3HfPDyq9DbbK6lWs7FSvz3F7rhZe6qRj8HIaqD7SL
RbV5nvQpE+OY8zTElZCwBqk4wh2uDFD06DFNGfaBji00tSE+4Taaspx7RGzYNYnt
F2WANsvCLRxSLoj9kGc4qB3QBROSvYlCkrqARuXh7dqvKuQT10AoR69i3RJCj3tQ
ZnS/PD2PhnUSMZvhTZQo+vYdKWFwrtdm3v6soz2UfzW8ny5krEOelGnPbLcNAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU61jvfVmENYEl0JYJO5OrSThDcWcwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjI0Mjcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBJi8w
DQYJKoZIhvcNAQELBQADggEBADCR+tQ14sMQtBRJMSAoEJxH21kVCGm7Xpq8kHEB
52PSltO17T45jpnviG1M0TlfDJlxX6+bVhrj4bGv65q0+qNBnQwQZyFveRSRD/iM
1Q3JdMAvVF1MzCQJFYMhGVez38Jpli5KT+TlJ6rvaI651Osvlot4oRnsHHnSYYab
KycbizXqUJiSTLuqgW7oAVJOy05Nj0+A6RhrSwc6NGMVQldFOngjiOeyGjXNoLHk
A9O5O3mbeoDituwEREc2xAWSiPfT2SSe0qgPa+07t5LwNi5P6JiVXkocmlr2QDaB
kapHF10jzr195GY+j2aMj9twrPYPV/cwy+bJIXq3o8PbAvs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:29:49 2025 by rpki-client