Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51559.roa
File: AS51559.roa (raw, json)
Hash identifier: rd9jZV4iI1rGJjN0eLg5rvTHH9mWYYBw4yHZd0f8Bng=
Subject key identifier: D9:CD:7D:92:9A:B0:4A:EF:26:CC:DB:F1:33:F3:42:8B:C9:50:EA:45
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 221937466A0BD987D0F57288864D473E2C65F38B
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51559.roa
Signing time: Wed 11 Jun 2025 07:41:49 +0000
ROA not before: Wed 11 Jun 2025 07:36:49 +0000
ROA not after: Wed 10 Jun 2026 07:41:49 +0000
asID: 51559
IP address blocks: 217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:19:37:46:6a:0b:d9:87:d0:f5:72:88:86:4d:47:3e:2c:65:f3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 11 07:36:49 2025 GMT
Not After : Jun 10 07:41:49 2026 GMT
Subject: CN=D9CD7D929AB04AEF26CCDBF133F3428BC950EA45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:38:52:f7:d2:0d:c1:18:19:f7:e1:47:dd:ba:
16:66:6c:f6:88:46:be:79:e5:36:7f:3b:15:b5:01:
3e:04:3d:fa:7f:31:1c:35:3b:84:1a:9e:8a:92:6b:
e6:56:73:13:dc:fc:ca:e2:0a:48:e2:23:4b:a0:98:
f3:7c:3b:6c:b8:ff:2b:73:45:0d:2d:7e:5d:66:63:
14:fa:6e:d5:60:a7:0f:60:69:75:6a:75:4b:40:3b:
96:14:e0:cc:e0:ba:d1:3d:1b:f1:31:f7:40:5e:20:
2f:49:1b:27:ad:2d:ce:70:b4:7c:20:8e:e9:69:f3:
32:43:74:b5:59:4a:ed:cd:a6:cb:7b:3b:0e:84:ff:
e5:fd:8a:87:ad:71:7f:ed:08:69:43:31:26:46:be:
b0:43:15:89:0b:f6:35:9e:30:19:8a:8f:8b:25:d3:
dd:90:61:2b:30:55:10:8c:5d:e4:dd:b6:a8:c4:b0:
43:1f:a4:fe:b8:4f:af:6c:54:8d:74:59:37:8d:90:
21:55:2f:62:ec:d1:02:03:7b:da:9a:ee:21:19:3b:
39:55:b1:36:8f:2f:7e:5d:9d:d9:46:e2:c5:f6:e4:
65:2a:cc:96:9d:71:da:2a:9f:47:a9:78:65:11:54:
8a:05:a8:22:41:06:32:d0:6e:b6:ff:1c:76:4b:83:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:7D:92:9A:B0:4A:EF:26:CC:DB:F1:33:F3:42:8B:C9:50:EA:45
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:69:aa:81:7b:ae:40:4c:59:e2:ab:e6:8d:a1:c4:be:04:b0:
71:33:53:60:74:6c:58:0b:df:53:3b:a9:7e:c4:93:c9:64:92:
4d:20:15:83:11:4c:1d:78:26:a7:df:c8:74:b5:a5:93:94:15:
b7:45:db:e8:eb:f0:ea:90:14:7c:cc:5f:75:25:4f:d9:f5:7e:
4d:57:17:0b:cb:7c:93:e8:e6:42:88:cc:b2:fe:e9:a4:35:46:
80:3d:91:81:4d:21:a9:f7:8f:0c:8c:30:d6:a9:47:c8:b8:ce:
d7:34:ab:91:bf:78:a4:52:3a:a3:c6:a8:fb:ab:ab:87:8c:db:
a3:aa:34:6b:0d:22:61:a0:3d:7c:d1:07:0f:4a:94:91:37:fb:
25:9a:53:8e:27:4a:7d:fc:39:35:16:39:a2:1b:c0:87:2e:15:
8c:54:1c:a1:63:f4:5e:35:3a:c3:c6:de:ca:77:07:4b:e3:5d:
b2:ac:be:dd:4b:67:ec:c5:46:56:49:27:0f:0e:df:05:d7:65:
55:94:f1:5e:90:6e:d1:64:1c:d6:2c:72:15:dd:16:f6:22:23:
6e:50:28:9a:53:a1:57:b7:88:a0:5b:7f:0e:2a:c3:8d:10:ae:
26:62:4a:f6:0a:ad:0a:b3:13:2b:70:3d:88:5b:28:0a:ae:4f:
8d:8e:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:36:11 2025 by rpki-client