Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
File: AS151338.roa (raw, json)
Hash identifier: u8tB+HaePyvOpdZLyZAky4CyJA1umI6Tn64403sG6n4=
Subject key identifier: 30:2D:11:3D:CC:81:EF:02:31:5E:6C:B3:98:52:33:A1:CC:81:FA:07
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5BFE3F80F4083459EDEF02F64E272ACAB0FA4DDE
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
Signing time: Tue 22 Jul 2025 00:01:11 +0000
ROA not before: Mon 21 Jul 2025 23:56:11 +0000
ROA not after: Tue 21 Jul 2026 00:01:11 +0000
asID: 151338
IP address blocks: 141.11.132.0/23 maxlen: 24
141.11.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:fe:3f:80:f4:08:34:59:ed:ef:02:f6:4e:27:2a:ca:b0:fa:4d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 21 23:56:11 2025 GMT
Not After : Jul 21 00:01:11 2026 GMT
Subject: CN=302D113DCC81EF02315E6CB3985233A1CC81FA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:00:e5:72:25:b9:8c:9a:da:24:ac:b1:d4:
f4:83:f8:55:eb:dc:2a:44:be:4b:8d:f5:e9:e3:4c:
58:b3:da:b3:6a:f9:54:e7:2a:08:6a:cd:20:90:a1:
77:c5:7a:82:3d:51:23:6a:0e:58:a4:00:76:eb:2d:
06:d3:76:d5:64:e1:ea:52:2c:43:35:3a:0b:c8:06:
fd:15:18:32:18:17:b3:67:e3:92:3e:a6:67:2d:35:
83:56:73:1c:96:f8:97:61:2a:3e:b5:75:fe:42:1a:
33:ee:55:01:dc:ea:96:a8:f4:81:3c:49:b4:56:f2:
f4:b9:13:bb:07:4c:5e:73:2d:d4:ab:f5:bd:88:7e:
62:b1:a5:ad:d7:e8:07:d2:fb:02:0e:e8:3c:c1:bf:
11:58:27:dc:8a:e6:22:07:7a:c7:e8:2b:71:eb:0f:
09:ba:9c:e4:4c:ed:8a:54:a6:3d:43:4d:0e:51:b9:
0d:0c:b3:5b:c4:04:79:34:91:62:72:51:34:f2:f9:
9f:98:43:98:57:dd:35:66:e5:b3:b9:76:55:f6:07:
a7:0c:f1:c7:dd:85:f6:65:ca:dc:3d:49:e3:73:4d:
73:9f:04:98:ab:1f:ac:c0:df:e7:66:a5:f2:04:1e:
a4:d8:8c:1e:87:c0:38:71:a6:42:8e:72:b3:48:aa:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:11:3D:CC:81:EF:02:31:5E:6C:B3:98:52:33:A1:CC:81:FA:07
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.132.0/23
141.11.238.0/23
Signature Algorithm: sha256WithRSAEncryption
31:58:e4:06:63:62:aa:3e:4c:7a:8a:af:51:17:9f:30:6a:bd:
45:36:29:b5:34:41:fe:4d:d2:e6:69:f1:15:16:a9:60:33:de:
4b:97:8f:80:a1:37:32:5d:e6:16:89:c3:8d:19:bf:fe:f5:b5:
cc:43:bd:9e:70:cb:53:8e:0e:af:c0:5f:cd:2b:f7:0b:53:11:
ff:fa:89:3f:0b:27:df:cf:9e:7d:fe:c6:27:1f:a7:9a:2c:63:
99:80:e0:78:e4:c8:7d:f0:ac:2b:04:97:9e:86:0f:91:52:6d:
99:c0:0e:ef:09:7b:f0:eb:9c:60:36:82:68:5f:be:dd:f4:88:
fb:12:ab:13:db:5a:bf:7d:1e:de:f2:1c:9a:15:22:2e:7e:61:
88:27:89:a7:50:9e:4c:f1:15:23:17:57:bf:f6:4c:9d:11:54:
5d:12:a2:71:fd:76:07:ef:39:7e:d0:6a:d4:60:07:57:78:d2:
2b:c0:9e:14:26:36:fc:bd:fc:23:e2:64:4f:8c:7a:f9:d5:d2:
07:c6:cf:cc:f4:64:54:1e:80:b6:d4:a1:2a:40:8f:ca:3d:2f:
ff:11:4e:1a:ad:fd:55:36:4d:6b:2f:bb:87:9d:58:d9:21:3c:
48:ff:c5:9c:c8:83:fc:24:66:b6:10:b9:23:21:4d:3e:c1:04:
ea:9d:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:01 2025 by rpki-client