Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS154049.roa
File: AS154049.roa (raw, json)
Hash identifier: n+4Nhk/I8Y9jS8aTNz0KCdHZ1Z1JqzFnOrJmXf6awm0=
Subject key identifier: E8:A5:6E:9D:C5:0D:1B:D7:0B:C2:A4:04:CC:D4:54:55:3F:DA:9C:A5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2C5F53F87D36F063A79793E841A6E909023FFFB9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS154049.roa
Signing time: Mon 04 Aug 2025 17:26:52 +0000
ROA not before: Mon 04 Aug 2025 17:21:52 +0000
ROA not after: Mon 03 Aug 2026 17:26:52 +0000
asID: 154049
IP address blocks: 141.11.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5f:53:f8:7d:36:f0:63:a7:97:93:e8:41:a6:e9:09:02:3f:ff:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 4 17:21:52 2025 GMT
Not After : Aug 3 17:26:52 2026 GMT
Subject: CN=E8A56E9DC50D1BD70BC2A404CCD454553FDA9CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4f:0c:42:da:69:1d:2f:06:6c:d1:67:43:70:
d3:95:22:c0:e9:15:b7:33:de:e2:5e:c7:b7:a7:5b:
5e:d1:61:46:4c:dc:70:a2:ff:ca:e2:81:be:35:80:
27:c0:f7:35:8c:96:90:ca:64:fb:51:01:84:bb:8e:
b6:53:12:5e:43:fa:72:01:e5:9a:bf:51:b5:fb:8b:
74:2d:3b:d6:68:2c:ae:4e:6c:ac:74:7f:58:ad:f2:
e4:54:72:98:c1:60:87:5b:1f:75:3e:7a:e3:96:41:
b3:59:b1:4b:dd:79:27:42:ed:c2:6f:1d:58:9b:5d:
5f:f5:dc:62:99:79:64:4e:51:42:fd:b5:06:1d:91:
c1:2c:57:97:7d:e9:c0:b3:74:50:ce:88:79:73:5e:
03:30:8a:e3:40:f0:ae:af:21:0c:be:03:d3:61:bc:
d7:72:0c:48:cf:84:e1:37:ae:df:4e:2b:57:da:c3:
c9:75:54:35:48:cb:2b:e5:75:63:7a:db:b9:13:1b:
44:ef:ae:c4:b9:b7:c3:71:91:3f:79:55:af:11:6a:
7e:60:4e:0c:60:09:7d:8c:b9:f3:42:f0:0b:4e:e5:
7a:44:92:2c:72:5b:e5:9e:9a:a5:6e:0f:b6:01:65:
dd:9c:67:7e:f7:0f:01:91:39:0e:83:de:f5:b9:62:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:6E:9D:C5:0D:1B:D7:0B:C2:A4:04:CC:D4:54:55:3F:DA:9C:A5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS154049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.145.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:42:98:1a:54:ce:65:14:38:e5:bb:e8:03:56:95:26:b4:fc:
7c:4a:46:a1:6c:19:27:7e:a8:00:f3:47:2e:ac:52:ab:1b:2c:
88:c9:9c:7a:37:9e:e0:01:db:bb:ee:38:3a:72:52:c0:22:45:
59:f8:e6:0a:fa:73:df:a2:ef:7d:3c:7b:8c:9b:90:f9:88:78:
90:9f:32:e1:25:e7:84:d7:39:0d:c3:92:1a:1c:e2:11:e0:93:
5a:21:19:ef:23:0a:fc:ca:cc:af:bb:69:00:3e:1f:e2:26:71:
c9:40:a2:4b:d8:c0:77:0c:0c:66:9b:0c:ee:94:3e:bf:6e:d0:
65:21:ce:52:39:32:9f:5f:df:df:63:71:59:66:8c:8a:af:12:
48:9c:6b:68:8a:f8:fd:73:e7:9a:2c:77:5d:df:9e:13:9f:81:
b5:b5:d3:2c:da:98:59:b7:97:6f:41:d9:c4:11:16:0a:39:0b:
3d:2a:da:1d:83:1a:42:a2:6b:8f:d7:c8:7e:64:30:84:5d:f3:
3e:5c:3c:79:45:7a:e9:9c:00:eb:0a:52:38:80:fc:10:55:74:
cc:f2:02:fc:4d:3a:8b:5a:cc:a7:d0:42:8f:af:e8:34:ef:07:
90:e7:67:2f:5e:22:80:ff:34:65:f0:06:9d:de:94:be:bd:2a:
2e:85:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:37 2025 by rpki-client