Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS55720.roa
File: AS55720.roa (raw, json)
Hash identifier: vPfurK5gOS13YyAH/WUPK+B3XlZndIxymapkICnfQNU=
Subject key identifier: 1C:B0:3B:72:8F:95:AF:97:CC:4D:C9:F0:2B:CF:DC:EE:63:C5:E6:5A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0A9465C0749E96EE97485BD60DE981EC06521DCF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS55720.roa
Signing time: Thu 12 Jun 2025 06:54:09 +0000
ROA not before: Thu 12 Jun 2025 06:49:09 +0000
ROA not after: Thu 11 Jun 2026 06:54:09 +0000
asID: 55720
IP address blocks: 141.11.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 20:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:94:65:c0:74:9e:96:ee:97:48:5b:d6:0d:e9:81:ec:06:52:1d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 12 06:49:09 2025 GMT
Not After : Jun 11 06:54:09 2026 GMT
Subject: CN=1CB03B728F95AF97CC4DC9F02BCFDCEE63C5E65A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:b1:34:62:85:91:44:34:0c:56:bf:cf:ca:
e1:45:97:ca:57:31:86:95:81:33:de:60:67:e4:88:
78:86:85:42:b9:99:c3:a7:7d:04:fc:bb:e3:da:7d:
f8:6b:24:ef:01:9b:5d:51:e2:3b:15:fa:f3:5c:e7:
1e:23:92:ae:2f:37:10:43:97:1a:24:a7:c1:ca:5d:
c3:08:2f:f7:cb:74:ef:e4:d8:bf:b5:70:91:ff:2d:
bf:6e:07:bd:6d:81:0d:14:84:95:c4:89:9b:45:5c:
b1:0b:ef:6f:4f:6e:63:5e:c3:1d:66:82:8a:fe:da:
6f:74:54:b6:01:08:63:08:90:ac:10:30:71:43:c5:
8b:5f:16:a9:1f:de:df:e4:30:d2:20:22:23:d2:49:
28:71:b4:07:63:68:a1:b5:71:8b:41:8c:8a:3a:e3:
52:6b:08:a2:07:27:5f:15:a0:25:3a:5d:f7:20:fb:
8e:fa:9c:0c:4c:c1:da:40:1a:98:38:5e:20:74:dd:
d1:7f:cc:ec:93:5d:c7:0e:90:ee:d4:cf:5c:b3:4e:
0d:cd:ad:38:86:0d:67:4b:76:3f:9d:72:33:71:8f:
27:a3:c2:11:53:15:7e:97:e2:6f:3d:6a:a2:a0:36:
8b:13:b6:4c:91:b5:82:28:63:18:fb:90:dd:bf:81:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:3B:72:8F:95:AF:97:CC:4D:C9:F0:2B:CF:DC:EE:63:C5:E6:5A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS55720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.17.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cd:cc:e3:bd:84:ca:3b:51:31:3e:86:1d:a1:0e:67:71:c1:
b4:b6:2f:b6:68:ca:c3:1b:40:71:2c:16:2f:ed:10:d0:dd:c3:
a0:ad:59:7d:07:68:51:18:d0:52:53:98:3e:a9:7c:01:6d:2c:
98:65:b8:d0:fb:b6:3b:84:93:58:f0:e2:42:18:64:3d:95:e3:
7b:6e:6f:eb:fd:84:68:e8:03:44:10:8a:c9:0f:0d:44:e6:80:
5f:7a:c6:df:60:4f:99:ed:62:4f:08:e8:95:9e:ed:14:c1:64:
b5:79:97:dc:94:01:d9:46:40:81:d7:9b:87:a0:93:76:60:21:
4c:e0:e2:16:2a:8f:c9:17:a3:8f:dd:1d:87:1d:11:db:18:1c:
4c:55:90:84:8d:34:f8:41:7a:9c:d2:7c:d4:fe:17:b9:01:18:
65:bd:87:78:81:96:d9:b7:cd:83:71:77:3f:30:85:63:59:8d:
09:52:40:29:06:a7:7f:b0:5b:86:20:22:3b:4a:f8:2e:a5:98:
48:bf:f0:80:a2:ea:cb:3b:85:12:0a:f2:ae:70:9d:46:55:57:
b7:fc:44:27:54:2d:0f:15:0b:81:9c:18:76:d9:12:b1:af:d6:
ba:f5:fd:92:40:93:d7:61:24:5f:b1:b1:a7:23:c0:a2:11:ee:
fa:b6:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:14:51 2025 by rpki-client