Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa
File: AS138195.roa (raw, json)
Hash identifier: K6yrm8dqZY6v4fupiS7yu8UaiZ/9nSfzbOOirTQKSQc=
Subject key identifier: E3:02:9A:6E:CD:5A:7F:0E:25:33:34:A2:17:B7:E2:B1:15:E7:72:B1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 776896A1EB66788CF17214AB0BB2726818F02E22
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa
Signing time: Thu 17 Apr 2025 05:07:11 +0000
ROA not before: Thu 17 Apr 2025 05:02:11 +0000
ROA not after: Thu 16 Apr 2026 05:07:11 +0000
asID: 138195
IP address blocks: 95.135.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:68:96:a1:eb:66:78:8c:f1:72:14:ab:0b:b2:72:68:18:f0:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 17 05:02:11 2025 GMT
Not After : Apr 16 05:07:11 2026 GMT
Subject: CN=E3029A6ECD5A7F0E253334A217B7E2B115E772B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:79:0b:8a:56:e7:99:7f:83:1b:50:40:b1:
2f:a1:c9:da:13:8b:60:a0:dc:ad:51:e9:e1:a7:f0:
82:4b:9a:a9:70:ff:4f:78:00:ca:ea:f0:eb:ca:dd:
d5:95:ba:16:9f:b4:c7:46:e9:fa:24:5f:a5:4f:e5:
d3:74:e5:53:fb:fe:d9:fa:b7:e5:c7:4a:cb:3b:85:
26:2e:75:76:9d:4f:3c:ce:1c:15:26:d4:c7:ac:3e:
fa:16:67:2e:34:7a:da:57:cb:42:1a:17:ed:2e:9f:
17:63:8b:05:0b:77:19:73:3c:0a:45:78:3e:d1:98:
d1:25:7e:b9:3c:10:10:73:fb:21:7e:4c:b8:86:aa:
9f:7d:98:08:f1:d6:67:3c:eb:82:fa:24:7c:25:df:
f4:c8:67:dc:45:c5:39:9e:d7:45:df:69:78:ff:54:
08:69:ad:34:a4:fd:90:af:45:3f:8b:20:4d:c6:ed:
ee:63:32:4d:b1:b1:91:b5:35:bb:2e:d3:cd:b5:37:
d8:9c:92:14:d7:ca:62:f6:f9:77:d9:9d:d6:25:4d:
f2:54:95:7f:d1:94:3a:52:e4:c8:1e:a0:7c:51:f7:
74:17:b2:ba:e8:8d:a9:ee:29:1a:2e:cf:6c:55:a8:
7d:2b:f2:89:2b:77:69:5f:4b:8d:23:d7:a9:dd:b2:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:9A:6E:CD:5A:7F:0E:25:33:34:A2:17:B7:E2:B1:15:E7:72:B1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fe:00:7f:f3:b2:75:09:7c:02:98:8b:eb:ec:48:67:b9:eb:
3f:6b:3d:2c:16:24:cd:81:a2:85:06:10:71:05:95:91:5a:01:
19:69:ba:af:f3:9b:c0:83:d9:57:e0:c6:ea:ba:97:e6:e4:eb:
18:d1:fc:19:dc:7c:7a:dc:e2:c5:96:4b:f9:6e:6e:1e:aa:58:
61:fa:4c:98:f8:6b:76:e1:af:ed:ae:b2:1d:fc:4b:77:05:e6:
e4:23:f2:37:bb:4b:fc:8e:b1:55:84:aa:ab:1b:69:e9:e3:8c:
46:f2:7a:cb:8c:a3:28:5c:8c:02:e5:92:23:80:aa:43:3f:a0:
37:32:8f:ab:06:db:ec:cc:09:2a:e0:3b:88:b8:25:01:2b:39:
75:50:80:fd:01:5e:12:96:dc:7b:8c:9a:df:a4:9c:cf:82:00:
3a:a8:1a:e0:59:d1:44:51:c4:cb:00:c2:d1:18:8f:eb:b6:1c:
da:95:b4:58:96:73:a0:ac:be:76:7e:24:d7:83:52:85:9a:0e:
ec:89:5e:63:d6:72:be:4f:d4:20:58:36:ea:89:82:6e:6f:38:
1a:9e:65:1a:b4:9c:40:8c:15:86:9c:fe:82:f2:ee:02:16:b0:
98:7f:fa:1b:1c:47:78:53:a7:66:8e:9c:81:9b:86:20:1c:4d:
ae:ed:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:15:43 2025 by rpki-client