Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151338.roa
File: AS151338.roa (raw, json)
Hash identifier: PY2IMIF2Kq6y6LsYsDinuzZGQKJHkT1CBvBuyAcmzFA=
Subject key identifier: C0:89:B3:3E:3E:57:11:33:A3:68:D4:04:D7:F9:A2:E3:D2:BF:71:66
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 11D2264B97F97F89404FD89B379D5C91FFC4410A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151338.roa
Signing time: Thu 24 Apr 2025 12:35:28 +0000
ROA not before: Thu 24 Apr 2025 12:30:28 +0000
ROA not after: Thu 23 Apr 2026 12:35:28 +0000
asID: 151338
IP address blocks: 46.203.136.0/24 maxlen: 24
46.203.155.0/24 maxlen: 24
95.134.176.0/24 maxlen: 24
95.134.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d2:26:4b:97:f9:7f:89:40:4f:d8:9b:37:9d:5c:91:ff:c4:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 24 12:30:28 2025 GMT
Not After : Apr 23 12:35:28 2026 GMT
Subject: CN=C089B33E3E571133A368D404D7F9A2E3D2BF7166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:ac:ba:fc:d9:91:04:88:15:44:7b:52:8e:
ad:64:e3:b1:64:67:e1:1e:33:8e:7d:bf:77:27:59:
9a:f2:b2:46:1c:1f:02:01:c9:46:44:cf:b6:62:d1:
8d:6d:9d:d9:5e:80:13:dd:f3:34:83:08:7c:7e:cd:
b5:7d:38:dd:e0:a0:99:c2:57:85:bc:19:07:fa:c1:
4b:76:19:94:e9:65:f9:6b:ef:79:23:0c:84:93:70:
ba:34:58:ce:fa:82:1a:8a:82:50:73:44:8f:51:e0:
d1:3a:6e:aa:1a:f5:35:a5:e3:5c:30:75:d8:8d:54:
37:f4:b0:18:00:64:b8:7c:75:c2:66:11:ec:ff:6c:
89:28:be:af:32:58:f2:c2:ae:84:7f:6b:ce:db:74:
76:e7:73:d0:2a:a9:3f:26:8b:65:ae:a4:58:3d:03:
43:71:da:56:fe:48:02:d9:44:35:06:7e:bf:c1:99:
e9:8a:4c:fc:91:45:8e:23:b3:2d:33:47:7c:a5:4c:
9b:56:12:c3:6a:e5:1e:6a:d6:3f:d1:cc:0d:5d:1c:
50:64:0b:4b:0b:77:46:96:be:a4:e8:7f:ef:71:b9:
d3:da:31:61:3e:17:31:b2:e7:5f:c6:6d:08:c5:dc:
aa:22:d8:0c:bb:7a:b2:af:88:8c:f4:5a:38:a8:75:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:B3:3E:3E:57:11:33:A3:68:D4:04:D7:F9:A2:E3:D2:BF:71:66
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.136.0/24
46.203.155.0/24
95.134.176.0/24
95.134.178.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b5:56:0b:a2:84:d4:ff:c1:b7:6c:7a:a9:12:b9:11:fa:ff:
e6:e5:31:95:b4:83:47:57:c6:24:16:f8:ea:f9:f4:23:c8:cc:
7d:5f:98:74:b1:98:60:9e:d1:88:91:e3:fa:4d:c3:d7:83:e4:
e5:b9:89:89:cc:82:c2:34:70:65:9d:05:d0:aa:68:a2:2f:08:
46:32:ef:72:aa:79:e3:15:5d:fd:c9:25:73:42:b3:e8:d6:16:
03:c7:77:6c:4c:9d:b2:06:ce:5d:d6:4f:eb:b4:be:5e:15:7a:
3f:c5:88:ba:6d:74:8d:90:dc:10:a4:89:f2:48:ab:77:47:45:
55:56:76:fe:6c:14:c3:76:38:3b:a5:30:bc:08:6d:11:cd:ec:
90:bf:7c:3d:86:49:cc:7a:fb:e0:6b:97:42:e8:45:5c:a5:c6:
08:d1:bd:62:df:3a:24:01:5f:32:54:76:07:27:0d:1c:83:c2:
78:09:1b:a7:ba:94:b1:45:11:7a:7c:fd:4e:80:05:64:52:0e:
7a:04:78:4f:ba:8b:bf:52:a6:11:e2:a9:1e:05:e1:55:f1:91:
78:7b:27:b9:1d:f9:47:a2:6d:cb:bc:27:22:ac:fd:06:c6:2d:
a6:4f:98:c1:5c:29:84:09:83:58:49:9f:12:63:de:c7:f8:b6:
2b:ba:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:58 2025 by rpki-client