Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: IBfLnsvzw87VLIHA4EZkrdnlXVY0JM82m1prQc0T2Ag=
Subject key identifier: 94:4B:32:38:D9:53:F1:99:3C:8E:4F:4C:FE:B5:86:A8:F3:62:58:C3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1AA0337BE9439D6563138B9AE099BB152F851B4D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
Signing time: Sun 27 Apr 2025 00:01:06 +0000
ROA not before: Sat 26 Apr 2025 23:56:06 +0000
ROA not after: Sun 26 Apr 2026 00:01:06 +0000
asID: 42689
IP address blocks: 46.202.28.0/24 maxlen: 24
46.202.52.0/24 maxlen: 24
91.124.4.0/24 maxlen: 24
91.124.5.0/24 maxlen: 24
91.124.25.0/24 maxlen: 24
91.124.53.0/24 maxlen: 24
91.124.56.0/24 maxlen: 24
91.124.61.0/24 maxlen: 24
91.124.193.0/24 maxlen: 24
91.124.218.0/24 maxlen: 24
91.124.239.0/24 maxlen: 24
91.124.240.0/24 maxlen: 24
91.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a0:33:7b:e9:43:9d:65:63:13:8b:9a:e0:99:bb:15:2f:85:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 26 23:56:06 2025 GMT
Not After : Apr 26 00:01:06 2026 GMT
Subject: CN=944B3238D953F1993C8E4F4CFEB586A8F36258C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:9b:8d:d5:8a:52:e6:7e:dd:cc:82:f6:88:
e7:cc:45:2b:78:5a:c1:be:c6:5c:3f:24:06:4c:d6:
bd:b9:f4:9e:f3:73:ff:ea:92:1c:93:cd:a1:c3:a1:
5c:85:c0:94:3b:55:64:ad:6b:75:39:ae:45:38:ec:
0a:5b:29:26:ae:65:74:35:f0:2f:1a:9c:40:f9:d7:
cb:3f:36:ea:a6:67:55:d4:93:d8:55:ed:16:09:6d:
83:21:35:9d:91:ae:59:71:a5:be:7b:9a:a9:14:38:
6a:2b:8d:dd:00:73:8e:be:23:ca:99:97:c2:ad:8a:
ce:65:bd:04:4c:ad:b2:2b:3e:aa:97:ea:c5:c5:a7:
34:97:2f:76:e0:84:d3:36:50:65:44:96:4b:db:5a:
69:6a:cb:ec:e6:5f:09:a2:d5:2c:8c:f6:9f:cf:25:
28:d7:2a:ba:9f:27:da:42:cb:27:db:a5:6b:90:1b:
8c:f8:be:b7:16:cb:a0:3d:94:8e:8e:61:a3:22:17:
a7:b3:12:fc:0b:5b:06:4a:d6:32:d6:06:e4:81:9c:
54:85:09:80:d0:e9:79:de:1c:1e:ec:30:3d:23:4b:
5c:85:46:07:fc:97:cd:84:cd:82:05:85:da:ff:01:
08:61:a4:40:7d:51:31:6e:ff:a2:d7:d1:e8:cf:08:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:32:38:D9:53:F1:99:3C:8E:4F:4C:FE:B5:86:A8:F3:62:58:C3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.28.0/24
46.202.52.0/24
91.124.4.0/23
91.124.25.0/24
91.124.53.0/24
91.124.56.0/24
91.124.61.0/24
91.124.193.0/24
91.124.218.0/24
91.124.239.0-91.124.240.255
91.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1e:0b:31:db:4f:76:50:2d:a5:01:24:a9:99:55:02:d1:ab:
f8:0a:72:47:27:64:61:06:f8:ee:40:27:83:71:18:15:c3:6d:
f3:56:c1:b9:eb:e1:f3:48:f5:32:1c:b2:e2:82:a2:8b:d6:8d:
73:2c:51:73:7a:0b:77:bb:b2:65:bc:4d:08:7a:99:46:89:66:
2d:a5:74:dc:9c:90:ab:e3:f7:16:e2:d9:20:a5:8e:c2:3e:f4:
35:52:3f:3e:b4:c9:38:62:0d:28:46:85:c9:03:d5:4a:06:1b:
7e:d4:6f:41:6e:1a:76:97:52:4d:d8:55:2f:dd:b0:4d:00:c7:
66:03:ce:61:0e:38:8a:26:d4:b1:a9:b8:02:31:17:48:f7:e2:
63:e2:c2:00:b2:16:31:86:ae:d1:cb:07:8c:fb:b1:74:ff:6b:
24:2b:75:d5:a5:c5:1a:44:5e:a4:05:cd:08:42:f3:16:7f:d0:
c0:5c:54:29:4b:2a:df:7d:e4:f1:46:b4:a5:2f:04:d2:e1:f4:
b9:1b:47:8e:5d:2e:4e:e5:c8:ae:ab:e1:5e:dc:9f:d3:9a:21:
a3:1e:a7:7b:5c:bc:e6:43:ee:89:c2:22:bb:8e:dc:05:a9:bf:
b3:87:c8:97:14:4d:98:3c:fa:a9:11:e8:91:0f:3b:35:fa:79:
8c:4e:4c:cb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGqAze+lDnWVjE4ua4Jm7FS+FG00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA0MjYyMzU2MDZaFw0yNjA0MjYwMDAxMDZaMDMxMTAvBgNV
BAMTKDk0NEIzMjM4RDk1M0YxOTkzQzhFNEY0Q0ZFQjU4NkE4RjM2MjU4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZl5uN1YpS5n7dzIL2iOfMRSt4
WsG+xlw/JAZM1r259J7zc//qkhyTzaHDoVyFwJQ7VWSta3U5rkU47ApbKSauZXQ1
8C8anED518s/NuqmZ1XUk9hV7RYJbYMhNZ2Rrllxpb57mqkUOGorjd0Ac46+I8qZ
l8Ktis5lvQRMrbIrPqqX6sXFpzSXL3bghNM2UGVElkvbWmlqy+zmXwmi1SyM9p/P
JSjXKrqfJ9pCyyfbpWuQG4z4vrcWy6A9lI6OYaMiF6ezEvwLWwZK1jLWBuSBnFSF
CYDQ6XneHB7sMD0jS1yFRgf8l82EzYIFhdr/AQhhpEB9UTFu/6LX0ejPCHXNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlEsyONlT8Zk8jk9M/rWGqPNiWMMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwYwYIKwYBBQUHAQcBAf8EVDBSMFAEAgABMEoDBAAuyhwD
BAAuyjQDBAFbfAQDBABbfBkDBABbfDUDBABbfDgDBABbfD0DBABbfMEDBABbfNow
DAMEAFt87wMEAFt88AMEAFt8/jANBgkqhkiG9w0BAQsFAAOCAQEAqh4LMdtPdlAt
pQEkqZlVAtGr+ApyRydkYQb47kAng3EYFcNt81bBuevh80j1Mhyy4oKii9aNcyxR
c3oLd7uyZbxNCHqZRolmLaV03JyQq+P3FuLZIKWOwj70NVI/PrTJOGINKEaFyQPV
SgYbftRvQW4adpdSTdhVL92wTQDHZgPOYQ44iibUsam4AjEXSPfiY+LCALIWMYau
0csHjPuxdP9rJCt11aXFGkRepAXNCELzFn/QwFxUKUsq333k8Ua0pS8E0uH0uRtH
jl0uTuXIrqvhXtyf05ohox6ne1y85kPuicIiu47cBam/s4fIlxRNmDz6qRHokQ87
Nfp5jE5Myw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:41:57 2025 by rpki-client