Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4648.roa
File: AS4648.roa (raw, json)
Hash identifier: WxgY/z/ZAsEvdrbX5UwRWYL2GTdIQjXqRAo+xdr1/7Q=
Subject key identifier: 1B:38:E2:B6:53:24:8C:23:23:B2:2D:62:82:F5:AB:40:31:2C:72:AB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 75F243890E33123DF843F99650B579C9F789FB88
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4648.roa
Signing time: Fri 28 Mar 2025 11:34:36 +0000
ROA not before: Fri 28 Mar 2025 11:29:36 +0000
ROA not after: Fri 27 Mar 2026 11:34:36 +0000
asID: 4648
IP address blocks: 92.112.204.0/22 maxlen: 24
92.112.208.0/22 maxlen: 24
95.135.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f2:43:89:0e:33:12:3d:f8:43:f9:96:50:b5:79:c9:f7:89:fb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 28 11:29:36 2025 GMT
Not After : Mar 27 11:34:36 2026 GMT
Subject: CN=1B38E2B653248C2323B22D6282F5AB40312C72AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:9c:01:1f:d0:c9:e4:05:bf:1c:c4:90:38:
ab:cf:91:34:55:62:1b:c0:26:30:df:bd:92:5f:7e:
59:ec:13:4e:cd:c7:98:27:08:98:00:dc:94:4a:9c:
9c:e5:3d:b6:94:c0:d7:9f:48:4f:c6:38:6a:ef:b9:
1e:20:d9:ba:44:76:0b:0c:9d:80:6c:fe:8e:41:0f:
57:4f:e6:c8:28:39:c7:4e:3c:08:f7:a1:7c:09:37:
4d:b1:26:29:ab:e9:5e:30:16:89:9a:c1:b1:99:04:
8b:8c:1e:0c:79:b5:3e:4a:52:0e:6a:f1:88:46:66:
12:0e:f3:49:b2:2f:68:c2:01:59:9c:cd:30:e4:12:
84:bf:95:4a:29:0b:1d:e0:a1:f6:08:a3:3c:11:7c:
f3:7c:24:a9:fe:70:55:aa:3d:59:37:03:a4:e8:65:
d4:33:f5:86:b1:20:cc:38:7d:03:40:da:11:3d:24:
a1:c2:f6:67:a3:cf:ce:1c:bf:39:c3:60:98:c4:b5:
97:43:96:4f:cd:dc:c2:3c:f2:e5:f8:c0:ed:fd:19:
f1:7e:a7:1c:ba:c2:36:0c:88:40:98:fc:56:4c:c8:
e7:72:03:1a:04:77:e9:37:8b:52:67:af:5e:4f:66:
da:0a:34:b6:ba:8b:3e:a2:93:4e:72:8c:35:af:52:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:38:E2:B6:53:24:8C:23:23:B2:2D:62:82:F5:AB:40:31:2C:72:AB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.204.0-92.112.211.255
95.135.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:cf:31:0d:9f:1b:03:5b:ac:c6:cd:9e:0d:2d:68:33:87:03:
7c:a9:7d:67:63:ed:66:a4:fb:7b:f6:33:bd:be:9b:d2:c9:da:
73:61:f6:0b:2b:85:8d:e8:dc:b9:0e:22:ce:76:a3:ac:4f:8a:
9e:3c:0a:79:6d:56:94:f9:cb:6c:22:0c:c7:0b:d1:20:4b:9d:
c4:4f:68:2d:41:2b:c0:40:fb:b7:36:26:51:ef:2a:12:ed:ee:
ae:83:dd:82:56:74:81:18:62:fb:df:4a:d2:96:0c:fb:89:a1:
6d:63:a4:3e:96:cb:37:65:e1:b3:b3:4e:a1:76:e1:3c:86:41:
8d:38:ef:5e:bd:bc:b2:a2:db:7d:f9:7c:a2:7a:c0:1e:a7:06:
20:9e:67:fd:6d:54:ce:48:4f:9c:3d:10:37:de:b9:23:66:8c:
71:4c:4d:54:93:98:0d:b7:24:d8:50:62:9d:00:9c:05:b3:fc:
34:5c:5f:f1:0e:62:fc:ca:28:95:58:73:8b:cd:53:41:c6:cb:
4b:b0:57:75:7a:98:ee:a5:65:50:86:22:3b:5a:a1:53:af:5e:
14:a9:b0:2e:5c:7a:f9:bd:91:ca:0c:91:02:8d:04:eb:91:e9:
06:b2:1d:af:39:f1:63:0f:85:86:e2:74:a1:6c:a5:33:9d:37:
a0:de:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:16 2025 by rpki-client