Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48925.roa
File: AS48925.roa (raw, json)
Hash identifier: kp56d6XcGpEHKdGmEmnUbEO+hYekt2z0ItL7hnLnP8g=
Subject key identifier: 13:1E:12:B2:C2:3F:FE:0E:DB:99:7E:92:82:79:09:1F:1C:44:9F:0A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7A7362AF65BDF64421674552A3B836579C70B4B8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48925.roa
Signing time: Thu 12 Jun 2025 14:58:56 +0000
ROA not before: Thu 12 Jun 2025 14:53:56 +0000
ROA not after: Thu 11 Jun 2026 14:58:56 +0000
asID: 48925
IP address blocks: 46.203.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:73:62:af:65:bd:f6:44:21:67:45:52:a3:b8:36:57:9c:70:b4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 12 14:53:56 2025 GMT
Not After : Jun 11 14:58:56 2026 GMT
Subject: CN=131E12B2C23FFE0EDB997E928279091F1C449F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:90:ef:7c:df:7a:0d:ee:5d:4a:68:48:c9:
24:37:18:be:56:91:3e:3c:f9:c4:c2:12:36:52:42:
0e:a5:bb:a3:f1:be:04:c3:4d:45:94:d0:9e:73:e2:
13:f1:cd:dc:06:af:82:7c:e2:57:b5:1d:23:72:ae:
d2:b8:1f:e3:4f:31:a4:5d:9d:cb:99:5d:2d:73:99:
63:f5:55:43:c1:ef:d0:da:e2:93:d5:39:c4:0a:b9:
d9:8d:81:31:95:c5:64:4b:12:cb:c5:0e:39:3b:0f:
26:b3:37:57:0d:01:2e:3e:16:9e:d2:62:80:3f:28:
e9:79:bc:61:4d:01:20:1c:2a:57:f3:7f:32:bb:a7:
ec:d6:9d:cc:c1:33:1e:6e:e5:24:43:b0:9c:45:03:
a5:1f:4d:b3:b7:46:ca:18:f2:cd:17:85:cb:e3:25:
92:b2:12:1c:8c:b4:17:06:2f:59:72:02:c8:a0:1f:
33:25:48:5f:e9:4e:bc:59:bb:d1:b6:f0:2b:8d:6f:
3e:02:4e:c2:7a:89:30:2a:5c:09:68:9e:a6:2e:34:
3a:b9:ec:91:e8:f3:7a:fb:33:2c:50:b5:3d:03:ab:
5d:b1:b7:18:8a:90:3f:ef:04:fa:d5:7a:f1:36:84:
97:76:68:bc:2b:71:00:88:da:a4:6c:92:e6:45:2e:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:12:B2:C2:3F:FE:0E:DB:99:7E:92:82:79:09:1F:1C:44:9F:0A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.182.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1b:95:9c:d1:34:29:6f:d3:3d:5b:21:e7:b6:23:21:69:2c:
73:95:e0:b2:bd:47:55:4c:f2:71:7f:04:62:60:2f:11:65:05:
a3:29:4e:15:06:bd:ce:6a:4c:fa:46:95:6c:85:23:c2:6d:7f:
1c:5b:48:a6:7f:95:dd:15:fb:f1:e4:e6:75:55:b0:e1:05:03:
7f:27:49:b2:78:14:88:b9:54:20:98:b4:fe:e4:49:aa:4c:7f:
f7:0b:69:04:f8:2a:51:81:9a:e3:56:2b:35:96:e4:3b:27:fb:
ad:a8:1f:22:70:5d:8e:d6:77:d0:ee:b2:0c:5f:88:47:f4:fc:
c1:aa:fa:c5:fe:a8:39:9b:e3:d2:f6:e0:94:59:a2:aa:2f:af:
c6:ae:48:70:ec:c0:8d:93:58:0d:1a:d6:34:a7:26:fe:22:90:
7e:af:46:b7:91:ea:cd:97:5b:fa:23:37:10:1a:64:45:ab:54:
74:8f:7a:17:6e:88:87:61:c4:cf:15:42:4c:cb:88:80:21:f7:
2c:aa:8e:f8:f2:aa:3e:b0:5e:a9:9b:fc:61:77:ae:19:b3:d0:
19:44:1b:74:67:0a:29:44:bb:6e:95:c3:ed:4b:03:d0:c3:96:
f7:5c:8a:fa:59:c0:fc:5d:6c:ae:65:63:8e:b2:a5:9e:0d:65:
e9:82:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:00:38 2025 by rpki-client