Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: aa6WGj2P2tT28V63YYp4kBzYblz5+TV3iPvQg+H/uDA=
Subject key identifier: C1:13:F1:6C:B9:F4:80:42:D4:59:BC:8D:FA:F1:5C:8B:11:81:AB:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6BDD6A171BAEA709F018A8EC61B2E2E2A43793BB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
Signing time: Sat 03 May 2025 00:01:58 +0000
ROA not before: Fri 02 May 2025 23:56:58 +0000
ROA not after: Sat 02 May 2026 00:01:58 +0000
asID: 10103
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.152.0/22 maxlen: 24
96.62.156.0/22 maxlen: 24
148.135.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:dd:6a:17:1b:ae:a7:09:f0:18:a8:ec:61:b2:e2:e2:a4:37:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 2 23:56:58 2025 GMT
Not After : May 2 00:01:58 2026 GMT
Subject: CN=C113F16CB9F48042D459BC8DFAF15C8B1181AB13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:34:ea:53:e7:bf:17:98:df:4b:7f:1c:fa:
7a:d9:3f:c0:23:cb:ed:b5:76:5b:70:56:d8:a0:c0:
82:f6:ae:eb:b6:cb:e8:f9:3c:c3:05:d1:e0:f0:2f:
ce:c6:9e:97:4d:5f:07:25:54:29:d2:06:44:2a:3a:
5d:36:39:c2:ae:bb:8c:ca:42:30:4a:aa:4a:11:0f:
5d:4e:b2:6f:34:96:c2:72:56:55:d0:c9:7a:fa:94:
ed:d9:eb:29:e1:c0:ad:22:1e:e0:c6:ec:54:dd:49:
72:0b:67:46:eb:3e:7e:dd:f9:56:da:47:fb:3f:7c:
24:6f:9f:e4:f8:ba:a1:b8:71:16:52:b0:48:17:ff:
51:59:c0:e4:3c:39:f3:a5:df:bd:3c:ce:9b:98:98:
9f:b6:88:a9:46:32:d9:35:f8:82:ab:6c:33:bd:19:
ff:22:cf:b7:69:c2:4f:3d:3e:20:9d:e5:cd:70:90:
8f:23:8b:67:aa:a0:7c:eb:fd:e7:5c:a1:75:7f:5b:
74:9a:49:f9:4a:c6:92:2a:0a:45:a2:78:9a:43:57:
b3:60:d5:ad:c7:b7:f0:ce:11:79:89:9f:1c:d2:f3:
ce:74:0e:1b:4b:c7:b6:92:23:7b:fc:03:f9:c2:a0:
50:5b:f1:6e:6c:55:70:62:a8:d9:a0:e7:02:9f:4a:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:F1:6C:B9:F4:80:42:D4:59:BC:8D:FA:F1:5C:8B:11:81:AB:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.152.0/21
148.135.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:68:9d:cb:bc:dc:d1:08:cc:e9:36:ce:fa:72:4d:e0:02:f4:
ed:d8:f7:83:56:52:db:d4:58:cc:2c:ae:0c:52:6d:88:a0:84:
a4:9d:0d:bf:d6:1d:27:28:8c:b3:fc:8f:ad:da:4b:b8:94:d4:
1a:4b:cb:9e:ef:d1:0c:f5:fb:64:6b:c1:62:2d:63:d9:34:99:
b9:7a:ce:e9:f8:52:d6:b4:ea:1b:69:94:6e:5c:ed:82:0a:2d:
eb:0d:08:1e:d4:03:39:71:70:3c:ea:35:36:e1:98:1c:58:b3:
c9:a2:f1:8d:95:14:3a:15:c8:97:e2:80:3f:30:4e:76:76:b9:
6e:d5:e0:66:52:a8:51:9b:fa:2d:e4:66:08:f1:60:0e:3a:34:
5e:cd:cd:26:25:b4:49:ba:3f:db:49:be:8e:ab:fe:2e:92:75:
1b:10:3f:b8:95:5c:23:f1:2a:af:1a:6f:ab:e2:f2:36:2d:26:
94:08:51:c7:1e:a9:56:ae:ef:6b:14:62:a8:5d:80:74:fa:d4:
0d:5b:b8:60:4e:ea:30:86:5a:05:13:2d:b6:1b:69:a3:78:5f:
93:f2:7d:2d:27:0c:32:ed:98:cb:48:30:42:a6:96:b0:7e:11:
e3:09:f3:7d:a2:c8:71:b5:f5:4d:49:b8:b1:a5:c4:74:54:e4:
1a:73:1b:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 6 11:52:13 2025 by rpki-client