Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136501.roa
File: AS136501.roa (raw, json)
Hash identifier: QmVsqK2U5WLFPYWbVY0zmIEBCgJHRf4vhIqmaLgq/ro=
Subject key identifier: C8:99:C3:CE:30:A4:4B:47:2A:AE:FC:90:8C:3E:7D:65:FC:DF:06:54
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 71C4DD0F058F4D465476296B1D6F7ED1DF51663C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136501.roa
Signing time: Tue 29 Apr 2025 10:50:46 +0000
ROA not before: Tue 29 Apr 2025 10:45:46 +0000
ROA not after: Tue 28 Apr 2026 10:50:46 +0000
asID: 136501
IP address blocks: 143.14.144.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
143.14.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c4:dd:0f:05:8f:4d:46:54:76:29:6b:1d:6f:7e:d1:df:51:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 29 10:45:46 2025 GMT
Not After : Apr 28 10:50:46 2026 GMT
Subject: CN=C899C3CE30A44B472AAEFC908C3E7D65FCDF0654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:3c:43:14:88:cc:0d:43:26:f2:19:6f:77:
a5:c7:2e:b2:da:61:c4:a6:40:2b:a0:93:25:76:ff:
ff:9a:ce:2a:a5:91:6c:a8:1f:70:17:02:2a:66:f6:
e1:58:a6:21:64:3e:22:a0:5b:4d:74:23:67:19:4b:
f1:84:06:95:cf:9d:8b:d5:71:ef:50:d9:26:72:e6:
a0:a9:10:03:a9:17:85:6a:73:3a:ae:52:53:02:e1:
e9:95:a0:8c:ea:b7:ce:57:f4:eb:95:89:73:13:02:
d0:ff:78:bb:91:4f:db:a5:4d:93:25:99:48:c8:84:
d1:f0:6f:56:86:af:70:a0:1d:bb:ad:52:97:57:5a:
ed:5c:69:46:6a:54:6b:0b:38:d1:9a:e3:d4:78:bd:
69:f8:3a:28:88:e9:71:7f:7c:e7:9b:d9:a9:03:3f:
e9:f6:ba:a9:c1:71:80:c2:8c:25:d8:8c:59:5b:84:
67:25:7d:cd:fc:89:95:96:89:5a:2e:f0:f6:84:38:
5a:8a:38:c3:35:7b:df:b1:f8:04:30:5c:3e:7b:c5:
9a:07:57:87:24:f1:b9:71:70:5b:59:1d:83:55:60:
14:a7:74:45:9f:d7:39:89:3c:aa:8f:3e:2c:82:ba:
76:51:42:17:bc:cf:cb:1f:87:8a:af:0f:73:14:4b:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:C3:CE:30:A4:4B:47:2A:AE:FC:90:8C:3E:7D:65:FC:DF:06:54
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.144.0/24
143.14.214.0/24
143.14.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:19:39:e8:eb:b0:ff:74:8b:0c:ed:a3:c8:93:4f:74:1b:62:
7a:63:39:e2:45:fa:ec:f1:da:a3:ce:ab:b3:6a:1a:84:74:07:
db:fc:8e:c2:c2:a1:22:0a:f0:54:22:78:e3:94:24:20:55:26:
fd:39:75:46:96:7c:01:48:aa:39:9b:1f:b5:70:ec:cd:2e:7b:
11:10:44:a2:a4:26:2e:5b:fd:c1:f5:a5:88:2c:8e:dd:07:af:
c0:b5:69:2d:87:93:bc:4b:29:13:7e:7e:cf:1a:b9:63:2b:9c:
1c:36:cd:3b:21:52:6e:bc:ca:e5:dc:f6:0b:73:88:d1:53:75:
65:9f:70:96:2e:4b:5c:75:6f:bc:c7:a8:70:7c:44:f8:8a:dc:
f3:9b:cf:34:ca:e0:36:a6:5f:db:36:0c:f8:a7:09:4d:84:b7:
b2:e4:aa:b2:b5:1b:2c:7b:45:18:b6:8b:56:53:1f:21:ac:ae:
64:69:3a:94:42:b7:80:0b:7e:c8:61:aa:9c:3b:be:cd:d6:dd:
36:cf:32:13:31:6a:0c:95:89:5d:12:0e:79:35:cb:ff:0f:6c:
71:98:e7:3e:84:a7:ed:52:8d:ee:f1:92:7d:a5:6b:bf:2e:97:
bc:ee:29:d5:42:1e:e7:86:e0:fe:c3:9f:88:2d:d0:cc:4f:44:
82:d4:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:22:48 2025 by rpki-client