Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: rcvs0eBAFp8OOPxIZYStoz2J4sFB4cWZfuIKgNQvO0I=
Subject key identifier: 7F:77:B2:89:FE:A8:AF:6C:C5:20:B2:BA:07:58:13:2B:B7:9C:39:B3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2DCAD6684C040E85A5D1C788183B0B7597B694F6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
Signing time: Wed 30 Apr 2025 18:35:12 +0000
ROA not before: Wed 30 Apr 2025 18:30:12 +0000
ROA not after: Wed 29 Apr 2026 18:35:12 +0000
asID: 138997
IP address blocks: 146.103.16.0/23 maxlen: 24
155.117.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ca:d6:68:4c:04:0e:85:a5:d1:c7:88:18:3b:0b:75:97:b6:94:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 30 18:30:12 2025 GMT
Not After : Apr 29 18:35:12 2026 GMT
Subject: CN=7F77B289FEA8AF6CC520B2BA0758132BB79C39B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:d8:51:51:43:96:8f:4e:0c:43:22:d3:21:
d3:97:8a:70:13:68:8b:0d:97:54:7b:ad:93:05:84:
0b:81:e0:fc:0f:9a:64:84:da:88:b5:62:6b:e3:ed:
7f:0f:d9:5b:0d:52:83:f0:81:b3:08:c2:a0:04:45:
d2:89:45:6b:54:99:d9:42:96:ab:46:3b:e2:bc:8a:
43:18:74:a1:77:6d:4a:ec:d0:5d:88:58:75:2c:38:
9a:83:4f:c2:b1:f4:ee:23:c6:81:46:d5:4b:7d:ec:
53:ce:51:48:60:61:3f:2a:b8:ec:f9:c5:c5:37:31:
6f:89:11:31:b8:3d:90:8a:24:58:c4:0b:de:c9:92:
e7:3a:7d:6c:2b:00:1e:b5:22:c9:c7:e9:69:93:c0:
2f:17:71:1d:25:79:8f:e7:2d:d6:9a:bb:eb:4f:3b:
5e:ae:a0:a6:98:d9:9d:b2:fa:76:8a:61:b3:29:a7:
b4:21:aa:6d:4f:58:72:0e:b1:46:dc:f6:f3:23:de:
1a:2d:c7:f6:04:3a:e2:a5:10:d8:f1:6d:26:f5:53:
b4:04:5a:fa:5d:0c:48:29:80:83:12:b2:dd:32:4f:
0e:1a:e5:6e:4f:25:21:1b:d9:d2:ff:1c:74:4f:8d:
bc:af:ba:2d:8b:bf:0c:d5:41:6d:8f:42:58:c1:cf:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:B2:89:FE:A8:AF:6C:C5:20:B2:BA:07:58:13:2B:B7:9C:39:B3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.16.0/23
155.117.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:73:a4:d1:de:de:ed:ae:a9:b6:76:47:e4:f3:85:ec:45:95:
61:a8:d9:35:86:1d:37:a5:89:ca:6c:55:fa:b7:aa:ea:37:8c:
18:29:a7:45:fc:b9:55:43:69:a3:2e:fa:93:31:d1:e1:40:ed:
af:1c:33:0c:74:fc:3b:64:47:49:94:7e:a4:90:6a:fe:21:44:
73:10:de:90:fa:59:81:16:3d:68:0d:86:4c:e0:52:dc:3c:4e:
75:87:a5:32:97:c4:88:c5:2f:cf:f1:bf:ae:cc:6a:47:84:6b:
c4:b2:c8:f0:1e:61:77:3b:e4:db:a0:61:4c:87:67:50:72:71:
02:e5:83:18:0f:3f:8e:83:c7:62:04:da:35:37:90:1c:e2:54:
d2:4c:86:c5:1a:3a:c4:e5:59:af:e5:f4:3e:53:17:19:72:f7:
97:b9:31:a0:bb:f6:4e:d7:3b:ee:4f:24:0f:dd:de:ec:18:3e:
41:df:c4:a9:04:47:1e:49:da:a6:92:b0:62:02:b5:01:a2:f6:
11:19:d1:49:6e:01:ac:1c:09:b2:a3:8b:3d:f4:b9:23:e2:70:
fb:10:19:b9:a4:27:6a:d3:f9:cc:5c:c3:00:bc:8e:8c:15:93:
f6:6f:6a:f9:05:9b:bc:6a:80:a3:5e:18:f1:57:99:71:76:fe:
d1:d1:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:27:36 2025 by rpki-client