Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140627.roa
File: AS140627.roa (raw, json)
Hash identifier: 44oksnLCM1bcCm575wfYy5wfBoQPM7a4nZH7zgywptk=
Subject key identifier: 96:42:E8:A9:3E:AB:26:A0:87:13:1C:2A:12:FA:E9:8A:5D:AF:F3:36
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 16348CBB9F99860BA7384291AEECF4FB363B8EA9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140627.roa
Signing time: Thu 08 May 2025 15:25:11 +0000
ROA not before: Thu 08 May 2025 15:20:11 +0000
ROA not after: Thu 07 May 2026 15:25:11 +0000
asID: 140627
IP address blocks: 155.117.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:34:8c:bb:9f:99:86:0b:a7:38:42:91:ae:ec:f4:fb:36:3b:8e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 8 15:20:11 2025 GMT
Not After : May 7 15:25:11 2026 GMT
Subject: CN=9642E8A93EAB26A087131C2A12FAE98A5DAFF336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:20:54:d5:47:39:5e:d5:4e:85:57:3b:84:
cc:b6:c2:e0:36:0a:9e:cc:d0:39:4b:0c:ef:b9:b3:
36:a5:86:1a:f7:e7:5d:8a:dc:e5:27:03:0e:20:c4:
a9:27:28:49:05:f2:ef:4d:09:a3:0e:ba:d5:b1:81:
3a:1c:ae:63:7f:73:c8:63:6d:6f:c2:14:56:d4:b1:
53:93:3c:1c:47:36:a3:61:ee:fd:c1:c3:d4:de:7a:
f6:2c:35:56:f6:da:f3:7c:0f:2a:85:e5:2a:45:65:
9c:cf:0a:92:d2:67:69:b3:4f:cd:54:5e:83:da:a1:
8c:bd:84:29:8e:87:b5:4a:96:64:84:ff:f8:4c:a7:
f8:29:9c:1f:a8:d3:cf:8b:84:4a:ac:64:8b:7c:9c:
08:23:6a:43:f9:93:ff:0a:69:44:dc:8f:45:f7:7a:
e6:7f:b1:de:65:4a:cd:9b:5b:af:a0:ec:b1:a9:6b:
fd:3b:b5:de:80:58:1a:7e:f6:0d:a7:15:ed:d8:8d:
88:10:ca:21:f9:37:e6:45:62:ab:b3:ed:d5:28:08:
c7:6e:e6:ca:de:93:8f:ad:60:d3:d7:ad:a9:dc:9f:
3d:2e:fb:01:75:59:fc:86:b4:f0:e3:48:a2:e9:20:
05:fb:c6:6b:6a:f8:21:1c:85:67:d8:49:17:79:03:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:E8:A9:3E:AB:26:A0:87:13:1C:2A:12:FA:E9:8A:5D:AF:F3:36
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.239.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f8:e6:b6:c6:19:06:6a:b5:60:9b:6f:cb:7b:94:15:71:74:
e9:b8:55:8a:a7:7c:05:d4:00:5d:41:f0:75:e9:1f:67:54:43:
c0:92:a9:f5:a9:e1:a0:fb:6f:86:8c:92:5e:02:a4:b8:eb:ac:
85:cf:b3:5b:2c:ab:8a:59:e7:9f:08:55:0f:7c:e2:6a:bc:7d:
89:6e:43:a7:13:fc:4a:a4:b1:4c:23:fd:12:5a:4a:dd:3e:50:
bf:44:37:11:22:fd:87:f0:b2:4a:43:47:24:a5:97:17:ba:2c:
e7:8f:fe:94:69:34:08:99:15:69:34:80:69:3e:19:69:2f:3a:
4c:4e:39:17:fc:93:61:c2:c1:a0:ae:56:26:c0:ea:ad:e5:4c:
4f:c9:7e:1f:2a:c7:a6:d0:ed:43:63:f4:f2:02:21:c9:d4:29:
69:f4:b2:4f:c3:f7:bd:56:b3:f9:16:e0:8a:0f:70:5f:45:83:
70:46:63:d9:e7:5d:c8:9d:f8:49:da:e2:a9:1c:ca:8c:1d:0a:
56:80:fd:a9:df:a5:5b:31:86:0a:5b:5f:3d:9e:d6:92:86:49:
8f:9d:3c:13:01:a4:f5:85:0b:c3:30:3a:ab:27:27:b7:7f:eb:
0b:ed:4a:5f:46:2c:b1:4e:76:02:34:6a:fc:f9:36:ec:43:25:
dd:a8:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:27:43 2025 by rpki-client