Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151373.roa
File: AS151373.roa (raw, json)
Hash identifier: QCUW4SRgxJzPy+4iBMDPgos6vLLemYeF8runrwczJUA=
Subject key identifier: B9:2A:BC:E0:85:90:14:91:3A:E7:1B:4C:D4:14:24:72:2E:F2:33:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4EEB7ADBBFA227287CF2DAA13FE9F6E75EBD9F68
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151373.roa
Signing time: Mon 16 Jun 2025 11:03:51 +0000
ROA not before: Mon 16 Jun 2025 10:58:51 +0000
ROA not after: Mon 15 Jun 2026 11:03:51 +0000
asID: 151373
IP address blocks: 155.117.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:eb:7a:db:bf:a2:27:28:7c:f2:da:a1:3f:e9:f6:e7:5e:bd:9f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 16 10:58:51 2025 GMT
Not After : Jun 15 11:03:51 2026 GMT
Subject: CN=B92ABCE0859014913AE71B4CD41424722EF233FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:cb:cf:0f:ad:88:06:fc:4d:08:0e:e0:b4:
8a:66:51:8a:43:7b:e9:34:c1:7a:9d:de:ce:49:f5:
64:c2:49:df:cb:f6:27:93:7c:31:7d:f1:df:a3:89:
26:d8:21:54:42:cf:ef:df:29:13:3e:b6:c1:c4:85:
cb:71:ce:39:9c:ad:2a:f8:ac:92:b1:c5:3c:46:ad:
a2:25:fd:48:68:13:ca:10:4b:ea:c0:f3:5b:3d:05:
2c:8d:94:5d:23:3c:9c:77:b7:c6:f6:e7:b0:61:c0:
96:ad:a2:fc:00:96:d9:9c:cc:5f:81:e2:19:5f:6a:
8a:5b:d2:cb:c4:fb:62:d5:e4:bb:3c:d9:f3:ed:0c:
c8:d9:e5:c3:38:59:2c:c5:d8:21:10:c1:f6:66:aa:
0c:39:9d:91:16:39:e0:c9:e5:9b:3c:b4:fa:e0:29:
0a:a5:15:2f:b1:55:84:48:c2:9b:1e:74:59:29:d2:
e8:25:f3:17:3a:7a:cd:af:93:53:96:b4:6b:84:03:
4a:2c:c5:68:db:a5:ba:85:46:e8:7e:56:30:05:7e:
89:97:ec:a6:7d:a3:5e:56:1a:45:6d:b6:e2:70:37:
f9:2b:09:35:c6:20:e5:22:1d:9f:b9:50:3f:c3:42:
97:c5:e3:13:8d:f2:1b:87:cb:47:23:89:9b:ef:65:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:BC:E0:85:90:14:91:3A:E7:1B:4C:D4:14:24:72:2E:F2:33:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:04:71:bb:a4:eb:2b:45:e2:ec:24:1c:d2:b0:ed:e5:94:f8:
18:73:9b:30:e6:0d:f5:99:99:c8:68:89:75:73:25:9d:f0:8b:
81:24:71:54:82:86:9b:49:f6:ac:94:e1:24:0f:c0:0a:9e:18:
8f:bf:de:75:6e:5e:26:4d:96:bb:9b:6e:67:1d:71:09:9f:27:
c5:76:df:12:62:fd:c0:58:4c:62:de:91:ba:6b:fa:ae:80:f0:
6b:cf:5d:01:c2:ab:6a:51:94:64:e5:16:b4:42:fc:c2:93:0e:
7d:43:13:be:60:5b:2b:6e:ed:35:e7:46:91:03:e1:ae:24:ce:
4d:bf:dc:3a:6c:05:a6:eb:83:48:61:56:f4:c5:22:4f:f0:a8:
b8:37:ce:5d:d4:ce:be:26:f1:bf:6c:81:1f:a3:f7:26:6c:b2:
a0:76:c7:6d:1a:47:c6:00:a9:e3:2a:56:b0:39:7f:9c:96:64:
5e:a5:70:03:45:72:f2:3b:b7:20:ae:60:25:a5:d4:40:3a:7a:
e9:dd:9c:2e:5c:d4:7f:55:48:fe:8f:b2:d0:2a:78:d7:5b:63:
f5:c6:b2:9d:62:81:13:aa:29:f6:de:97:bc:8c:db:1a:cf:59:
47:08:82:2d:fd:ea:f5:73:a8:8a:38:02:95:93:f1:75:e6:40:
85:89:e8:34
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTut627+iJyh88tqhP+n25169n2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA2MTYxMDU4NTFaFw0yNjA2MTUxMTAzNTFaMDMxMTAvBgNV
BAMTKEI5MkFCQ0UwODU5MDE0OTEzQUU3MUI0Q0Q0MTQyNDcyMkVGMjMzRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/MvPD62IBvxNCA7gtIpmUYpD
e+k0wXqd3s5J9WTCSd/L9ieTfDF98d+jiSbYIVRCz+/fKRM+tsHEhctxzjmcrSr4
rJKxxTxGraIl/UhoE8oQS+rA81s9BSyNlF0jPJx3t8b257BhwJatovwAltmczF+B
4hlfaopb0svE+2LV5Ls82fPtDMjZ5cM4WSzF2CEQwfZmqgw5nZEWOeDJ5Zs8tPrg
KQqlFS+xVYRIwpsedFkp0ugl8xc6es2vk1OWtGuEA0osxWjbpbqFRuh+VjAFfomX
7KZ9o15WGkVttuJwN/krCTXGIOUiHZ+5UD/DQpfF4xON8huHy0cjiZvvZRnnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUuSq84IWQFJE65xtM1BQkci7yM/0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUxMzczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3W4
MA0GCSqGSIb3DQEBCwUAA4IBAQCmBHG7pOsrReLsJBzSsO3llPgYc5sw5g31mZnI
aIl1cyWd8IuBJHFUgoabSfaslOEkD8AKnhiPv951bl4mTZa7m25nHXEJnyfFdt8S
Yv3AWExi3pG6a/qugPBrz10BwqtqUZRk5Ra0QvzCkw59QxO+YFsrbu0150aRA+Gu
JM5Nv9w6bAWm64NIYVb0xSJP8Ki4N85d1M6+JvG/bIEfo/cmbLKgdsdtGkfGAKnj
KlawOX+clmRepXADRXLyO7cgrmAlpdRAOnrp3ZwuXNR/VUj+j7LQKnjXW2P1xrKd
YoETqin23pe8jNsaz1lHCIIt/er1c6iKOAKVk/F15kCFieg0
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:43:11 2025 by rpki-client