Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153656.roa
File: AS153656.roa (raw, json)
Hash identifier: waqzFg9aIjuPVyQ31WUjuU3b/GdDcuCt6Rr2UwBV5WI=
Subject key identifier: 73:D8:FF:59:6A:07:A6:5C:48:8F:94:3A:4D:23:5B:14:3D:C4:A1:AF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 32378F898D4B254F015A748425A39FBCEC4C5E5D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153656.roa
Signing time: Thu 07 Aug 2025 01:23:14 +0000
ROA not before: Thu 07 Aug 2025 01:18:14 +0000
ROA not after: Thu 06 Aug 2026 01:23:14 +0000
asID: 153656
IP address blocks: 155.117.12.0/24 maxlen: 24
155.117.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:37:8f:89:8d:4b:25:4f:01:5a:74:84:25:a3:9f:bc:ec:4c:5e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 01:18:14 2025 GMT
Not After : Aug 6 01:23:14 2026 GMT
Subject: CN=73D8FF596A07A65C488F943A4D235B143DC4A1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:ed:94:5e:3e:f6:f5:d1:08:6a:19:9b:48:
d6:c8:fc:5a:89:50:69:44:d5:19:39:7f:9f:f0:93:
77:67:2b:34:68:80:26:28:46:f0:20:22:ab:e7:0d:
cd:43:8e:5d:b4:c5:40:39:38:7b:5f:23:65:5b:e4:
9a:b7:32:33:56:77:70:c5:01:bf:f1:ec:0d:f2:da:
74:e8:66:71:cb:8e:5a:3f:98:b2:6d:a5:62:cd:b0:
c9:80:36:20:a9:e7:c9:a7:27:0e:89:dd:9d:14:b6:
a9:b2:bd:92:1d:bf:a0:25:3c:a7:65:c8:f5:f0:df:
b9:9b:ab:16:41:1b:7e:84:ed:6f:ca:ee:64:37:b6:
3b:64:0d:57:ee:6f:a9:0d:87:cb:e9:57:2a:8d:e2:
b9:89:38:fe:0d:ba:41:52:b2:19:14:ce:97:dc:66:
17:b2:ab:7e:55:20:85:c4:e1:e4:c2:60:28:05:44:
d6:9f:d7:9a:38:e5:c2:ff:b4:51:4e:ac:15:79:23:
18:bc:02:81:d1:8b:b5:5b:32:29:c7:30:15:a8:7f:
6a:85:a2:ac:4b:cb:83:8d:ed:75:df:e7:7b:8c:36:
9d:61:34:18:95:c6:00:98:a2:cd:8b:72:e2:2f:bd:
33:46:3a:dc:fc:fa:8b:ec:c0:42:45:1b:fe:67:c0:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:FF:59:6A:07:A6:5C:48:8F:94:3A:4D:23:5B:14:3D:C4:A1:AF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.12.0/24
155.117.98.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f3:81:69:dc:19:21:d6:d5:db:8b:d1:8b:44:8d:d8:50:a3:
9e:bf:d6:ad:14:bb:3c:f4:7b:ae:56:2e:7a:ec:f4:86:1d:71:
2c:66:20:39:52:d5:5b:39:33:d4:8c:20:e6:51:39:25:48:5e:
18:90:57:e4:10:40:25:98:2d:92:46:fe:08:0e:94:c4:0d:6b:
12:f0:b8:51:f3:f3:11:7a:f2:f8:29:e5:e2:0c:d2:65:02:ec:
8e:dc:05:96:3c:0a:cb:f0:1c:06:48:ab:96:6c:5c:53:02:57:
c4:5a:ea:c8:e1:c3:bd:ff:15:1e:2c:cb:67:ad:02:50:69:2d:
06:53:0e:00:9b:1d:82:55:a9:b3:fc:35:88:02:a6:0c:3d:f7:
b2:01:fb:1d:97:f1:b1:ad:93:d7:ac:f8:cc:13:72:8a:2f:2a:
89:00:15:25:19:f0:41:43:b8:b7:ee:47:9a:b5:67:90:56:37:
87:e3:2d:76:f5:09:2c:6a:7c:64:fc:75:48:89:95:78:e0:8d:
97:05:75:6c:d6:cd:b1:55:86:05:f5:e0:1e:ab:70:41:aa:77:
e4:46:ef:06:ce:d2:c0:7d:d5:85:f9:69:e2:c2:29:1a:fe:c5:
94:46:4c:b5:51:90:b1:1d:ad:c5:bd:58:29:28:f0:71:0d:da:
80:21:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:03:44 2025 by rpki-client