Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
File: AS198584.roa (raw, json)
Hash identifier: 5svN876SowuFI+t5I8i0fZxpxgs0GoqlJS6Bo/HVM7U=
Subject key identifier: 3D:6C:CB:78:BA:5F:B3:5F:8A:EF:1B:E7:72:5D:43:F6:54:19:31:0D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6EC8BDCDE068D33338309D57795876713DAD98F1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
Signing time: Sat 28 Jun 2025 22:38:05 +0000
ROA not before: Sat 28 Jun 2025 22:33:05 +0000
ROA not after: Sat 27 Jun 2026 22:38:05 +0000
asID: 198584
IP address blocks: 140.233.187.0/24 maxlen: 24
143.14.15.0/24 maxlen: 24
147.79.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c8:bd:cd:e0:68:d3:33:38:30:9d:57:79:58:76:71:3d:ad:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 28 22:33:05 2025 GMT
Not After : Jun 27 22:38:05 2026 GMT
Subject: CN=3D6CCB78BA5FB35F8AEF1BE7725D43F65419310D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:82:ac:b7:45:7f:f0:3a:07:66:03:e8:a6:
4f:c7:fe:5a:c0:34:cd:af:5f:65:02:20:05:9e:f7:
d7:63:f9:e3:f7:5e:6c:77:7d:9c:b7:97:60:c1:d4:
5d:81:99:fd:8a:85:0a:39:50:86:04:49:0d:6f:45:
55:72:40:99:65:d2:a2:64:d9:31:c0:e6:a2:28:97:
52:68:f0:49:e9:50:35:22:c9:11:33:82:bd:35:de:
12:ea:fd:2f:f8:ab:08:66:75:47:5b:74:77:03:d7:
ac:95:cb:d0:57:4d:e0:b3:1f:a8:82:ce:54:8c:f7:
1c:6b:c9:9f:4c:a3:fc:c8:a6:1e:e5:a7:59:d8:3e:
de:76:25:19:49:e7:91:01:b9:c6:99:be:07:88:3b:
aa:36:82:f9:a7:67:08:cb:c0:27:ca:63:2c:57:d8:
a1:ec:fc:e6:7b:b1:d2:68:f5:72:6d:71:a6:2a:29:
af:0d:31:c9:e7:3a:f8:b9:e6:50:fc:84:90:3f:26:
43:a3:a2:97:d9:eb:78:0f:72:bf:b7:3d:be:5c:bb:
4e:bd:ef:09:fc:67:5c:a1:7a:71:c5:83:ef:49:cf:
e9:77:28:82:c9:f6:05:15:c3:ae:a5:57:55:ee:bf:
45:fd:e1:c2:8b:48:c8:59:16:91:14:1a:42:4b:df:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:CB:78:BA:5F:B3:5F:8A:EF:1B:E7:72:5D:43:F6:54:19:31:0D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.187.0/24
143.14.15.0/24
147.79.0.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e6:a9:b1:a2:4e:aa:77:fe:8c:a0:21:3d:1e:0e:50:85:1c:
c8:f5:c7:20:7b:29:e4:d2:d6:11:8a:1d:13:cb:cc:33:62:5d:
58:ca:db:82:49:78:c6:09:a6:4b:1c:d8:2c:bf:01:f1:3a:4f:
79:83:4c:30:36:16:b8:13:6b:47:a2:6b:ba:28:aa:1a:0c:28:
e3:2c:19:25:a7:5d:39:be:29:39:be:89:62:f5:ab:10:ea:18:
5a:ee:06:19:27:f3:8d:de:63:4f:84:28:aa:c0:c4:e9:de:f1:
de:4b:a8:2d:09:0a:6c:96:05:0e:29:29:92:c1:8f:ea:77:b4:
7b:6b:e5:b8:7f:22:81:2f:c2:0c:ca:ef:03:34:a6:db:e2:ae:
db:02:8a:e8:7e:8c:c6:09:9b:74:e6:92:c3:d9:5c:77:cb:54:
29:8d:99:8c:fe:e7:79:86:ea:f5:e9:f7:76:97:a7:74:d4:8f:
92:14:76:1c:65:a1:4d:a7:25:5b:2d:86:26:ec:92:f5:f0:13:
eb:74:55:05:53:0d:59:7f:f5:42:35:f8:15:43:96:4b:ff:bc:
27:4a:db:b9:32:b6:dd:b4:e3:a2:73:70:b0:eb:ad:64:bf:bd:
92:c6:01:1e:a8:3d:20:dc:90:3e:28:7c:9b:e1:2d:96:17:23:
ac:40:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:34:11 2025 by rpki-client