Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199737.roa
File: AS199737.roa (raw, json)
Hash identifier: yxM97Wja0/EsZFPTHvDL+A0PUGdaWaZ3PkYnUORnMRo=
Subject key identifier: 3B:38:CC:49:64:DE:E8:E6:A0:B2:FD:C7:02:23:05:8C:ED:9B:62:3E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 450A9D9CC6DC0BD54974E3E28107410F20749107
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199737.roa
Signing time: Wed 30 Apr 2025 11:12:37 +0000
ROA not before: Wed 30 Apr 2025 11:07:37 +0000
ROA not after: Wed 29 Apr 2026 11:12:37 +0000
asID: 199737
IP address blocks: 140.150.234.0/24 maxlen: 24
146.103.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0a:9d:9c:c6:dc:0b:d5:49:74:e3:e2:81:07:41:0f:20:74:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 30 11:07:37 2025 GMT
Not After : Apr 29 11:12:37 2026 GMT
Subject: CN=3B38CC4964DEE8E6A0B2FDC70223058CED9B623E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:ee:7d:97:71:bf:89:8a:67:ec:a6:f5:c4:
b2:2f:c4:f8:3d:31:68:c0:3a:d4:0a:93:80:31:f9:
2b:99:65:02:e7:9d:25:cd:f4:af:09:ee:40:0a:34:
59:f7:80:38:9b:98:9b:dd:49:ad:e8:21:ca:27:27:
f7:e0:23:40:13:82:69:7e:88:9c:a3:e2:65:0b:01:
b4:a0:85:37:00:cd:45:ea:35:04:e3:8e:45:26:0d:
f2:98:c6:a1:77:12:c8:5d:b0:78:33:1a:f7:9b:1b:
db:4a:69:07:50:fa:cf:0c:2a:29:ed:44:71:87:57:
c1:79:5d:b0:bb:22:c1:73:46:57:ce:78:ca:06:88:
73:88:31:08:25:64:af:d8:99:63:14:9d:74:ab:cd:
09:83:d3:11:3d:3c:fc:c3:90:c2:d3:f4:31:52:2b:
be:40:73:97:e1:f7:78:4c:da:b5:ac:e0:16:cf:f1:
97:7a:f1:65:0f:a9:b8:b7:14:7f:2a:42:0e:6c:46:
b4:ac:8b:0e:35:7c:89:03:3c:bf:3a:95:91:09:ee:
bb:e4:ca:1d:36:79:66:bf:39:15:7b:47:fd:dc:38:
b2:e7:3a:0b:3e:7c:07:4c:1f:74:4e:01:08:fe:5d:
dc:28:45:db:86:50:64:be:76:93:14:e8:85:99:8f:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:CC:49:64:DE:E8:E6:A0:B2:FD:C7:02:23:05:8C:ED:9B:62:3E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.234.0/24
146.103.61.0/24
Signature Algorithm: sha256WithRSAEncryption
04:30:5b:5e:a4:da:b6:4a:f8:f5:d4:d1:c5:80:3b:fa:2c:a1:
59:9d:0c:7d:aa:c1:ca:69:b7:4a:8a:18:fd:28:c2:ec:62:0a:
71:e9:73:45:1f:48:4b:89:9f:03:c1:c2:c8:b8:a8:9b:2a:ca:
44:8e:d6:6d:fe:0b:c6:5c:26:42:09:cc:6e:19:ba:32:fa:b3:
9c:e2:93:b2:94:ab:45:24:4f:f1:90:77:00:59:c6:b1:9f:fb:
39:b6:c2:20:7c:3b:97:bb:15:0e:76:f4:88:96:54:73:26:ca:
ff:24:30:c5:64:59:f3:b1:57:0c:e6:b1:b5:f0:16:01:24:2a:
a8:29:1a:07:d5:81:89:fe:18:54:62:e1:ff:26:8a:71:73:45:
ec:db:3d:a7:f6:eb:d4:9b:94:e4:58:dc:d0:54:42:1c:7b:bb:
fd:33:38:0f:2d:e2:6e:9b:04:18:fc:7c:a0:d7:59:6a:b0:9d:
2c:16:74:4c:50:05:3d:13:68:84:47:02:0c:ec:a2:4a:1a:ab:
aa:dc:30:6e:65:d0:81:6a:bc:09:d4:68:64:5a:2f:00:de:ea:
7e:2b:8a:36:91:a0:79:48:f7:52:10:eb:46:4c:ca:56:e1:91:
e4:bd:ea:1a:54:0c:0c:2a:5e:7e:c7:c6:3e:93:50:4c:26:48:
09:8d:12:80
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIURQqdnMbcC9VJdOPigQdBDyB0kQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA0MzAxMTA3MzdaFw0yNjA0MjkxMTEyMzdaMDMxMTAvBgNV
BAMTKDNCMzhDQzQ5NjRERUU4RTZBMEIyRkRDNzAyMjMwNThDRUQ5QjYyM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ge59l3G/iYpn7Kb1xLIvxPg9
MWjAOtQKk4Ax+SuZZQLnnSXN9K8J7kAKNFn3gDibmJvdSa3oIconJ/fgI0ATgml+
iJyj4mULAbSghTcAzUXqNQTjjkUmDfKYxqF3EshdsHgzGvebG9tKaQdQ+s8MKint
RHGHV8F5XbC7IsFzRlfOeMoGiHOIMQglZK/YmWMUnXSrzQmD0xE9PPzDkMLT9DFS
K75Ac5fh93hM2rWs4BbP8Zd68WUPqbi3FH8qQg5sRrSsiw41fIkDPL86lZEJ7rvk
yh02eWa/ORV7R/3cOLLnOgs+fAdMH3ROAQj+XdwoRduGUGS+dpMU6IWZj9cFAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUOzjMSWTe6Oagsv3HAiMFjO2bYj4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk5NzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjJbq
AwQAkmc9MA0GCSqGSIb3DQEBCwUAA4IBAQAEMFtepNq2Svj11NHFgDv6LKFZnQx9
qsHKabdKihj9KMLsYgpx6XNFH0hLiZ8DwcLIuKibKspEjtZt/gvGXCZCCcxuGboy
+rOc4pOylKtFJE/xkHcAWcaxn/s5tsIgfDuXuxUOdvSIllRzJsr/JDDFZFnzsVcM
5rG18BYBJCqoKRoH1YGJ/hhUYuH/Jopxc0Xs2z2n9uvUm5TkWNzQVEIce7v9MzgP
LeJumwQY/Hyg11lqsJ0sFnRMUAU9E2iERwIM7KJKGquq3DBuZdCBarwJ1GhkWi8A
3up+K4o2kaB5SPdSEOtGTMpW4ZHkveoaVAwMKl5+x8Y+k1BMJkgJjRKA
-----END CERTIFICATE-----
Generated at Tue May 6 00:24:19 2025 by rpki-client