Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS271982.roa
File: AS271982.roa (raw, json)
Hash identifier: RKGIxNrDOFdY2e35eFLYnIbdvylDB4Bttv8lKeZbeDk=
Subject key identifier: BB:79:0E:25:EC:1C:E7:5E:84:79:2F:C7:D1:D2:74:22:A2:BA:A4:E3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0F1ACCFFDD6A03423D488108B7402BD4702920E5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS271982.roa
Signing time: Thu 15 May 2025 21:54:15 +0000
ROA not before: Thu 15 May 2025 21:49:15 +0000
ROA not after: Thu 14 May 2026 21:54:15 +0000
asID: 271982
IP address blocks: 155.117.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 21:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1a:cc:ff:dd:6a:03:42:3d:48:81:08:b7:40:2b:d4:70:29:20:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 15 21:49:15 2025 GMT
Not After : May 14 21:54:15 2026 GMT
Subject: CN=BB790E25EC1CE75E84792FC7D1D27422A2BAA4E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:73:72:3d:d4:c9:38:fd:b9:bc:5f:5e:01:
05:2c:45:12:f5:89:c8:c7:15:4e:40:b8:22:de:00:
20:68:b1:29:02:35:09:4d:0c:fb:26:22:54:46:21:
ab:1b:8b:66:2b:50:5d:78:cf:f6:02:05:6a:18:76:
c1:a0:f4:e7:29:db:8c:9a:c5:b3:ab:fc:26:f5:e9:
bd:5c:6e:f9:d3:65:cd:50:43:35:fe:0a:ee:74:9a:
e0:20:7e:79:bb:78:dd:8b:3a:04:91:de:54:40:40:
cf:d1:09:20:7d:54:e0:97:63:4f:38:49:d3:93:77:
13:a5:5c:28:f3:84:c6:0b:94:02:71:9d:ed:e6:3e:
40:b6:0d:29:5d:a0:5b:a0:45:67:aa:f4:2a:52:88:
51:97:61:f6:f6:1c:21:7e:cc:69:ac:72:3c:f4:e5:
93:3f:05:5a:cf:fc:16:c3:49:cd:8f:60:cd:f6:45:
14:50:5a:3e:c5:2b:33:04:1d:64:05:3f:2c:51:01:
f1:db:01:78:34:8c:2c:46:7a:f6:d6:cd:78:84:6d:
95:2b:05:fd:a7:bd:a1:7e:d1:f7:f9:80:d9:b7:5b:
57:89:68:f5:29:ec:d2:6f:49:19:1c:95:32:ad:c2:
25:a6:12:2d:3b:c2:4a:86:b0:b5:ff:58:63:d2:4d:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:0E:25:EC:1C:E7:5E:84:79:2F:C7:D1:D2:74:22:A2:BA:A4:E3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS271982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.170.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bd:72:5e:16:dc:c9:a1:04:dd:b7:f0:6c:7f:fc:08:bc:a6:
10:ef:1e:af:36:e1:5d:87:08:f9:10:65:e0:90:c8:c8:b3:87:
3e:43:72:d1:25:67:c1:d2:38:35:55:0e:a8:2a:96:34:7a:b2:
db:2b:12:ae:12:1e:a2:fc:ad:4b:e3:9d:2e:70:01:bc:37:59:
71:52:fe:d1:e1:49:72:11:8f:5c:15:ba:ae:c6:03:5b:dd:ba:
25:3b:90:7e:2f:20:81:87:47:10:40:77:12:92:04:13:4a:ff:
bb:8b:ff:d0:35:3c:76:0c:b5:7d:80:0f:91:b8:2f:b1:e0:19:
c5:ad:d1:b7:fb:cf:b0:d5:fe:91:22:aa:cd:7e:44:10:ce:47:
7a:d3:74:0f:46:47:28:75:c4:65:9b:96:de:23:5b:6b:10:6c:
5b:19:ea:c8:c7:be:e5:1a:9d:2c:14:ce:c3:ea:42:74:60:a5:
8a:68:a8:d4:61:f3:9b:77:90:e0:1b:ef:6e:cc:6b:31:d0:d1:
09:7d:f9:bb:d9:6a:94:ea:b9:af:be:3e:53:27:f4:3a:3b:b8:
e2:93:3b:d5:3e:1e:76:ec:e8:39:14:eb:46:0d:c4:64:fb:ae:
30:08:d3:e2:76:31:29:d4:2e:e7:57:13:7b:28:2a:d0:f6:fa:
85:2c:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:41:46 2025 by rpki-client