Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
File: AS401190.roa (raw, json)
Hash identifier: L2xOOTrVIkBZw1JqM9faGyc2R0E2H2sYPk5erozE5Fs=
Subject key identifier: 55:9E:DE:99:57:B2:80:4B:B9:2D:9B:32:B2:AC:4E:69:B2:A0:7B:91
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2F02FB5841A2ABED2EAE331AC0D2C19A3F83139F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
Signing time: Mon 14 Apr 2025 00:00:35 +0000
ROA not before: Sun 13 Apr 2025 23:55:35 +0000
ROA not after: Mon 13 Apr 2026 00:00:35 +0000
asID: 401190
IP address blocks: 150.241.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:02:fb:58:41:a2:ab:ed:2e:ae:33:1a:c0:d2:c1:9a:3f:83:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 13 23:55:35 2025 GMT
Not After : Apr 13 00:00:35 2026 GMT
Subject: CN=559EDE9957B2804BB92D9B32B2AC4E69B2A07B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:de:e3:03:a2:79:b7:62:11:c6:7c:f0:d8:
bd:56:90:21:00:40:98:51:bc:61:c4:92:80:5c:cb:
d0:a2:a9:b8:9d:4d:72:6d:af:cc:67:da:21:75:28:
e3:a5:52:f3:c3:ed:dc:cf:89:cf:b8:c7:7c:50:59:
3e:cb:a9:f6:fa:68:3e:2e:df:6d:ed:30:9b:aa:7e:
a6:17:87:e3:3f:92:54:56:f9:60:c2:6a:18:55:24:
af:82:56:d1:56:0d:69:c3:9d:ba:04:33:1d:b6:0b:
c2:87:47:10:6f:eb:d1:da:3e:29:f0:88:53:ed:bf:
af:12:a6:c5:f5:d6:14:02:73:bc:ba:53:19:5b:a9:
07:ed:e0:34:83:2f:33:26:49:d5:09:01:c7:85:a3:
95:b7:5d:78:d0:3d:ae:2b:ee:ef:b3:67:ce:78:b6:
c0:7b:be:d0:00:49:c7:7b:86:bd:23:9a:10:be:b1:
74:b9:6a:b7:22:d9:f6:d7:78:3f:16:25:52:8e:b7:
f3:82:c9:a1:cb:4d:da:63:ec:63:c9:38:bf:93:f4:
67:f5:b4:14:3b:41:61:fd:1e:ec:0b:ff:1a:44:62:
87:8f:61:e8:81:11:da:c3:76:05:15:94:72:a6:44:
e9:e4:0d:f1:ca:c0:17:29:2e:9d:14:54:5e:1a:4f:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:DE:99:57:B2:80:4B:B9:2D:9B:32:B2:AC:4E:69:B2:A0:7B:91
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.216.0/21
Signature Algorithm: sha256WithRSAEncryption
86:e8:98:1c:a4:5d:b8:86:33:c8:34:9a:82:e9:6e:02:f3:a7:
55:56:c7:8a:49:13:96:ae:80:ed:38:ea:f7:38:f3:00:7a:b9:
eb:fe:b9:7f:0d:f6:19:ed:c3:68:53:93:cf:69:7d:34:ec:83:
c9:80:dd:35:62:35:d5:af:06:91:89:2b:c9:19:29:9d:db:7e:
4e:4a:e1:e7:6e:12:51:9d:cc:f5:1b:cc:d9:1d:4d:16:3e:fb:
97:e4:2a:35:69:ce:b8:4c:77:00:17:db:fd:f4:1e:78:c2:e7:
20:02:1d:26:63:72:0f:eb:19:6b:2f:ca:80:29:0b:39:c7:db:
26:c5:2c:8e:0b:2b:b1:7b:0d:16:90:81:08:fb:7a:43:49:a7:
90:72:f2:88:43:87:6b:55:f6:40:9c:9f:90:03:fc:f0:67:1f:
44:a4:dc:15:c0:b9:c2:26:07:2a:34:b2:1a:fa:e8:d7:b0:49:
5f:a7:63:7f:4d:ed:52:9b:69:d2:72:92:39:8f:fb:a9:c4:7e:
78:c9:fd:fc:59:a9:cb:10:9a:99:f6:2a:38:36:c3:57:90:fe:
fb:8c:85:51:5f:6c:ce:ba:b4:bb:04:07:af:84:43:e6:a1:d5:
49:87:7a:7a:6c:10:b0:13:c3:58:64:51:96:7d:7d:8f:e3:6a:
b9:1f:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:18:23 2025 by rpki-client