Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45342.roa
File: AS45342.roa (raw, json)
Hash identifier: oM85HV5prr12W3OvgrClvrztukXeOg9/Kw/BTce7qUs=
Subject key identifier: 81:57:E0:7D:73:99:2C:4E:6B:F0:25:49:C8:AB:86:FD:F5:E9:EA:BE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 70E9FA03D5B072D97028DFB64708EC93B20ED940
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45342.roa
Signing time: Wed 01 Oct 2025 08:23:33 +0000
ROA not before: Wed 01 Oct 2025 08:18:33 +0000
ROA not after: Wed 30 Sep 2026 08:23:33 +0000
asID: 45342
IP address blocks: 140.150.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e9:fa:03:d5:b0:72:d9:70:28:df:b6:47:08:ec:93:b2:0e:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 1 08:18:33 2025 GMT
Not After : Sep 30 08:23:33 2026 GMT
Subject: CN=8157E07D73992C4E6BF02549C8AB86FDF5E9EABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:7d:85:d1:6a:6e:65:c0:5f:b6:af:bc:34:
0e:d7:60:9c:24:58:40:35:9e:e0:b1:33:76:ad:ce:
7b:27:3e:d7:5d:fe:38:ea:7d:cd:3b:af:ca:d0:2d:
31:cb:e8:b2:6b:07:4f:9c:d2:f9:74:8b:07:ed:03:
0e:2b:0e:e6:49:73:a6:cb:40:11:da:21:8e:af:d6:
75:dc:69:67:a2:52:ca:99:73:56:35:a8:26:f0:71:
9a:bc:ca:6f:b1:5d:42:7c:98:6f:bf:b4:d6:32:cd:
a2:73:28:95:c2:0e:c9:c7:ec:60:f8:ed:9c:f6:8f:
49:b7:87:80:1f:87:97:a7:fc:46:e6:98:bd:7b:c4:
94:c0:bf:0d:6c:78:35:2c:25:a1:04:fc:d4:28:c5:
b3:e1:88:80:06:18:5f:10:e4:e5:93:94:da:3a:dd:
7e:99:f1:a9:d6:89:e3:e7:f2:95:26:04:ea:59:db:
99:90:f2:5d:41:bb:16:ae:1b:98:16:32:1d:ac:0a:
dd:8d:78:90:37:4d:75:fc:b1:8c:64:ac:21:59:ad:
6a:2f:fe:38:c7:92:1a:35:13:3c:b1:f7:30:9e:8d:
3d:d3:45:a7:d5:7f:64:38:4d:9d:a6:f1:a4:93:00:
34:7b:43:53:b1:07:06:c7:81:ca:12:13:2d:9c:4b:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:57:E0:7D:73:99:2C:4E:6B:F0:25:49:C8:AB:86:FD:F5:E9:EA:BE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.157.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9f:aa:f3:3f:f0:d6:57:f0:74:2a:56:7e:9a:2b:81:08:cc:
47:33:cd:6e:2f:54:10:d6:33:a1:bc:ac:a0:18:d6:0a:2a:99:
01:9c:8e:8a:66:79:27:a9:7f:8b:a6:5a:a6:2a:8d:9b:35:57:
08:ed:86:22:23:f3:9b:5c:e2:ab:e0:10:6c:7d:52:f7:c5:5d:
c7:04:a9:39:b8:35:7f:ad:be:65:7d:4b:e5:04:02:69:16:4b:
ef:2e:ef:2d:9a:d7:77:54:0e:94:26:05:ec:86:a5:f0:b1:dd:
9d:2d:fc:88:02:30:2d:16:ba:47:8d:76:96:ca:2a:c9:11:01:
db:d0:2b:1a:01:bb:83:01:69:a1:02:63:de:e1:75:e9:6b:e3:
92:74:9a:a2:d5:54:fb:e7:ee:25:70:bb:a8:9c:c6:8d:0a:ff:
e0:05:ec:7e:9c:4d:61:cb:55:83:16:66:98:c5:de:44:98:5c:
f8:ea:52:86:c6:c0:84:78:90:35:17:5e:75:aa:9d:da:50:d7:
dc:9f:4c:a1:a5:db:fd:fc:c0:7a:e7:7e:ed:2b:73:39:b0:93:
94:ef:3a:d4:d4:f4:df:64:ba:f1:e1:60:47:1c:c7:fd:07:c2:
e1:55:35:2c:b4:2a:93:a5:37:0c:a1:62:9b:0f:33:4d:66:64:
94:96:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:43:59 2025 by rpki-client