Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45382.roa
File: AS45382.roa (raw, json)
Hash identifier: lyT6JXUfMoq+fKuZXT2BCPB/WP++iPYWMRncxMlu4EM=
Subject key identifier: C4:3B:AF:DD:05:4F:AB:35:6B:66:8C:F8:E2:F3:E6:B3:F7:B9:93:65
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 73B6D8DF95E7D8B9AE5E4C2DE50339A2748B701F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45382.roa
Signing time: Thu 14 Aug 2025 08:50:23 +0000
ROA not before: Thu 14 Aug 2025 08:45:23 +0000
ROA not after: Thu 13 Aug 2026 08:50:23 +0000
asID: 45382
IP address blocks: 143.14.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b6:d8:df:95:e7:d8:b9:ae:5e:4c:2d:e5:03:39:a2:74:8b:70:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 14 08:45:23 2025 GMT
Not After : Aug 13 08:50:23 2026 GMT
Subject: CN=C43BAFDD054FAB356B668CF8E2F3E6B3F7B99365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:f3:98:a8:29:92:9e:e6:74:5a:9c:c5:3f:
c7:a5:c1:8f:dc:c1:e3:fb:7f:95:51:ab:4f:16:63:
66:e3:ef:9b:56:a1:45:e3:80:3b:04:e6:a3:ba:2f:
3d:47:11:24:75:a3:26:92:89:4c:19:8e:e0:c5:af:
08:ac:0c:01:47:3c:80:f0:7a:69:7f:39:49:de:a2:
67:86:42:91:30:bd:fc:88:7b:f1:8b:14:75:86:98:
dd:49:c3:4d:d1:29:73:8d:17:53:f9:40:c3:b5:c0:
7b:aa:9a:9f:47:db:4f:c3:9e:24:9a:57:7c:38:4f:
fc:02:e7:ba:6b:e5:6d:12:24:41:9b:ea:1c:a8:ba:
d1:8e:07:74:bf:ad:43:e0:92:6c:f1:28:c3:04:73:
0b:da:4f:5f:cc:f3:56:5b:d1:3e:02:f6:63:5f:98:
4f:5d:4b:0a:42:13:cc:c1:97:8b:ec:02:35:a0:42:
ca:a2:43:3d:08:b8:d6:0d:2d:82:d1:99:65:5e:ad:
d3:40:47:18:10:dc:f8:78:30:43:74:8f:5b:53:53:
02:ef:8f:e1:5b:6a:56:c5:30:4f:22:95:e8:c7:07:
22:42:eb:66:6f:48:11:5f:21:ae:f7:e7:4f:40:33:
81:f6:16:96:6f:1e:18:c1:26:ff:e0:6a:26:91:e9:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:AF:DD:05:4F:AB:35:6B:66:8C:F8:E2:F3:E6:B3:F7:B9:93:65
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:bc:c9:24:9c:f0:b4:35:ef:17:f0:94:9a:b7:6d:4e:39:81:
6e:01:d0:28:93:28:1d:af:31:81:84:a4:a7:7e:09:24:e2:16:
1b:1f:2c:72:18:aa:24:77:e5:3f:a1:12:cc:7f:ae:40:21:64:
2b:ef:14:e6:4a:22:b5:a8:bc:e2:61:52:cc:be:69:b2:cd:e7:
b7:e8:ec:eb:83:4d:c2:c4:a6:b0:67:8f:88:7d:7e:9c:6c:85:
f5:34:00:95:ee:de:6c:48:7e:5b:d1:c0:fa:92:79:7b:9c:6a:
2a:3c:c4:df:d8:b7:ca:1f:62:a9:b8:fb:98:c7:61:ea:5b:49:
1f:7f:01:d9:42:27:0e:2b:dc:02:4b:ed:96:4b:06:da:24:f6:
b5:a3:7c:30:91:7e:05:f5:e1:58:d9:eb:55:c8:3a:29:2f:a2:
51:b4:9c:df:58:b3:44:b2:71:85:e1:ba:4b:8f:7b:0c:db:29:
b2:39:d5:cc:e8:c3:32:c6:c9:c9:e4:f0:ee:a2:31:47:7d:8f:
40:34:36:94:bc:4f:b6:70:b1:be:c1:74:18:62:9b:30:3a:d3:
c3:b4:07:6e:62:e7:b4:f2:51:eb:f1:50:a0:59:ac:d3:45:19:
a9:03:64:ca:71:01:15:9b:30:aa:da:2a:97:56:72:15:3b:c1:
59:38:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:54:25 2025 by rpki-client