Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47583.roa
File: AS47583.roa (raw, json)
Hash identifier: GoufU3t4d7Ebr1AmGbi+AQtz+j178oFz9n0jTX9LMNw=
Subject key identifier: 7E:43:38:DC:66:4A:8E:34:1F:12:99:D3:A7:52:AF:94:E6:1C:07:D5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1ACAC91FEAE81813F09319C47C45BF8F1E613CA2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47583.roa
Signing time: Fri 22 Aug 2025 06:54:13 +0000
ROA not before: Fri 22 Aug 2025 06:49:13 +0000
ROA not after: Fri 21 Aug 2026 06:54:13 +0000
asID: 47583
IP address blocks: 145.223.16.0/21 maxlen: 24
145.223.24.0/21 maxlen: 24
145.223.32.0/21 maxlen: 24
145.223.72.0/21 maxlen: 24
145.223.80.0/21 maxlen: 24
145.223.88.0/21 maxlen: 24
145.223.96.0/21 maxlen: 24
145.223.104.0/21 maxlen: 24
145.223.112.0/21 maxlen: 24
145.223.120.0/21 maxlen: 24
147.79.64.0/21 maxlen: 24
147.79.72.0/21 maxlen: 24
147.79.80.0/21 maxlen: 24
147.79.88.0/21 maxlen: 24
147.79.96.0/21 maxlen: 24
147.79.104.0/21 maxlen: 24
147.79.112.0/21 maxlen: 24
147.79.120.0/21 maxlen: 24
148.135.128.0/21 maxlen: 24
148.135.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ca:c9:1f:ea:e8:18:13:f0:93:19:c4:7c:45:bf:8f:1e:61:3c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 22 06:49:13 2025 GMT
Not After : Aug 21 06:54:13 2026 GMT
Subject: CN=7E4338DC664A8E341F1299D3A752AF94E61C07D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:76:15:65:37:1f:c7:ed:58:9f:4c:17:2d:
3a:3b:82:f4:32:ab:e1:5e:a9:47:9b:63:31:f4:8f:
f2:1c:57:67:b4:bb:81:ad:27:30:1b:7b:9a:83:8f:
eb:3d:04:68:ba:37:7c:9d:26:da:28:76:79:e4:ca:
00:f1:56:bf:4a:0b:cd:1a:6e:15:d2:eb:76:30:ba:
53:c6:9f:8b:35:d3:f7:92:78:c1:95:60:ed:ec:52:
5b:b8:5e:05:8a:3c:fc:63:1d:77:c0:dd:37:99:80:
08:2f:a7:76:56:10:cb:82:f2:fa:37:bf:0b:86:ea:
b7:87:1a:cb:70:57:df:64:56:bf:d6:8b:0b:28:ae:
3f:76:cc:5d:ee:7e:55:d3:2f:50:b9:f1:db:55:a7:
02:1f:1c:6f:e0:0d:fa:0c:79:ff:43:dc:34:c6:91:
94:55:dc:64:fd:a8:3d:b7:9f:6b:a2:ab:e8:9a:34:
0b:1c:53:67:e5:dd:45:ac:1c:d4:e3:ed:dd:a0:f2:
4d:87:cf:bd:9a:ab:2f:54:4d:f5:c4:4a:d4:b5:29:
cf:00:30:7c:63:a0:e6:bd:1a:8c:33:13:cc:9a:ec:
d1:b9:d7:b1:3e:3c:d4:70:c3:5a:3f:c6:87:ba:e1:
9a:54:07:bb:44:d9:6b:e9:3f:0b:2f:3f:80:1d:fd:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:38:DC:66:4A:8E:34:1F:12:99:D3:A7:52:AF:94:E6:1C:07:D5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.16.0-145.223.39.255
145.223.72.0-145.223.127.255
147.79.64.0/18
148.135.128.0/20
Signature Algorithm: sha256WithRSAEncryption
72:eb:54:0e:c0:3e:94:2e:de:7d:ad:8b:b1:8b:60:c5:f7:56:
92:22:8e:52:45:53:cd:b8:4a:5b:d9:1a:91:de:30:2a:b5:87:
5b:36:85:32:e2:6a:b5:46:09:d0:ba:fa:ed:6d:ae:05:4b:83:
c8:4c:32:c6:99:52:40:68:d5:b1:66:23:e5:77:9c:75:05:d7:
20:f1:d1:9d:5e:d7:8c:88:b4:ac:e1:63:5b:56:c7:0e:e4:f2:
37:af:e6:ee:84:cc:6d:9d:e4:ce:f7:dc:e5:4b:b7:85:4d:b5:
b7:1c:46:0c:3f:f6:a5:90:42:a1:65:38:59:39:e5:07:4d:a5:
f6:c5:66:3d:60:5d:41:5f:fb:b6:d1:82:f2:5c:2b:bc:1c:db:
2a:01:97:2c:54:c7:8a:ea:a6:7a:58:1b:af:5d:9a:22:05:80:
e5:3b:0e:98:57:bc:4a:b7:a2:5f:80:9e:ca:28:19:4f:f5:fc:
23:52:61:23:70:8a:b5:b4:ea:d6:06:c8:a1:98:ce:a9:3d:ab:
fb:fc:b6:8d:0d:2c:a4:2e:d2:c9:d3:c7:6a:e7:31:1d:58:8b:
a8:5b:8d:09:44:e9:9f:df:a9:de:09:d1:8f:c6:e1:94:e8:aa:
6b:91:6d:77:6a:39:f7:f6:a8:e5:cd:e8:62:53:a4:7f:6f:a4:
24:a2:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:51 2025 by rpki-client