Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50338.roa
File: AS50338.roa (raw, json)
Hash identifier: G/bxLI6CXOkwdohpA1iKlrdbXcCpTyq3/8YN3OFsDcI=
Subject key identifier: 7D:F9:FB:9E:7B:C0:9A:80:62:FE:C3:93:5A:19:15:D6:91:51:A2:68
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4607480F75A1103E745FE6D620B6645480D2B628
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50338.roa
Signing time: Tue 17 Jun 2025 14:54:09 +0000
ROA not before: Tue 17 Jun 2025 14:49:09 +0000
ROA not after: Tue 16 Jun 2026 14:54:09 +0000
asID: 50338
IP address blocks: 147.79.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:07:48:0f:75:a1:10:3e:74:5f:e6:d6:20:b6:64:54:80:d2:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 17 14:49:09 2025 GMT
Not After : Jun 16 14:54:09 2026 GMT
Subject: CN=7DF9FB9E7BC09A8062FEC3935A1915D69151A268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:de:ef:c4:c8:92:46:a0:36:ff:63:a0:4b:
cb:65:ee:54:40:36:dc:71:70:3f:fd:02:bf:2b:3b:
3a:9f:d6:10:e0:e0:1c:f0:0f:68:04:08:75:66:9d:
90:4d:5d:75:81:1b:f0:40:aa:5e:5a:37:32:57:98:
4f:ce:9b:42:02:61:51:c3:92:64:48:a6:49:8e:68:
dc:42:9e:da:58:b2:2e:b9:ef:fa:91:a5:41:07:c0:
e0:84:ec:b5:df:df:38:21:e9:5e:2d:e1:19:97:ec:
b1:54:78:f7:c9:ae:41:ad:4d:b9:e0:63:56:de:cd:
4d:02:b5:15:8f:59:e4:02:fd:71:78:cb:2e:ad:30:
29:5b:30:6e:b0:4e:a3:05:c5:6f:34:93:89:54:8a:
f6:b9:3a:f8:0e:9a:6e:9d:cd:e9:73:1b:3c:2c:dd:
6c:b1:96:9a:ff:23:c6:8e:8a:5f:b1:29:a0:d9:4f:
92:54:bf:38:65:79:8e:32:9c:ce:3b:04:60:97:09:
b7:08:1f:9a:2e:97:fb:86:b8:e7:0e:d6:f2:26:78:
1c:f5:9b:c9:81:5f:39:e9:2e:e4:c6:a4:61:c0:91:
c3:51:84:de:43:44:c7:19:f4:1a:ae:67:be:e9:a7:
1c:5a:08:27:8b:cf:b3:59:8f:30:2c:ef:b1:4a:15:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F9:FB:9E:7B:C0:9A:80:62:FE:C3:93:5A:19:15:D6:91:51:A2:68
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.58.0/24
Signature Algorithm: sha256WithRSAEncryption
90:91:9a:08:76:db:ad:82:df:63:9b:9c:12:dc:56:86:c3:74:
6a:b6:98:36:73:2e:16:2a:2b:1b:24:20:2e:2c:8d:22:d3:ba:
9f:42:51:63:41:c5:d8:87:c2:56:9b:be:15:5b:e7:f0:c5:95:
3f:48:f1:a2:6b:6f:c5:3a:cb:eb:3e:c8:71:ba:b6:0f:ef:64:
32:49:16:c8:73:14:31:9d:86:54:5e:73:2f:f4:ce:40:0c:ad:
f3:fd:a8:27:87:75:63:6a:ca:c7:08:1a:37:7e:0b:19:19:67:
c4:58:d6:42:d6:8a:3d:76:00:fa:84:fc:27:d0:fa:d1:0e:e8:
ce:82:34:db:20:fc:a5:c5:23:38:14:2e:07:60:5b:b5:29:aa:
70:57:99:28:4c:99:e1:53:19:51:cc:b6:cc:03:ce:b2:15:3e:
90:16:c5:cf:ad:36:64:7f:de:53:1b:4c:d3:b0:71:c9:26:3c:
a2:d9:6f:a4:52:a9:63:53:13:da:8e:2a:82:b3:8d:7a:b4:ef:
45:ca:74:27:5d:21:25:83:0f:e8:3f:e3:21:98:c1:7a:26:74:
2c:7a:61:63:9b:0f:20:c5:88:0d:06:c4:b0:01:e7:f8:d4:d7:
4d:e1:30:52:7f:24:2f:1a:73:90:b0:67:b7:52:42:11:ea:09:
9d:70:40:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:37:58 2025 by rpki-client