Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
File: AS50385.roa (raw, json)
Hash identifier: aRbLeSi8/tjWkJ09Akgakiug1zWQkAke1JsLE5Jswu8=
Subject key identifier: C2:9B:B1:5C:D9:19:4F:24:C2:C4:80:D3:A2:F6:72:77:5B:58:5E:A6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4D1B2857D2939CAF7577127F9CF1760AF6950012
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
Signing time: Sun 22 Jun 2025 08:54:11 +0000
ROA not before: Sun 22 Jun 2025 08:49:11 +0000
ROA not after: Sun 21 Jun 2026 08:54:11 +0000
asID: 50385
IP address blocks: 140.233.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1b:28:57:d2:93:9c:af:75:77:12:7f:9c:f1:76:0a:f6:95:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 08:49:11 2025 GMT
Not After : Jun 21 08:54:11 2026 GMT
Subject: CN=C29BB15CD9194F24C2C480D3A2F672775B585EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:f2:6c:22:60:7b:9c:fc:5a:d8:65:47:e6:
80:3d:cf:f9:8e:06:5c:68:41:e7:7b:c7:20:9e:44:
e5:5e:94:a4:18:3c:86:44:be:33:11:41:8e:98:8e:
fc:69:83:30:1d:54:d4:64:3f:93:a7:8e:38:1c:58:
4e:c4:53:e1:68:94:de:20:f6:70:03:11:0b:b5:32:
82:53:0d:f8:c0:1e:f3:97:83:d4:e0:d0:82:a7:b2:
9e:ee:10:4d:43:05:fd:3c:f3:6f:aa:14:d4:4d:d4:
20:ab:a3:84:8e:e4:34:d5:a2:b4:11:79:56:32:ba:
77:45:29:b5:e0:70:4b:45:54:2e:b6:6a:a4:fe:83:
0a:83:c3:58:5f:ba:25:8a:6a:b3:5b:c4:2c:63:b6:
28:b5:17:9c:e2:eb:30:dc:3a:23:dd:12:51:6c:c2:
4e:3a:c5:e2:db:f0:da:bc:3d:ee:ed:d5:7e:b9:b5:
fe:3e:31:c3:ad:3b:9f:ea:ea:e6:6a:f0:e8:19:4b:
76:1b:74:ae:b7:56:7d:82:c4:32:7b:a0:92:72:c6:
5c:e6:b5:f8:5d:2c:aa:17:22:cf:4f:4c:6c:91:04:
42:29:5a:70:fd:18:aa:15:61:a0:85:b0:ed:9b:d1:
e2:3c:59:b7:9f:6c:66:db:d5:f3:98:89:fa:3b:3d:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:B1:5C:D9:19:4F:24:C2:C4:80:D3:A2:F6:72:77:5B:58:5E:A6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f3:04:20:4b:8d:a9:b3:ec:a7:9f:83:e4:86:e5:74:64:33:
15:ba:8f:84:cf:b2:e2:3c:23:fb:bd:90:c5:9a:3a:79:79:8c:
41:fe:7b:dd:9f:fc:cb:ff:74:d2:21:2f:40:5f:00:7d:9d:74:
d2:62:fb:09:d7:ab:15:ac:ea:8a:75:b4:55:96:c5:2b:41:04:
58:ae:ab:dd:aa:3b:0e:c9:88:d7:49:dd:f2:54:3c:74:13:aa:
34:df:dc:3e:73:c4:0e:60:97:b2:b4:19:f3:55:da:aa:7d:67:
2f:25:1d:91:50:36:d9:72:cb:16:95:6c:a2:2b:6d:0f:8b:af:
6b:86:ab:c7:78:70:5b:3c:4d:f0:db:75:51:af:69:f4:cf:eb:
7b:9a:31:2c:3c:0d:b5:4d:ef:43:d7:2b:9e:4d:9f:b3:a9:fc:
05:8e:05:12:6d:69:90:69:41:0f:ab:6e:32:c2:11:6d:52:a9:
3b:c2:fa:99:ed:07:b5:6c:23:39:f1:94:ae:d3:74:25:bd:31:
08:3f:fc:05:8b:3b:4c:0c:2b:5b:83:ab:75:bd:f1:88:96:fd:
56:3e:f2:48:78:a3:ea:06:ce:51:00:aa:1a:64:c7:12:a4:a9:
89:60:e1:84:62:30:f8:f1:49:4d:63:77:4a:a7:ea:03:c1:b0:
71:9c:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:27:18 2025 by rpki-client