Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50867.roa
File: AS50867.roa (raw, json)
Hash identifier: n4+1hz2OX36IQB3GjPyRD1TiYxEzQZym8NgouCYL60I=
Subject key identifier: D5:04:10:75:C2:69:C8:0D:FA:05:73:12:E0:F8:34:B8:80:80:40:05
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 734F2138C7678557D3569A35704F20908C79A8F1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50867.roa
Signing time: Thu 07 Aug 2025 17:19:10 +0000
ROA not before: Thu 07 Aug 2025 17:14:10 +0000
ROA not after: Thu 06 Aug 2026 17:19:10 +0000
asID: 50867
IP address blocks: 167.148.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4f:21:38:c7:67:85:57:d3:56:9a:35:70:4f:20:90:8c:79:a8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 17:14:10 2025 GMT
Not After : Aug 6 17:19:10 2026 GMT
Subject: CN=D5041075C269C80DFA057312E0F834B880804005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:4a:ab:c0:e9:a1:bd:b0:92:e2:a7:28:9b:
02:67:ba:b2:57:54:22:4a:37:a1:f6:e8:17:21:d4:
c9:14:2a:0d:8b:1e:5a:c6:53:ed:20:19:29:55:3e:
6c:d6:76:e4:36:ea:dd:97:93:f4:77:26:67:d4:4f:
09:d5:7d:58:71:2b:26:d5:d0:dd:79:ab:55:03:7e:
06:7b:95:d3:6a:79:4c:0b:a3:41:7d:9d:c5:be:20:
1d:95:ff:f3:d9:9a:34:b3:5e:3e:0e:d0:bd:76:ab:
84:4a:4e:e1:e8:60:5a:40:3a:86:95:8a:80:f5:b4:
3d:d4:b2:72:60:72:5f:fc:64:a7:2a:69:fb:e6:83:
ce:0c:1e:ac:b6:64:aa:8c:7a:f6:81:21:8a:2b:11:
3e:5d:61:e0:21:91:5d:24:6c:c6:a6:af:e7:d7:ef:
60:df:4d:11:b1:57:49:f3:0e:3b:11:a1:d1:3e:37:
f0:c4:e8:a9:0e:50:7c:97:77:b7:39:e8:1a:ae:3b:
8b:ae:0f:fc:e2:6c:0d:26:04:07:79:19:c0:cf:62:
c2:b0:92:2e:fc:38:6f:cc:c6:4a:7f:8f:dc:17:74:
13:79:04:17:64:41:91:52:db:bd:5a:06:f9:ff:23:
0a:66:5b:a1:83:bb:6b:14:38:49:e5:16:40:16:e9:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:10:75:C2:69:C8:0D:FA:05:73:12:E0:F8:34:B8:80:80:40:05
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.185.0/24
Signature Algorithm: sha256WithRSAEncryption
57:53:70:58:cb:69:e4:d2:c4:af:4a:14:08:23:b0:b3:5e:64:
06:de:df:7f:13:71:02:80:b1:c2:62:cc:05:0b:5b:49:aa:ee:
50:d8:95:7f:c9:2b:1c:79:9e:72:d6:74:21:a7:43:f4:15:b2:
12:73:a4:c4:a9:05:63:1c:86:0d:5a:84:5a:b8:d3:27:fe:0b:
0b:3f:45:ac:1b:11:d5:19:9a:ac:12:21:a4:79:13:c7:66:7f:
84:63:d7:a1:e6:0e:67:78:0c:e2:0b:54:c7:20:23:7d:94:09:
f0:d4:20:8a:4d:a8:f3:8a:f0:39:92:87:f7:c4:75:52:e6:6e:
f6:ab:b7:e0:73:e2:90:8d:8e:a3:3a:ce:82:58:bd:b9:98:d2:
e3:9e:c4:13:1a:8b:5f:48:8d:e7:27:68:33:39:b0:18:df:f4:
cc:bc:b4:45:c7:a6:6f:12:13:57:e2:ea:f4:34:c6:d2:8b:a2:
34:0a:fd:46:3e:20:d7:b6:51:e4:d8:7c:fa:99:0f:ba:0a:1f:
9a:55:57:fc:c4:ad:08:a9:03:3b:80:82:cf:4d:8a:d1:bd:ea:
df:6c:70:5e:90:be:38:f1:c3:7b:e8:31:be:b9:c0:d0:7c:d4:
5c:08:16:4e:c7:39:54:c6:87:d2:97:ae:2a:f2:70:98:18:cd:
1f:de:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:13 2025 by rpki-client