Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: SyEu/+kk20yiN39kik5v/TaTMT85QTnhhlQFWETdvEg=
Subject key identifier: 17:DC:63:B2:F1:2F:43:39:16:86:D4:2E:3A:87:F7:B0:4E:31:E7:07
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 51069C5A30269674FE081D5F6BD71A97B7D5E233
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
Signing time: Thu 26 Jun 2025 14:01:53 +0000
ROA not before: Thu 26 Jun 2025 13:56:53 +0000
ROA not after: Thu 25 Jun 2026 14:01:53 +0000
asID: 5650
IP address blocks: 150.241.255.0/24 maxlen: 24
162.141.71.0/24 maxlen: 24
162.141.83.0/24 maxlen: 24
162.141.124.0/22 maxlen: 24
167.148.117.0/24 maxlen: 24
167.148.125.0/24 maxlen: 24
167.148.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:06:9c:5a:30:26:96:74:fe:08:1d:5f:6b:d7:1a:97:b7:d5:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 26 13:56:53 2025 GMT
Not After : Jun 25 14:01:53 2026 GMT
Subject: CN=17DC63B2F12F43391686D42E3A87F7B04E31E707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:0e:3d:f9:b2:e1:c2:dc:e8:57:be:62:e7:
96:0f:6c:34:bc:50:ff:b4:12:d9:68:84:35:d1:60:
c6:e6:b9:b7:a2:eb:7e:55:20:59:af:98:e5:db:53:
cd:16:39:b7:63:fa:bd:21:8f:02:9a:b5:1b:27:e6:
03:8e:0c:da:4b:74:bd:2e:61:37:74:1f:40:a6:cf:
51:75:52:88:02:1c:f9:a4:ad:8a:f4:4a:c8:6b:a7:
09:04:01:0c:f8:dd:9b:81:2f:39:e0:55:b9:f1:32:
78:69:e7:9d:3a:7f:7b:93:4c:41:71:31:d1:64:80:
bf:c9:d2:60:ff:ac:1c:4f:d4:01:7a:f9:95:02:02:
c5:6b:1b:f3:d3:3a:b6:aa:da:28:c6:9c:e6:85:3b:
29:3c:f2:91:b5:8a:af:3d:36:68:a5:90:f3:51:1d:
fc:c3:14:08:f5:94:0a:50:7c:9c:87:24:2a:9b:14:
83:8c:c3:f7:f9:ab:81:e8:34:5e:88:e4:80:ae:d6:
0c:57:1a:0d:f0:35:ac:ae:34:a9:80:80:de:01:a0:
16:6a:d3:59:ba:4c:a9:07:9e:99:f6:1e:37:e1:80:
8f:05:dd:eb:5b:8e:53:e9:1c:84:88:fd:69:f6:e7:
19:41:ae:57:d4:14:60:27:02:6b:92:ec:cd:5f:c5:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DC:63:B2:F1:2F:43:39:16:86:D4:2E:3A:87:F7:B0:4E:31:E7:07
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.255.0/24
162.141.71.0/24
162.141.83.0/24
162.141.124.0/22
167.148.117.0/24
167.148.125.0/24
167.148.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:79:f9:1b:83:78:6a:19:59:84:5a:42:98:e5:2e:3c:63:a7:
8d:0a:99:08:c7:6c:f3:b8:67:f7:85:71:4d:b5:ad:6b:fa:20:
fa:d5:31:fb:b3:6b:f1:d5:dc:3e:07:7f:ba:03:5d:d2:6a:0a:
7e:65:28:dc:18:e1:09:fb:b1:c8:db:6b:15:e2:e5:f3:b9:8e:
0d:9a:11:65:da:28:ae:b6:c5:76:c2:e8:cd:77:b0:24:49:bf:
a1:99:c6:38:93:65:1e:f7:32:1f:4c:5a:d3:97:0a:68:9d:bf:
32:ec:8d:8b:19:9a:d7:a5:b9:0b:21:ef:84:86:08:b7:50:bf:
48:5a:0b:cd:35:15:5f:b9:6d:54:1f:18:bf:e3:6a:b4:77:11:
d1:92:d3:87:18:be:84:84:eb:fb:99:d7:39:e7:4c:e5:36:05:
e4:26:10:60:62:3e:19:a3:ef:d7:30:8a:e8:70:35:04:f7:ae:
91:34:1a:bf:59:25:fb:8c:07:80:d6:b5:56:92:95:9f:e8:05:
7f:20:ed:bd:20:00:de:0f:7f:37:3c:4c:dd:f5:f7:d3:f2:71:
22:f3:3c:4c:1e:62:cf:0c:b0:0a:0b:d6:e9:71:5e:de:44:aa:
ed:61:ca:d8:23:a7:3c:52:8c:e7:b0:0e:98:f4:bc:fe:9b:51:
6e:04:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:44:39 2025 by rpki-client