Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa
File: AS59432.roa (raw, json)
Hash identifier: ALP3IX/hCHIrK2Ejw6R6iuZ1nOJb8c0UAAMhig7kYdE=
Subject key identifier: D7:90:D1:02:58:F7:C1:7A:BD:B7:DA:18:34:8D:33:B1:C5:7F:92:28
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3924E6C29D345AB898D330E8A77AB551F535DC3B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa
Signing time: Wed 13 Aug 2025 12:48:28 +0000
ROA not before: Wed 13 Aug 2025 12:43:28 +0000
ROA not after: Wed 12 Aug 2026 12:48:28 +0000
asID: 59432
IP address blocks: 143.14.91.0/24 maxlen: 24
143.14.224.0/24 maxlen: 24
155.117.227.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
167.148.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:24:e6:c2:9d:34:5a:b8:98:d3:30:e8:a7:7a:b5:51:f5:35:dc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 13 12:43:28 2025 GMT
Not After : Aug 12 12:48:28 2026 GMT
Subject: CN=D790D10258F7C17ABDB7DA18348D33B1C57F9228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:66:39:5a:3f:29:d2:b0:8e:45:98:06:b4:
26:a0:8b:b6:7c:1e:7a:a9:3c:0d:aa:38:49:96:e2:
5f:da:e5:fb:38:16:81:46:74:2f:23:5e:0a:d2:a8:
08:41:23:74:17:6d:12:ed:f5:2b:1e:9c:ea:c4:11:
ae:26:45:e3:76:d6:46:c9:81:a2:a1:27:28:62:bf:
83:f5:9c:3b:ed:d1:f8:87:2f:18:85:f9:a3:a0:56:
19:ad:80:47:24:57:75:63:18:01:95:4f:4b:75:0c:
d9:1f:a3:0d:e7:ed:a2:91:3e:49:00:3c:0f:3d:4e:
67:f9:2b:58:fa:95:c4:cb:a9:5d:aa:05:f1:00:d1:
90:e1:9c:20:d8:49:b7:46:44:1b:19:de:6b:fe:75:
b5:2a:9f:e4:08:bd:cf:a3:8e:95:a0:61:20:ff:27:
8d:64:78:10:b2:25:3c:75:a6:ee:e2:41:23:c7:2a:
90:bd:f1:f2:35:57:d5:22:12:8c:24:53:36:62:bf:
71:50:c6:36:8d:fe:df:10:e2:76:c1:cf:ff:e0:ec:
8a:e3:40:82:a7:b4:92:bc:1b:8f:70:9b:2d:8c:bd:
48:90:c9:6d:fc:fd:26:e0:db:5b:3a:75:ba:40:83:
a0:04:d1:f0:a0:28:9e:a1:4c:35:fe:f8:c4:0a:41:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:D1:02:58:F7:C1:7A:BD:B7:DA:18:34:8D:33:B1:C5:7F:92:28
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.91.0/24
143.14.224.0/24
155.117.227.0/24
162.141.13.0/24
167.148.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:53:df:f7:e6:52:72:f8:c3:ef:30:84:41:35:c0:b3:d4:a2:
16:3e:79:e3:dd:de:e0:16:6d:e4:37:2d:80:aa:1e:c5:d6:e6:
97:c1:55:e5:d3:6a:bb:d9:e9:63:30:06:af:2b:c3:25:f5:e3:
70:fb:d0:97:9c:d1:99:ad:61:c9:9c:95:fd:5c:ad:10:46:36:
b0:c6:94:23:d2:36:3d:b5:f3:6d:4b:f5:05:9c:d4:0f:c9:b0:
be:a6:99:83:dd:50:a3:1e:99:92:87:53:22:f6:44:5f:72:a5:
85:c7:8e:bd:3b:de:ed:b8:88:cb:f1:9d:82:37:3f:df:37:5f:
7b:de:c0:b7:e9:35:b8:cb:fd:a9:67:bc:43:4b:9e:58:01:66:
21:f7:fa:59:30:6e:7e:de:d2:13:4f:e3:34:eb:76:77:db:26:
89:64:5c:72:15:9d:2a:1a:c2:c5:df:3f:8e:20:c1:5a:c5:e6:
e6:72:77:5a:9e:55:a5:70:cd:bf:cd:be:e7:ee:92:81:56:a0:
e8:0e:b1:fa:04:8a:cb:0d:c7:f5:c5:32:1b:7a:d9:35:dc:db:
ee:18:72:77:a3:4d:82:a4:0e:14:0f:e0:ee:a9:fc:cd:23:9a:
42:af:40:f8:7f:fa:16:a2:8e:4d:b9:f1:f3:3d:4f:61:90:23:
4a:d2:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:27 2025 by rpki-client