Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: NPiV9CAEaDeOO/TMsW2D3xHGcVKyS2KvpUJVrdysjXM=
Subject key identifier: 71:7A:B9:5E:36:3D:F5:30:B4:10:BF:6E:8A:E6:2E:76:8E:3C:8E:FB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 544F8B6ABB91A9A4B3F2DED0F323085D987F5F21
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
Signing time: Thu 26 Jun 2025 14:01:53 +0000
ROA not before: Thu 26 Jun 2025 13:56:53 +0000
ROA not after: Thu 25 Jun 2026 14:01:53 +0000
asID: 64267
IP address blocks: 143.14.183.0/24 maxlen: 24
143.14.250.0/24 maxlen: 24
148.135.255.0/24 maxlen: 24
162.141.71.0/24 maxlen: 24
162.141.83.0/24 maxlen: 24
162.141.123.0/24 maxlen: 24
167.148.117.0/24 maxlen: 24
167.148.125.0/24 maxlen: 24
167.148.126.0/24 maxlen: 24
167.148.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4f:8b:6a:bb:91:a9:a4:b3:f2:de:d0:f3:23:08:5d:98:7f:5f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 26 13:56:53 2025 GMT
Not After : Jun 25 14:01:53 2026 GMT
Subject: CN=717AB95E363DF530B410BF6E8AE62E768E3C8EFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:3e:16:74:11:a5:c7:d4:af:9a:13:2b:9e:
7c:c3:6d:7a:82:d3:b1:44:5b:65:a8:bd:42:15:05:
f9:8c:6f:cc:c9:f3:ad:26:5e:d6:73:0a:d6:c6:c4:
14:a4:2d:8d:23:5b:68:f8:fe:02:dd:14:e1:e7:db:
43:74:6f:b0:f8:7d:f4:00:35:37:26:af:4e:ed:52:
95:76:dd:f7:81:16:4d:85:72:20:d7:3a:45:c2:a6:
db:25:0d:2c:06:2e:d4:56:5c:9b:83:14:3b:cc:04:
2b:f7:fd:97:8c:d8:10:f2:85:27:e9:02:02:30:e6:
b6:ce:65:b1:27:83:ba:7d:12:21:08:ee:10:76:a0:
36:37:ab:92:4b:f2:cc:60:85:7d:1a:ec:b8:b0:e3:
13:11:03:43:04:98:76:cb:9c:5b:d9:a0:71:1b:03:
70:0e:b0:2b:72:18:24:f1:69:58:7b:ec:f2:a2:d1:
bd:69:80:5f:f4:15:fd:5b:ac:fc:c9:85:49:c2:db:
c8:f6:a4:59:0b:b5:ca:74:40:42:70:e5:24:2a:ce:
a7:bc:b0:44:1a:46:84:af:fd:83:a1:a5:76:83:1a:
67:8b:34:4c:d2:bf:5f:0c:ad:a5:6a:76:aa:5a:63:
cb:97:24:5e:39:1d:71:21:99:4e:aa:4a:a4:ce:2d:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:B9:5E:36:3D:F5:30:B4:10:BF:6E:8A:E6:2E:76:8E:3C:8E:FB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.183.0/24
143.14.250.0/24
148.135.255.0/24
162.141.71.0/24
162.141.83.0/24
162.141.123.0/24
167.148.117.0/24
167.148.125.0-167.148.126.255
167.148.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:15:cf:5e:26:6d:2e:26:ef:1c:b7:27:78:d1:f4:f6:45:39:
8c:f2:d3:2a:e7:2f:2b:d3:b9:a4:85:ac:09:7d:c4:09:c5:1a:
ed:22:16:e5:e6:5e:ee:f8:a7:b8:8f:7a:4a:d8:7b:ba:69:25:
a2:e9:b6:9e:d1:df:49:dc:f5:fe:01:ef:fe:1f:21:5d:98:e7:
a9:f2:f2:f9:34:be:a6:e0:9c:85:47:c8:74:7e:54:15:4b:b3:
86:f4:27:1e:d2:44:d8:f4:29:f6:0a:fe:ce:6d:95:58:01:25:
62:85:c4:54:9f:2c:df:b6:19:4f:e1:19:94:45:50:01:33:5e:
9b:ac:aa:1e:b6:ed:b1:7d:e0:cf:39:f5:6c:d0:65:fe:20:0b:
f5:4e:83:44:89:cb:5d:06:9b:2f:74:3f:3a:c6:8b:72:95:34:
c1:41:fe:dc:c0:f8:13:e5:cd:d8:a0:03:80:6a:4f:88:69:b2:
ea:b1:d3:4b:c9:83:e4:35:05:9e:b0:06:c3:ba:c1:88:08:2a:
40:83:59:32:55:77:a3:a7:4a:a9:c6:ac:ad:ee:fe:96:eb:e1:
fa:9b:f8:b8:27:2c:9d:b2:89:82:92:70:76:4e:e1:16:23:76:
1e:05:7f:a8:42:4a:ab:91:8a:b3:12:04:00:33:24:b1:de:69:
63:00:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:19:04 2025 by rpki-client