Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264749.roa
File: AS264749.roa (raw, json)
Hash identifier: /rpN3neUScfn3daTHFrvsYM91+f23q3WfM1lLcPvuw8=
Subject key identifier: A4:F7:04:D4:0D:7E:83:84:EC:13:9E:6F:6F:3C:66:EC:DB:4B:BE:33
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 63CB540FD94CFACA3EF9E3B4F67F8311F72371C3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264749.roa
Signing time: Thu 12 Jun 2025 14:16:41 +0000
ROA not before: Thu 12 Jun 2025 14:11:41 +0000
ROA not after: Thu 11 Jun 2026 14:16:41 +0000
asID: 264749
IP address blocks: 2a0b:8700::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 01:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cb:54:0f:d9:4c:fa:ca:3e:f9:e3:b4:f6:7f:83:11:f7:23:71:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 12 14:11:41 2025 GMT
Not After : Jun 11 14:16:41 2026 GMT
Subject: CN=A4F704D40D7E8384EC139E6F6F3C66ECDB4BBE33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:ed:08:36:03:2e:e3:8c:48:b2:66:fd:eb:
b4:ce:25:b0:70:70:27:69:7e:87:3a:75:05:ef:db:
cc:87:79:56:70:c3:ee:b0:75:0b:6e:a3:4a:7e:d4:
78:85:43:14:58:81:2d:9f:6e:23:eb:7c:29:aa:5d:
60:bf:c6:5b:54:f9:a5:e7:e5:50:25:82:ad:4b:59:
5e:4c:07:0d:7d:14:ad:ba:0e:5d:99:04:4c:20:14:
98:18:82:65:7d:53:2a:17:78:72:df:4b:aa:05:9d:
ca:a4:78:52:4a:43:23:d9:6f:05:76:41:d6:2e:ab:
f5:53:29:62:e5:38:25:ac:ce:68:de:a1:1a:2b:4d:
85:c9:8b:fb:f5:f5:da:e4:b5:2c:bc:ba:32:61:fa:
62:81:12:97:f3:bf:2c:9e:30:d0:29:03:c6:c7:86:
cd:81:40:8b:12:e4:7f:56:ea:25:93:4c:5f:0f:6e:
cf:87:e2:39:54:03:34:e1:95:b1:d6:06:c8:60:94:
4c:89:6b:1c:12:02:3c:a5:e5:da:68:63:96:bb:06:
04:64:58:ec:70:4c:f7:19:93:00:8f:2a:9c:7f:4e:
b7:5d:83:c6:84:75:b1:7a:22:f4:45:4b:15:fc:dd:
d8:dc:a3:e0:cd:82:35:a1:4e:b1:c6:c3:06:95:3f:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:04:D4:0D:7E:83:84:EC:13:9E:6F:6F:3C:66:EC:DB:4B:BE:33
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8700::/32
Signature Algorithm: sha256WithRSAEncryption
68:e6:98:b7:7c:14:64:6c:32:4d:1e:7e:e9:f0:a3:7b:9e:59:
9f:8c:7e:90:b9:85:25:61:8a:52:91:1a:a8:49:b4:03:55:77:
96:35:18:90:0d:77:01:83:37:06:6f:43:b1:32:3a:e9:66:6e:
02:c0:4d:e6:1a:59:86:86:05:74:b8:5b:29:d2:df:2b:f2:b6:
3c:a1:ad:e9:61:d8:01:07:a3:3f:55:67:06:eb:d0:b4:1d:0c:
ae:9d:9b:b7:0e:1c:97:6d:c6:4a:5c:3d:7d:05:ef:db:4c:0f:
69:52:d6:2e:78:49:4b:41:4d:dc:2e:98:4d:9f:cf:bd:1d:cb:
71:1e:3d:c4:68:20:2f:6e:2f:db:5e:14:8e:bb:49:d9:84:85:
3c:32:d1:41:21:0d:32:ae:2c:b7:57:af:8e:00:f8:d8:d5:1d:
dc:ef:b3:b4:c0:bc:6a:45:b2:da:a1:22:4f:a7:9a:65:97:07:
e5:e2:37:5a:2f:20:b1:fa:3c:79:f1:93:8a:fd:55:66:8e:90:
67:bf:98:87:83:d9:f7:bf:89:57:f1:ff:e2:01:7b:36:fb:40:
15:ae:ba:9c:ea:b1:90:96:c0:bb:6e:d6:7f:03:c9:01:8a:96:
70:6f:72:10:2f:06:ce:57:dd:80:53:4d:ae:4f:63:de:4a:b4:
d0:9b:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 16:42:27 2025 by rpki-client