Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
File: AS48314.roa (raw, json)
Hash identifier: Fyvqjqc1ehUS9xRepFEEOlPL4BOMQ7GDpLP7KXkfc3k=
Subject key identifier: 97:40:43:F7:35:FF:5E:4D:15:11:ED:F7:1C:42:21:20:44:CF:37:C0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 63C14AF8E5988F464DA6F55C2AF764C9C61FD08B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
Signing time: Fri 05 Sep 2025 23:42:43 +0000
ROA not before: Fri 05 Sep 2025 23:37:43 +0000
ROA not after: Fri 04 Sep 2026 23:42:43 +0000
asID: 48314
IP address blocks: 92.242.184.0/24 maxlen: 24
194.110.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c1:4a:f8:e5:98:8f:46:4d:a6:f5:5c:2a:f7:64:c9:c6:1f:d0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 5 23:37:43 2025 GMT
Not After : Sep 4 23:42:43 2026 GMT
Subject: CN=974043F735FF5E4D1511EDF71C42212044CF37C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:94:d4:45:c0:28:89:2e:d0:57:23:5e:98:
bd:45:d6:64:27:10:62:b3:2e:13:33:9a:42:e1:e3:
4f:1a:00:1c:d0:4f:a3:a3:13:70:60:b9:68:42:51:
3b:29:84:91:ef:94:bb:57:e2:8b:7a:ed:9e:24:0e:
d6:c1:4c:57:ce:0b:66:9d:0e:d5:83:7f:8d:64:85:
84:ff:2f:45:5d:43:65:cd:6a:87:1a:4c:38:da:3a:
f8:44:e9:21:84:bf:69:c4:b7:66:da:71:91:cb:79:
d7:ec:41:00:6d:66:c4:11:a4:83:cb:40:27:f4:22:
8c:56:0b:6e:2f:9e:38:48:62:d5:5a:46:6c:ed:e6:
d7:7c:db:65:42:d1:b0:bd:50:da:32:29:09:bb:43:
80:c4:9b:38:90:2e:1d:25:b5:48:80:67:71:c7:dd:
8a:17:25:60:70:30:a9:ba:ce:1b:84:d9:f7:f1:2d:
d7:df:33:ad:e6:0c:c6:1f:b0:10:b9:eb:c9:40:46:
b4:55:e9:c7:93:65:d0:bf:a7:cd:45:e6:f3:d0:03:
53:26:f2:d4:72:c8:eb:b1:d3:3c:2b:01:de:97:de:
2f:91:24:59:7a:d6:0a:a1:72:b9:b5:f2:bc:ce:e6:
b3:48:e2:34:91:ab:61:98:86:98:79:6c:ca:a1:60:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:43:F7:35:FF:5E:4D:15:11:ED:F7:1C:42:21:20:44:CF:37:C0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.184.0/24
194.110.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8a:f5:8b:98:e3:58:7d:90:fa:56:34:a6:99:1c:54:67:e1:
32:1a:c2:9e:30:81:66:d8:9b:03:47:2f:ea:ec:58:28:34:e4:
ce:5f:1d:67:be:24:2a:de:39:72:fc:f6:0b:37:9a:dc:9f:a9:
e6:98:e5:08:8c:c0:f2:65:f4:fa:7c:df:9e:6b:42:69:12:d0:
74:4d:98:76:fb:61:aa:90:ea:a2:43:ba:6f:5a:4b:de:5d:4a:
73:a4:25:6f:28:a8:f3:56:56:16:4b:b8:9f:f0:2e:9c:ed:c2:
f3:0a:1b:3c:fc:74:c1:fb:56:b2:2d:55:61:48:28:64:29:b2:
b5:ec:bb:e8:6e:a0:10:83:22:a8:bc:74:52:34:95:11:fa:d3:
5a:90:a4:b5:bd:5b:8c:97:d4:c5:22:f3:4b:99:58:52:89:b9:
0a:63:bb:97:88:5c:b0:7f:9f:f5:91:53:6e:a4:68:03:91:c3:
db:e0:ec:b9:d7:cc:59:e6:4a:5b:dc:69:3e:ac:e3:5c:5d:43:
58:dc:ca:50:c5:59:5c:ed:35:97:d3:38:44:33:8b:b4:a1:a9:
51:57:0d:1b:47:37:7f:8b:73:73:00:3e:46:1f:13:fe:26:e1:
2b:e7:a3:92:3e:04:b6:00:5d:80:42:32:e9:63:c1:34:b0:b2:
1f:6c:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:57 2025 by rpki-client