Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
File: AS48314.roa (raw, json)
Hash identifier: Ri9G8XN2dNmSUXN17Tr2Cp3muYgTGx400wsf2hqA8gs=
Subject key identifier: 36:8B:AF:C6:04:59:B0:99:4C:E2:60:FF:6A:2F:82:2B:A2:FB:64:BE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0B2385F6C6C1673DD43C1F507EEFCEAAC2498E0B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
Signing time: Sun 17 Aug 2025 17:00:11 +0000
ROA not before: Sun 17 Aug 2025 16:55:11 +0000
ROA not after: Sun 16 Aug 2026 17:00:11 +0000
asID: 48314
IP address blocks: 5.252.74.0/24 maxlen: 24
194.110.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:23:85:f6:c6:c1:67:3d:d4:3c:1f:50:7e:ef:ce:aa:c2:49:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 17 16:55:11 2025 GMT
Not After : Aug 16 17:00:11 2026 GMT
Subject: CN=368BAFC60459B0994CE260FF6A2F822BA2FB64BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:9a:97:97:8e:df:18:ef:0a:31:29:c2:f0:
10:ec:b6:de:f0:6f:5b:3f:3f:55:88:6b:05:22:c3:
6b:8a:cc:55:51:34:54:37:2a:ad:ed:bc:0a:7b:32:
c5:d8:9b:31:e7:e3:1f:05:3c:82:ca:7e:bb:51:dc:
cc:81:43:3c:58:79:0c:97:47:97:e4:2d:fd:91:ad:
5e:28:a2:b8:a8:9e:13:0e:95:69:15:ad:06:66:b0:
c2:88:d1:03:ff:6a:1e:ab:55:3b:f8:12:6d:da:e8:
52:4a:c6:42:fc:9a:67:2c:8c:7a:1c:9b:79:4e:6d:
b5:ed:c7:09:84:dc:dc:43:a9:e5:61:16:d5:c6:7c:
4e:b9:55:f2:85:fe:77:ee:24:9c:ed:60:8c:79:91:
95:0c:83:9f:2b:a7:af:68:47:dd:34:aa:c1:84:a8:
31:80:11:c1:86:b6:91:01:dd:0c:c3:83:02:f3:54:
e6:83:d5:ae:ad:4d:04:1f:fe:73:65:17:62:ac:1f:
96:08:6d:36:4b:c6:8e:b2:9f:3c:62:64:22:23:23:
5f:46:50:b9:ad:01:6e:b0:6d:d7:ca:29:bd:4e:01:
dd:94:2f:a4:6e:60:fa:5b:13:5f:53:84:78:c8:eb:
e6:85:0f:bd:aa:a3:30:5b:07:ea:a5:51:74:0a:09:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:AF:C6:04:59:B0:99:4C:E2:60:FF:6A:2F:82:2B:A2:FB:64:BE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.74.0/24
194.110.12.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2a:e3:47:5e:69:7c:ae:dc:59:aa:31:ea:89:f6:05:01:03:
25:3f:eb:8b:3e:f1:45:f8:66:27:47:59:f6:19:7d:a7:5f:99:
28:46:bb:69:86:ff:df:c2:43:12:6c:21:a1:03:ee:b0:13:7f:
21:32:b3:4f:5b:2f:ee:cf:1d:fa:da:54:01:3e:3c:dc:96:99:
ef:80:0f:00:30:2c:3f:60:4d:c4:0f:c4:ad:9b:c8:06:a4:60:
2b:e2:ce:7b:2d:e4:69:ba:ca:a4:48:84:53:e9:b6:29:01:d3:
e2:a7:0d:31:c6:58:06:0b:d3:3a:d9:43:53:7b:37:9a:d3:e6:
8d:cc:59:db:85:f4:81:41:1d:d9:7b:ee:64:a9:d5:94:8a:4b:
8b:d4:40:e0:d5:21:bc:d1:8e:21:cd:32:9e:04:54:ef:55:d6:
79:66:e7:11:dc:93:77:fc:69:4c:e1:eb:da:70:04:80:07:dd:
32:eb:aa:c3:2c:60:72:bc:ec:61:fe:8f:de:c9:7f:67:37:0a:
20:a5:23:fc:46:4b:1a:af:f3:40:9d:31:8f:a9:7c:ec:af:d0:
d0:89:5b:f7:75:7c:ec:81:72:8d:e1:7c:b1:40:48:58:04:8b:
b7:d7:31:0a:7c:17:0b:7a:38:43:e7:e9:ba:a7:34:8b:22:93:
a7:83:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:23 2025 by rpki-client