Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50917.roa
File: AS50917.roa (raw, json)
Hash identifier: Z2bFkMB2Wozkz+hHX5gCDGTkt5901uv6dlxl9cJMDc4=
Subject key identifier: C0:40:2D:C2:23:05:60:55:E9:B3:AE:81:72:F6:8C:01:37:3C:11:F1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3B19BD270AE0CD0B8AB613913563DE68A998F4F5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50917.roa
Signing time: Sun 20 Apr 2025 02:54:02 +0000
ROA not before: Sun 20 Apr 2025 02:49:02 +0000
ROA not after: Sun 19 Apr 2026 02:54:02 +0000
asID: 50917
IP address blocks: 45.93.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:19:bd:27:0a:e0:cd:0b:8a:b6:13:91:35:63:de:68:a9:98:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 20 02:49:02 2025 GMT
Not After : Apr 19 02:54:02 2026 GMT
Subject: CN=C0402DC223056055E9B3AE8172F68C01373C11F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:54:3a:16:fa:48:12:ce:2a:ef:3e:6f:0d:
d8:57:50:96:8f:4e:3f:e3:10:73:82:ec:4c:ac:46:
81:be:49:5e:17:0d:8b:9f:0c:c9:93:53:7d:99:92:
57:6d:72:2d:a8:32:43:9f:20:e2:36:3d:24:bb:e3:
0b:ff:04:60:ac:c3:08:f8:0d:47:fb:fc:24:bb:5b:
d2:3e:a9:db:36:ac:b0:4d:08:fa:4c:a7:a6:4c:32:
81:38:78:a1:9b:bf:8d:c0:a5:33:3a:07:d4:98:7f:
bc:82:69:aa:37:8a:29:ca:15:b9:64:3d:6d:c6:1e:
ad:ec:f2:bf:cc:d4:b0:a4:7c:e7:57:d4:a9:42:c2:
b2:9d:d2:ef:16:c6:f1:8f:35:e8:8e:97:52:59:f7:
72:7d:a7:99:33:f1:7b:db:67:d7:ab:16:8f:52:8b:
90:80:72:29:2c:21:e8:fb:4f:c2:a7:af:74:74:8b:
92:4b:01:13:d2:97:b8:e0:e6:01:d8:2f:b5:a7:49:
b6:77:94:8a:63:7c:a5:44:d0:f6:b9:22:e3:0c:b4:
7d:72:ce:95:a0:16:55:22:3e:f6:93:5f:50:45:00:
87:1c:12:9e:86:3b:b8:be:bc:0a:6b:cd:2d:e1:c3:
65:b6:81:b6:dd:dd:63:35:f5:64:35:c5:5f:c5:d9:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:2D:C2:23:05:60:55:E9:B3:AE:81:72:F6:8C:01:37:3C:11:F1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:41:d7:b0:f2:6f:a9:20:76:45:b9:86:4b:64:7b:53:42:40:
3b:f7:b5:4c:61:b5:ff:f2:39:74:3a:29:3e:40:32:6f:b4:34:
78:ac:b0:78:3a:b6:04:e1:f9:99:23:61:ea:10:1a:f9:f7:5a:
50:6e:63:1e:c4:60:60:2e:bd:e9:95:b5:44:ae:e2:65:69:71:
b2:c0:e0:1c:dc:4c:12:37:7c:0e:92:8b:ed:81:77:db:f8:ae:
6e:59:db:a0:2c:e4:b3:c3:1e:b9:ad:b9:28:20:38:05:67:7d:
81:d6:14:8e:6b:bf:72:c3:de:1f:b7:e6:db:0d:41:c6:8c:88:
02:d0:2d:0a:d0:0c:72:44:72:63:08:ed:a7:d7:d1:b2:79:73:
ac:a9:58:25:c9:ef:e1:fb:ca:bb:b9:17:d1:c1:77:4d:28:b1:
72:cf:8f:80:fc:03:00:21:8b:f5:30:6f:af:9d:bb:91:0b:7f:
7d:6e:85:64:e9:3c:e1:f9:85:1c:e3:f6:4f:af:51:f1:e8:7e:
63:db:df:c2:3c:07:78:12:17:92:1e:1a:8c:79:0e:4b:2c:d4:
95:e2:3c:41:fb:7b:81:98:16:c9:9d:c3:02:03:b8:26:ef:b2:
d5:c8:7c:d5:12:62:5f:70:7a:d4:bf:ac:02:4b:c8:21:a8:c0:
80:43:cc:63
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUOxm9JwrgzQuKthORNWPeaKmY9PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA0MjAwMjQ5MDJaFw0yNjA0MTkwMjU0MDJaMDMxMTAvBgNV
BAMTKEMwNDAyREMyMjMwNTYwNTVFOUIzQUU4MTcyRjY4QzAxMzczQzExRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMFQ6FvpIEs4q7z5vDdhXUJaP
Tj/jEHOC7EysRoG+SV4XDYufDMmTU32Zkldtci2oMkOfIOI2PSS74wv/BGCswwj4
DUf7/CS7W9I+qds2rLBNCPpMp6ZMMoE4eKGbv43ApTM6B9SYf7yCaao3iinKFblk
PW3GHq3s8r/M1LCkfOdX1KlCwrKd0u8WxvGPNeiOl1JZ93J9p5kz8XvbZ9erFo9S
i5CAciksIej7T8Knr3R0i5JLARPSl7jg5gHYL7WnSbZ3lIpjfKVE0Pa5IuMMtH1y
zpWgFlUiPvaTX1BFAIccEp6GO7i+vAprzS3hw2W2gbbd3WM19WQ1xV/F2fAFAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUwEAtwiMFYFXps66BcvaMATc8EfEwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTA5MTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtXSww
DQYJKoZIhvcNAQELBQADggEBAKNB17Dyb6kgdkW5hktke1NCQDv3tUxhtf/yOXQ6
KT5AMm+0NHissHg6tgTh+ZkjYeoQGvn3WlBuYx7EYGAuvemVtUSu4mVpcbLA4Bzc
TBI3fA6Si+2Bd9v4rm5Z26As5LPDHrmtuSggOAVnfYHWFI5rv3LD3h+35tsNQcaM
iALQLQrQDHJEcmMI7afX0bJ5c6ypWCXJ7+H7yru5F9HBd00osXLPj4D8AwAhi/Uw
b6+du5ELf31uhWTpPOH5hRzj9k+vUfHofmPb38I8B3gSF5IeGox5Dkss1JXiPEH7
e4GYFsmdwwIDuCbvstXIfNUSYl9wetS/rAJLyCGowIBDzGM=
-----END CERTIFICATE-----
Generated at Mon May 12 10:35:32 2025 by rpki-client