Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS142046.roa
File: AS142046.roa (raw, json)
Hash identifier: iY3n7jWMaAOqRibi/iwts8RMg4jwKPpFPK0DWNhU+XE=
Subject key identifier: BB:65:46:6B:E0:EB:43:D5:CB:12:64:BA:AA:9E:0D:05:A3:88:CC:35
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0A17332CC6FBC0004CD60EB380F9188A6C0D30A5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS142046.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 142046
IP address blocks: 2a0f:85c1:298::/48 maxlen: 48
2a0f:85c1:393::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:17:33:2c:c6:fb:c0:00:4c:d6:0e:b3:80:f9:18:8a:6c:0d:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=BB65466BE0EB43D5CB1264BAAA9E0D05A388CC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:08:82:a9:85:da:a8:6b:2c:6b:c0:9e:41:
21:e8:7c:65:95:76:d5:b3:3c:ac:0b:f2:d5:ac:f2:
88:a0:e6:99:9f:de:b9:91:ad:4e:41:f9:64:1a:38:
fc:48:93:92:fb:0d:fb:99:75:0d:50:d0:ae:47:bc:
1b:c4:8e:96:8e:44:b1:21:39:13:77:87:f2:26:7a:
82:32:f1:54:e1:f0:9b:ba:0c:f7:8f:8d:c4:91:28:
be:86:2a:ee:f6:25:43:69:cc:42:4d:56:e7:9e:a1:
e6:1d:a7:68:c0:1c:e6:d5:71:fd:05:e3:30:c2:5c:
8b:90:8d:5a:c8:7e:be:e8:6d:6b:e7:1f:d9:ff:72:
d8:ed:bd:59:b4:a2:ba:92:f7:a4:eb:85:06:85:e0:
21:67:8c:4a:b3:58:6b:25:21:c9:b6:fa:c1:75:c5:
e7:20:2f:af:59:4f:5b:2f:a0:64:a0:77:f2:0a:3f:
d9:4b:2d:63:b3:df:8c:90:eb:1f:a5:d4:51:41:09:
f0:9e:8f:17:6c:fc:c9:77:bf:ae:82:a9:43:5d:30:
3d:e0:ae:3e:de:e3:39:47:e8:de:d5:1b:9d:98:d0:
2c:20:80:2d:2b:9f:2f:dc:99:63:b3:07:69:3c:9f:
21:2e:52:b4:7c:a0:63:ee:0c:4f:88:55:b9:f4:56:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:65:46:6B:E0:EB:43:D5:CB:12:64:BA:AA:9E:0D:05:A3:88:CC:35
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS142046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:298::/48
2a0f:85c1:393::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a9:94:6b:4b:97:7a:44:2e:c0:02:c7:1f:eb:8a:5e:6a:09:
b8:95:94:09:e4:00:b8:96:1f:7d:00:c8:aa:f1:5b:ca:a1:42:
20:c4:35:1c:14:fa:96:1e:92:1c:69:ad:ef:28:2c:e3:a9:97:
4f:30:43:d1:d4:4b:86:fe:7f:34:73:1f:7c:37:18:0a:ca:b8:
0a:c7:ac:38:f8:9b:97:8b:cc:15:da:40:a7:c9:29:80:a3:a2:
21:28:62:89:46:e9:82:4a:9b:65:a7:60:88:cd:92:43:24:78:
95:dd:5e:c2:1c:8f:5a:53:4a:c8:13:ce:98:c2:b7:51:f8:3f:
e8:56:8e:e9:ec:7c:08:88:9f:a8:c7:24:86:18:a0:c9:dc:ce:
36:b2:6b:42:1b:ac:e4:44:d8:54:cf:dd:b5:32:7a:72:b7:0b:
b5:d3:b2:80:6c:b8:9f:59:6f:3a:cf:06:9d:37:56:1b:f1:8d:
9a:a1:69:92:9e:9e:2c:39:1b:c7:18:6a:7c:18:67:79:29:be:
c6:0c:b8:b0:0b:5a:b1:ab:a7:04:5c:e7:00:d5:60:52:df:06:
39:7b:b0:48:7b:a8:4c:58:54:4b:53:79:c5:56:9b:44:3b:77:
94:63:b5:4f:2c:71:26:2e:61:fa:dc:f8:24:79:40:6f:4f:3b:
49:ea:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:10 2025 by rpki-client