Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS135391.roa
File: AS135391.roa (raw, json)
Hash identifier: Ne02se5M43SNFqLRm9/ZjJYJ2oUCCON5F3FJ+XFsBgA=
Subject key identifier: 2D:A4:98:51:51:44:E8:90:F9:C7:14:3C:DB:0D:DD:44:2E:75:62:7A
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 42C750F6F3693CC70A98C14C65249563DBC539F1
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS135391.roa
Signing time: Tue 22 Apr 2025 02:02:26 +0000
ROA not before: Tue 22 Apr 2025 01:57:26 +0000
ROA not after: Tue 21 Apr 2026 02:02:26 +0000
asID: 135391
IP address blocks: 193.187.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 09:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c7:50:f6:f3:69:3c:c7:0a:98:c1:4c:65:24:95:63:db:c5:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 22 01:57:26 2025 GMT
Not After : Apr 21 02:02:26 2026 GMT
Subject: CN=2DA498515144E890F9C7143CDB0DDD442E75627A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:c1:1c:97:f6:64:5b:5a:04:c7:35:00:93:
ad:0b:a6:5e:75:63:dd:89:50:94:cb:db:dc:8d:31:
21:93:c9:b1:21:e5:0b:1b:fc:51:09:a0:b6:da:65:
4a:c5:68:5f:f0:23:6d:f1:02:64:a0:e2:cc:26:78:
8d:19:a4:93:6f:43:03:82:98:0c:78:ef:9b:42:6f:
83:eb:44:5e:cf:6d:05:e6:ec:89:10:06:85:da:c3:
1a:bb:f0:89:fb:e4:86:a3:b6:92:5d:f3:fc:bf:10:
4a:3f:26:1b:83:af:95:ee:07:cb:e1:bc:ab:56:d4:
a4:c5:bf:a8:dd:f0:82:28:69:e0:16:69:89:de:48:
9c:69:85:73:26:a9:e4:3c:12:3b:95:54:13:43:43:
b0:f2:64:1a:ef:b2:bb:4b:80:27:99:d7:08:fe:74:
33:95:19:c7:51:75:c3:31:b3:7a:ed:35:e4:5e:88:
67:42:f3:fd:54:22:19:92:0c:7f:46:f2:b7:ee:64:
55:4f:2f:d5:a5:fb:ab:77:f9:c9:32:e3:b3:1b:2d:
d8:bb:e5:a4:29:96:b8:19:1f:78:5f:ad:40:f4:3c:
98:e2:f1:85:55:1b:90:eb:06:85:d5:70:0a:aa:70:
41:61:57:8b:ae:1d:c2:dc:ed:34:76:dc:48:68:66:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:98:51:51:44:E8:90:F9:C7:14:3C:DB:0D:DD:44:2E:75:62:7A
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS135391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.133.0/24
Signature Algorithm: sha256WithRSAEncryption
72:68:35:ba:eb:e8:93:98:12:98:19:5d:45:2a:16:a3:31:a0:
be:d0:02:5a:ac:95:4a:12:bb:8a:ff:7e:1a:68:6e:2a:dd:8b:
8f:c3:02:29:45:53:65:21:ae:97:40:9d:5f:93:99:87:ba:dc:
3a:1d:c2:0d:61:82:77:54:7b:36:d0:24:99:ae:e9:88:75:94:
57:1e:cd:1b:d0:5b:20:41:82:fd:e2:73:e2:2b:1f:f1:f2:6a:
60:bc:d0:15:d2:6f:f9:fb:00:45:30:f0:99:b1:7a:fe:51:3f:
a6:bf:48:ae:48:0f:b5:12:41:7c:3a:fa:fa:0c:35:b9:59:1a:
bc:c0:ab:86:19:65:9a:aa:58:9a:1b:50:71:36:e7:c8:07:a2:
57:87:7b:56:0c:3f:24:81:a8:ca:fd:99:a0:0f:5c:5d:e7:3e:
8d:99:ea:85:82:62:cb:1c:d5:f2:cf:ab:c0:fd:fe:60:c3:49:
01:95:ba:cb:40:2e:bf:1d:af:06:7a:01:7f:ba:af:7e:71:4d:
a5:6d:74:c9:49:7c:24:2f:e9:85:da:25:7f:a6:c6:e3:3c:ad:
f4:7b:69:4e:91:83:0b:9c:8b:c3:18:f9:b4:7d:e9:2b:65:8a:
b0:f6:ce:a9:30:27:32:d1:4d:1a:ce:75:54:e1:bf:f7:0d:8f:
65:bd:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:31:03 2025 by rpki-client