Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: q6LS689Dyf9tlhXACHxQcGRM0XAax6oiDpXlNQmnonc=
Subject key identifier: 2E:5A:BF:62:C1:3F:D3:3F:05:39:35:CD:9A:F6:25:B8:47:5F:2F:FB
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 01D05FCB272354C06EF4B343914524FF72089158
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
Signing time: Tue 06 May 2025 09:34:16 +0000
ROA not before: Tue 06 May 2025 09:29:16 +0000
ROA not after: Tue 05 May 2026 09:34:16 +0000
asID: 137235
IP address blocks: 176.53.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 09:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d0:5f:cb:27:23:54:c0:6e:f4:b3:43:91:45:24:ff:72:08:91:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: May 6 09:29:16 2025 GMT
Not After : May 5 09:34:16 2026 GMT
Subject: CN=2E5ABF62C13FD33F053935CD9AF625B8475F2FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:68:d2:fa:98:61:11:1e:c9:20:a5:da:02:
f6:3e:e4:5b:6d:20:5a:80:ed:1e:dc:ca:06:f6:46:
db:3e:0f:09:04:55:e9:35:a1:c0:85:d6:95:0b:7c:
21:4b:30:cf:bf:98:41:71:74:46:01:31:0f:a1:d1:
e2:09:62:79:d0:5f:39:9c:2a:04:e8:3a:ac:34:d5:
93:c8:c7:28:4b:92:e3:fe:9b:90:45:d8:2a:ba:1a:
d8:e6:b5:ea:0f:39:ca:fe:d5:a3:e2:d8:63:c9:bb:
4a:3e:b1:47:21:57:ed:42:9b:73:eb:33:d5:be:8b:
5e:a0:8b:e8:10:da:7b:db:ae:be:9c:66:7a:e5:30:
c4:6c:86:c2:bb:22:27:34:aa:2c:de:9e:e9:ac:ec:
3d:aa:d7:d8:df:1d:df:59:36:d0:d6:40:05:41:18:
7d:66:82:e2:5a:07:8a:23:bc:37:a5:e7:4f:2d:ef:
cd:f5:06:e1:d2:6d:d1:32:15:b7:cd:e8:1d:50:f3:
32:eb:65:1b:b7:f8:10:02:69:bb:ba:92:4c:18:58:
7f:61:d8:0a:c7:2c:86:a6:11:33:22:d1:0a:30:d0:
1e:02:b9:82:dc:3f:60:80:5e:9d:80:28:24:3a:fc:
8f:d6:29:ab:88:43:36:0b:ad:31:85:ab:7c:3c:81:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:BF:62:C1:3F:D3:3F:05:39:35:CD:9A:F6:25:B8:47:5F:2F:FB
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
59:00:08:e0:ef:f1:1f:43:7e:fe:be:85:8e:cd:ea:f4:5a:39:
08:4f:23:15:c3:75:b5:a3:82:31:e1:c7:53:de:70:90:df:c6:
15:5d:47:4a:36:29:b5:5b:b3:f0:2f:3d:ad:a4:84:22:50:1e:
29:2f:b6:3f:d0:e7:68:76:38:ac:11:4c:1e:12:cf:ac:0f:ee:
71:0f:3b:0e:55:74:48:cc:11:b1:46:0c:16:53:72:59:f1:62:
e8:df:0a:b7:2a:55:d6:12:a3:28:a0:27:f2:75:2e:ef:0d:c7:
37:80:33:9a:da:50:32:e3:de:09:57:65:b7:82:c3:cd:b8:19:
70:3d:e2:e1:01:d9:fd:3e:c6:f6:bf:a4:8c:36:13:de:e2:cf:
ac:3e:d3:dd:57:cc:79:76:76:50:9b:e4:89:05:17:a4:b7:91:
05:27:c2:d5:21:ae:b0:f8:e1:e0:2a:a9:f9:77:4b:18:3c:4b:
20:56:fe:9a:2e:d9:cf:a4:e5:49:55:9a:89:0b:fc:bf:7e:55:
cd:68:01:27:3a:81:37:a8:ad:d1:15:14:cc:92:fc:15:a2:54:
52:97:e7:ec:54:f6:75:bc:bf:bb:bc:33:c6:94:b4:fa:32:c1:
3e:7c:7e:83:f4:77:93:37:fe:49:3f:02:c6:49:d7:7e:df:c4:
5e:69:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:18:56 2025 by rpki-client