Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: PbsHueR7zO2ZV1Ygr5DhwOkbUbuc1Do0F+MsqXV1oY8=
Subject key identifier: AF:42:33:A0:FC:75:1A:BB:1A:9C:1B:A2:A8:58:4B:B1:01:54:49:D7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6C5B6FF899F4F9FECFA8176653DA0DA97EF39E8E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa
Signing time: Fri 06 Jun 2025 02:05:03 +0000
ROA not before: Fri 06 Jun 2025 02:00:03 +0000
ROA not after: Fri 05 Jun 2026 02:05:03 +0000
asID: 137517
IP address blocks: 141.11.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5b:6f:f8:99:f4:f9:fe:cf:a8:17:66:53:da:0d:a9:7e:f3:9e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 6 02:00:03 2025 GMT
Not After : Jun 5 02:05:03 2026 GMT
Subject: CN=AF4233A0FC751ABB1A9C1BA2A8584BB1015449D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:80:f9:35:cf:18:cd:16:99:42:90:b7:96:
fc:2e:33:ce:cb:40:53:88:c6:ee:a6:d1:89:bc:5f:
aa:54:9a:48:2a:00:b6:67:85:ff:66:d3:7b:b2:42:
f8:15:eb:db:ce:29:5c:2f:bd:db:83:c7:e9:d0:3a:
a5:cc:fd:d8:69:74:e7:12:ae:e6:ae:38:6c:98:4e:
80:8d:43:9e:62:13:01:73:c3:98:a5:c6:21:f2:69:
ff:98:72:b0:3d:ea:70:77:fe:d6:20:e1:57:7b:a1:
ce:1b:57:55:cb:3c:2a:8a:08:a5:72:94:06:cc:cb:
12:3e:85:06:43:f3:e7:e5:4f:3e:5f:5a:69:12:d2:
28:20:46:fc:8b:6e:20:33:77:ad:90:53:f6:52:4f:
e2:64:3e:3f:41:45:76:b8:15:3b:73:db:72:2a:f4:
5b:af:d7:81:92:42:76:05:e8:b4:f7:08:e3:1d:23:
56:09:80:8e:0f:1a:bc:58:61:9e:cf:f9:0b:09:f9:
ab:94:9f:29:d3:8e:8b:58:e0:c7:64:0d:4b:c0:eb:
63:68:58:dc:1a:cd:62:6d:e6:af:a8:81:53:dc:2b:
ad:25:5c:87:5c:bc:25:e7:aa:12:6a:55:2e:02:b7:
60:ba:1b:b1:de:3d:e9:9e:34:a6:0d:85:71:75:3e:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:33:A0:FC:75:1A:BB:1A:9C:1B:A2:A8:58:4B:B1:01:54:49:D7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7a:96:a8:9f:3f:54:a5:ed:e7:5b:1c:52:cd:7a:d8:fa:b4:
0f:46:8f:ae:af:c8:91:d7:7a:d6:45:6e:72:70:7e:ea:6b:6b:
a8:4c:3f:8f:e7:d7:39:6f:eb:9d:57:49:ff:fb:73:02:8c:ed:
2d:79:76:58:00:cc:5c:83:79:1e:30:97:1c:4f:a2:7c:76:a9:
7f:19:8e:84:13:bf:38:26:8b:fb:91:11:aa:fa:f3:fb:a3:17:
e9:28:29:49:97:f8:fe:28:20:e5:76:2d:75:dc:b2:fe:16:ce:
aa:22:c7:5e:5e:a5:d7:d7:28:8d:00:97:71:b4:bb:cf:18:fd:
c0:38:d0:34:1f:af:10:86:e2:bb:47:a5:21:6d:d9:a4:e1:11:
fd:00:cf:36:62:bc:51:80:28:5b:5c:d9:a5:4c:a7:92:f7:60:
a2:8a:1d:fb:c6:53:c9:fa:54:02:c0:a3:ff:25:d1:f7:3c:6d:
4d:38:a9:e6:a3:9b:7b:af:48:48:36:9a:35:1d:b7:ee:63:f6:
ee:37:7f:4e:73:a9:92:9e:50:fa:bf:9a:0e:f3:9a:92:84:52:
44:ef:29:a2:db:f6:a7:95:d1:75:5e:53:e1:3f:37:28:15:32:
69:40:bc:14:ea:e9:16:8e:a1:df:ff:a3:86:c8:2a:5f:f2:c0:
0f:49:15:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:38:06 2025 by rpki-client