Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: 7A1YMd6WCl6E5c7414uG6/pf2CYdvMoUff/gFEhpCD8=
Subject key identifier: 91:27:30:E8:D5:F4:9B:16:60:D6:00:E7:51:4C:CC:7A:C3:69:5A:9B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4F7066C78BAC0D45EEA188191373209B5EDDF74E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138997.roa
Signing time: Tue 17 Jun 2025 14:54:09 +0000
ROA not before: Tue 17 Jun 2025 14:49:09 +0000
ROA not after: Tue 16 Jun 2026 14:54:09 +0000
asID: 138997
IP address blocks: 141.11.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:70:66:c7:8b:ac:0d:45:ee:a1:88:19:13:73:20:9b:5e:dd:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 17 14:49:09 2025 GMT
Not After : Jun 16 14:54:09 2026 GMT
Subject: CN=912730E8D5F49B1660D600E7514CCC7AC3695A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:d4:44:bb:c8:1a:b7:02:07:04:2b:5e:04:
81:95:61:41:5e:8c:bb:65:ec:a2:4f:5c:05:d4:a2:
22:4a:7d:93:9e:e7:73:e6:d1:54:45:de:df:27:1a:
87:db:ee:aa:42:84:be:bc:8e:77:27:7a:84:c5:6c:
44:da:b2:19:cb:23:8d:45:8b:3e:40:ed:2d:92:a9:
52:f7:ba:96:71:08:1e:c3:0d:17:e1:b9:75:2c:ae:
94:fc:cd:a5:21:06:12:de:d9:5c:94:5e:4e:cb:c1:
7f:19:d4:8f:62:00:c0:4a:15:97:1c:dc:18:3e:4e:
13:89:6f:80:29:fb:dd:cf:15:17:b5:fe:a2:9f:0f:
18:d1:d6:3f:ab:68:91:2e:3a:f4:d1:aa:48:2a:d5:
1a:3b:b0:69:3a:0d:08:c5:e5:66:da:61:c6:58:b7:
b6:d8:d0:f2:a1:92:d8:04:3e:45:43:09:f9:35:f6:
64:6c:c8:c9:74:e7:c0:ff:a7:d3:8a:2d:ad:0c:51:
a1:a2:b8:ed:72:43:b8:b4:52:52:2c:ed:d6:60:b9:
74:25:5a:d4:a1:a1:d9:71:31:7c:dd:d3:e1:9a:58:
3a:84:10:a7:91:22:c2:06:12:5e:44:74:36:a3:4c:
3c:3e:bb:31:69:5a:14:7c:b2:5a:c4:d2:2b:80:75:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:30:E8:D5:F4:9B:16:60:D6:00:E7:51:4C:CC:7A:C3:69:5A:9B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.134.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:1d:11:ba:9a:c3:a6:f8:3a:6d:5f:2a:74:39:94:93:31:2e:
78:20:a4:5e:a2:fe:15:93:8e:4d:dd:36:37:95:e3:e1:ac:bd:
15:6d:50:ee:e5:25:38:1f:ca:cb:42:6b:9b:eb:44:e8:be:a6:
ea:6a:be:d2:d4:a4:ba:62:7d:33:8a:9b:1b:73:0e:bd:8d:0d:
07:20:fd:5a:8b:5e:6a:f9:fa:99:c7:af:77:f7:54:62:fe:e9:
cc:61:e0:08:17:dd:39:dc:04:ec:24:6f:12:3d:62:32:72:f6:
00:8d:4c:7c:55:90:ed:70:d6:61:ab:3a:a2:f2:3c:e4:42:24:
7f:12:a5:fd:a1:a3:b5:4e:96:1b:b2:83:f1:e0:db:ff:5d:26:
2d:50:5c:ed:59:56:8b:b1:72:ac:52:ed:be:97:6f:1e:00:f8:
53:ac:07:6e:a6:3b:04:c8:ba:2a:ef:b4:e7:a0:18:16:fb:e3:
b8:37:63:50:cf:1a:d3:d2:f6:dd:e5:14:63:af:ae:6b:67:53:
34:f0:63:3d:d4:66:f9:4a:da:d1:56:ec:3d:54:39:5c:f7:af:
b1:4b:49:b9:45:59:56:45:45:7e:b2:6d:ac:5c:df:4d:d0:fb:
ec:ef:dc:35:f7:9e:3c:57:b9:0a:28:d1:01:50:6e:ac:ec:42:
db:cf:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:40:08 2025 by rpki-client