Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401243.roa
File: AS401243.roa (raw, json)
Hash identifier: FUe4V23XVVfQitcV7Ig1aj0/BNvwhf2IO1UoegUmigw=
Subject key identifier: 88:C7:0A:6E:D5:35:6E:41:F2:62:3F:AB:F3:45:4D:70:D8:B9:8C:ED
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5C9A9DC30B802CA2EB3A602515335753110A11F8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401243.roa
Signing time: Sat 21 Jun 2025 07:03:36 +0000
ROA not before: Sat 21 Jun 2025 06:58:36 +0000
ROA not after: Sat 20 Jun 2026 07:03:36 +0000
asID: 401243
IP address blocks: 141.11.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9a:9d:c3:0b:80:2c:a2:eb:3a:60:25:15:33:57:53:11:0a:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 21 06:58:36 2025 GMT
Not After : Jun 20 07:03:36 2026 GMT
Subject: CN=88C70A6ED5356E41F2623FABF3454D70D8B98CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:5b:46:c3:6f:0b:53:ed:5f:88:b4:8a:50:
d0:cb:9b:13:59:d1:45:cb:ad:38:32:7a:85:4d:70:
f1:8d:f3:a7:9b:46:1a:e7:39:92:47:39:bb:0b:c9:
8c:fa:41:b0:45:c3:bf:d4:bb:a6:c7:de:be:26:c0:
d1:94:fc:c2:10:6b:d1:2b:28:1c:a6:ab:61:4e:a8:
ce:cb:c8:5b:0e:44:74:f7:11:a1:6f:51:8c:d0:16:
d9:a1:fc:92:88:74:30:d6:14:68:af:3c:38:1e:d0:
e4:ab:ab:cd:0e:33:f0:5a:92:be:cb:9d:58:e0:92:
ec:e4:dd:2d:70:89:19:10:5a:e0:13:ee:59:01:c4:
ea:07:e3:0e:1d:f7:e5:38:01:0b:d9:bd:17:53:54:
a3:5a:58:64:6a:69:b2:85:80:a7:d6:be:ee:8e:e4:
1b:3b:75:34:ad:2b:43:11:ed:9d:ec:a6:81:f1:7b:
33:6b:9e:a5:c1:c2:21:b4:84:00:01:b1:d7:a8:f5:
66:2f:d4:44:c2:38:d4:c8:ad:2b:0f:77:aa:9e:de:
e7:1f:f4:51:4b:23:63:74:da:5c:13:eb:95:20:f6:
16:10:fe:5d:1e:bc:7c:5d:b3:0e:76:8e:91:e0:f6:
47:25:e9:43:24:7c:12:df:4f:68:0f:d6:68:e9:c7:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:0A:6E:D5:35:6E:41:F2:62:3F:AB:F3:45:4D:70:D8:B9:8C:ED
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401243.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.46.0/24
Signature Algorithm: sha256WithRSAEncryption
10:58:27:ad:36:04:8f:c7:41:dd:4a:a7:4d:64:1b:2d:60:18:
bd:00:20:58:07:9b:db:0b:b4:04:da:36:64:12:c6:84:5b:ff:
62:b0:cf:95:0d:bc:35:a6:bd:93:09:93:24:0e:24:22:fb:56:
43:3e:65:d0:36:97:ac:24:66:7f:2a:12:c4:c1:4e:a6:e2:9f:
ad:12:68:5e:34:79:68:77:37:b1:da:ad:cc:b0:88:d1:3b:39:
41:a5:0a:32:b8:d1:fc:01:3b:1b:17:59:08:ac:ab:a8:6b:f8:
6a:2a:d9:2d:f5:77:78:3f:b5:84:72:e2:df:24:a7:ed:4d:d5:
86:aa:8c:cd:60:fe:47:1b:a5:ca:a8:ff:bb:80:15:71:e6:10:
91:71:c4:cf:d3:c3:14:58:46:e2:54:d8:27:38:b5:73:de:5e:
2b:c8:5f:42:a4:85:01:7e:6d:47:72:da:0c:5b:87:09:90:5a:
1b:3d:ec:54:19:bf:3b:66:eb:dc:51:d0:57:7e:45:6a:ee:ec:
02:ec:b1:13:af:be:6d:8a:54:90:13:80:7e:2b:9f:38:c3:53:
7e:8e:2f:6b:88:7a:7e:29:d7:ca:0f:c4:5b:29:1e:8a:fb:46:
50:c8:0a:6f:15:4f:86:b0:ca:cc:36:72:c7:ab:2e:72:61:65:
d2:b4:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:38:08 2025 by rpki-client