Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
File: AS46829.roa (raw, json)
Hash identifier: Y980vvnztImffqXgFnMroZNZtyEYlCn7WHzzYiPr4Yc=
Subject key identifier: 97:27:F8:26:78:30:21:E9:E9:27:70:89:50:7B:B6:69:1C:04:D4:7E
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3AE1C3B9937C5270FDFBF83EE6C516082FB2BBB5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
Signing time: Mon 05 May 2025 05:54:05 +0000
ROA not before: Mon 05 May 2025 05:49:05 +0000
ROA not after: Mon 04 May 2026 05:54:05 +0000
asID: 46829
IP address blocks: 141.11.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 12:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e1:c3:b9:93:7c:52:70:fd:fb:f8:3e:e6:c5:16:08:2f:b2:bb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 5 05:49:05 2025 GMT
Not After : May 4 05:54:05 2026 GMT
Subject: CN=9727F826783021E9E9277089507BB6691C04D47E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:3d:a1:a7:71:b0:42:92:39:03:cc:13:e6:
fd:e5:c0:aa:09:f7:6f:7c:22:48:c1:59:50:65:66:
e5:6d:fe:2d:80:c2:6e:c9:44:73:46:6d:63:6c:25:
ad:75:94:86:20:ee:a0:f2:7b:93:a1:7b:24:40:ff:
89:99:5d:1f:b1:b7:f7:c7:eb:31:ac:9a:d9:68:c7:
18:ff:3e:04:cc:4b:a5:92:f4:c5:e5:77:5a:ee:6b:
4f:04:7b:ea:ba:bd:c7:f3:b7:44:9e:c5:a4:a3:83:
51:9e:08:fa:38:21:18:93:81:61:86:17:92:e8:eb:
0f:4d:c9:0b:48:71:b5:c3:af:62:ad:2c:f7:d3:ca:
38:8e:aa:52:c3:51:94:0a:a8:40:97:89:54:71:62:
47:82:14:3a:13:cd:78:86:5b:34:5e:af:f3:41:b4:
00:99:44:d6:45:34:86:4b:9c:60:72:18:32:e7:9b:
dd:44:0b:db:c8:6a:96:1f:7a:b8:17:0d:7a:0b:83:
32:fc:ac:c4:83:bb:ab:3f:fd:1f:ce:43:51:e7:69:
96:44:39:a9:fd:e3:15:41:89:b7:0f:08:39:3f:87:
a5:73:bf:c2:8d:36:fb:3a:aa:9c:0a:5b:74:ae:34:
55:69:34:8d:ff:49:6e:99:43:0c:f3:de:90:80:94:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:F8:26:78:30:21:E9:E9:27:70:89:50:7B:B6:69:1C:04:D4:7E
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.50.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:44:c6:f1:7b:c4:e1:e6:09:22:35:a9:37:57:2a:56:13:a8:
e1:0a:fa:31:a4:83:89:66:47:5b:0a:27:4a:ac:b5:0b:ca:a5:
67:1f:c6:73:cb:f4:96:04:91:e6:d4:80:10:5d:12:da:64:61:
72:23:2e:25:60:38:16:6f:32:6e:84:b8:8c:25:d5:ee:a8:cb:
17:68:cf:b8:95:2d:88:4f:fe:84:af:40:dd:f4:e0:a0:57:41:
48:61:48:18:d2:b4:ce:d6:d0:27:cb:aa:a6:54:28:5c:03:a4:
c0:47:6f:8a:f9:fe:d6:79:fa:42:5e:ee:57:74:db:17:0a:65:
ed:be:f4:5d:d3:ed:93:db:46:f1:fb:a5:81:20:5d:39:67:23:
b4:0a:ad:9e:6a:d4:1b:0d:00:ed:12:54:e9:da:b5:f4:50:bf:
0b:1c:63:a1:3d:36:21:30:81:47:e3:34:e8:1e:e5:f3:91:b2:
04:5d:8c:f5:8e:34:f6:b1:23:70:f8:79:86:d8:01:50:cf:8a:
b5:20:58:f2:91:32:c1:81:4b:d6:73:07:8e:cf:04:8d:59:84:
f5:32:c6:6f:05:53:c1:36:60:4e:3f:5c:00:a1:61:9f:a1:4f:
5a:a5:b9:5c:f5:a0:9d:1a:ac:9d:00:1f:36:ad:40:a4:06:45:
19:98:6c:62
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUOuHDuZN8UnD9+/g+5sUWCC+yu7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA1MDUwNTQ5MDVaFw0yNjA1MDQwNTU0MDVaMDMxMTAvBgNV
BAMTKDk3MjdGODI2NzgzMDIxRTlFOTI3NzA4OTUwN0JCNjY5MUMwNEQ0N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Hj2hp3GwQpI5A8wT5v3lwKoJ
9298IkjBWVBlZuVt/i2Awm7JRHNGbWNsJa11lIYg7qDye5OheyRA/4mZXR+xt/fH
6zGsmtloxxj/PgTMS6WS9MXld1rua08Ee+q6vcfzt0SexaSjg1GeCPo4IRiTgWGG
F5Lo6w9NyQtIcbXDr2KtLPfTyjiOqlLDUZQKqECXiVRxYkeCFDoTzXiGWzRer/NB
tACZRNZFNIZLnGByGDLnm91EC9vIapYfergXDXoLgzL8rMSDu6s//R/OQ1HnaZZE
Oan94xVBibcPCDk/h6Vzv8KNNvs6qpwKW3SuNFVpNI3/SW6ZQwzz3pCAlBLdAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUlyf4JngwIenpJ3CJUHu2aRwE1H4wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDY4Mjkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGNCzIw
DQYJKoZIhvcNAQELBQADggEBAMFExvF7xOHmCSI1qTdXKlYTqOEK+jGkg4lmR1sK
J0qstQvKpWcfxnPL9JYEkebUgBBdEtpkYXIjLiVgOBZvMm6EuIwl1e6oyxdoz7iV
LYhP/oSvQN304KBXQUhhSBjStM7W0CfLqqZUKFwDpMBHb4r5/tZ5+kJe7ld02xcK
Ze2+9F3T7ZPbRvH7pYEgXTlnI7QKrZ5q1BsNAO0SVOnatfRQvwscY6E9NiEwgUfj
NOge5fORsgRdjPWONPaxI3D4eYbYAVDPirUgWPKRMsGBS9ZzB47PBI1ZhPUyxm8F
U8E2YE4/XAChYZ+hT1qluVz1oJ0arJ0AHzatQKQGRRmYbGI=
-----END CERTIFICATE-----
Generated at Tue May 6 05:00:48 2025 by rpki-client