Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS4515.roa
File: AS4515.roa (raw, json)
Hash identifier: QMHbaun5NbbOHeU6BX4ErVvjvgg/JIETuXEMJ2mLJEc=
Subject key identifier: A8:5A:08:6E:A9:B1:1E:A9:05:17:08:D0:20:7D:7D:4C:9D:1B:6E:A3
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 382511199CE39385BCC9BB9A2EA14B98BD5B5203
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS4515.roa
Signing time: Thu 19 Jun 2025 18:28:40 +0000
ROA not before: Thu 19 Jun 2025 18:23:40 +0000
ROA not after: Thu 18 Jun 2026 18:28:40 +0000
asID: 4515
IP address blocks: 143.20.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:25:11:19:9c:e3:93:85:bc:c9:bb:9a:2e:a1:4b:98:bd:5b:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 19 18:23:40 2025 GMT
Not After : Jun 18 18:28:40 2026 GMT
Subject: CN=A85A086EA9B11EA9051708D0207D7D4C9D1B6EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:a1:07:11:eb:47:c7:c1:0e:a4:1b:9f:58:
54:e7:99:88:d1:1f:40:3e:2f:28:4a:9a:28:1d:ee:
97:04:fa:50:89:7d:a3:18:19:25:ea:7c:7f:0c:8e:
e5:3a:43:8e:3d:43:31:8b:0a:90:31:f1:f2:0c:eb:
ac:51:ec:8e:b2:c6:cc:ad:af:54:12:be:ef:9a:00:
6b:63:a3:d2:69:97:fe:3e:24:9f:ab:91:b6:42:28:
d0:50:8e:11:a0:9d:82:0a:75:df:26:b0:19:3b:55:
ed:6f:89:6d:05:1f:1a:eb:67:1c:d2:93:63:9c:18:
20:9b:fc:ab:e2:1c:32:2f:27:ad:b5:8b:5a:7e:af:
4d:53:de:7b:54:4d:8b:3e:e2:ef:8c:da:39:b9:7c:
5b:ee:56:f3:26:74:99:2e:08:40:ee:c6:46:52:c7:
95:e1:86:99:c3:32:7c:9b:7f:99:99:57:4d:67:27:
87:02:92:d5:27:4b:99:7b:75:21:ae:25:ef:df:16:
fb:c7:5a:04:48:6d:4a:32:2d:e5:68:f4:74:ef:1a:
d7:a6:b4:30:fc:ae:96:d3:a0:76:b5:9b:37:08:b2:
4d:c8:a9:6f:61:9c:02:04:70:fe:2d:ca:ef:33:e7:
27:e7:3c:e2:c3:9f:bb:2b:60:82:2d:19:2c:f6:a7:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5A:08:6E:A9:B1:1E:A9:05:17:08:D0:20:7D:7D:4C:9D:1B:6E:A3
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS4515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:97:ed:88:89:aa:eb:68:a1:da:31:9c:23:a5:71:16:7d:44:
b0:35:1b:ce:68:2b:78:b3:46:ca:b8:bd:b5:89:ed:b1:69:1b:
ea:d5:75:da:d2:c7:47:29:12:33:c3:2d:e7:b0:02:9a:47:d2:
70:79:78:b5:45:fb:c9:eb:b1:0d:ea:57:99:e2:3b:e0:5a:73:
8a:cd:c3:aa:bc:48:e6:e1:a3:a9:0d:dd:52:3f:e3:7b:d6:c6:
66:61:b3:fc:83:06:ce:74:18:89:12:bf:88:24:cb:93:00:e5:
8a:82:5b:2b:55:5b:ec:b0:af:46:ba:04:87:91:29:f7:1f:75:
9a:8f:91:10:23:7d:5d:23:86:a4:35:fb:54:4d:33:c4:48:1d:
ef:8c:2a:30:9e:03:b2:be:f3:05:1f:31:d6:27:a8:d9:c8:55:
c2:50:76:71:58:1b:48:90:cf:70:6a:18:b8:a8:12:99:bf:53:
e3:37:ea:ba:e1:5e:44:61:89:15:7b:6e:84:79:45:db:a8:38:
6c:4b:c8:a1:3c:41:80:12:a8:74:17:2f:95:bd:cb:44:01:a7:
27:2d:fe:a9:7a:c7:43:c9:e4:d4:a5:05:bd:cd:a9:a7:c3:24:
14:c5:eb:26:64:9f:8f:a8:17:14:04:bc:e9:da:ba:49:b1:6b:
ec:74:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:02:42 2025 by rpki-client