Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: u+55G5Rilzt519FRmlY2Qi+AQ5+KWJAP0fMx7NcFdVY=
Subject key identifier: 5B:3D:C8:73:4B:49:29:BC:D7:61:D9:3F:87:49:4C:3B:DF:A1:CB:1B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 750918211051D3E2B5934C4AE435EAB6B4B8E1E8
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
Signing time: Thu 26 Jun 2025 14:01:36 +0000
ROA not before: Thu 26 Jun 2025 13:56:36 +0000
ROA not after: Thu 25 Jun 2026 14:01:36 +0000
asID: 7029
IP address blocks: 143.20.144.0/24 maxlen: 24
143.20.146.0/24 maxlen: 24
143.20.148.0/24 maxlen: 24
143.20.151.0/24 maxlen: 24
143.20.153.0/24 maxlen: 24
143.20.154.0/24 maxlen: 24
143.20.160.0/24 maxlen: 24
143.20.165.0/24 maxlen: 24
143.20.170.0/24 maxlen: 24
143.20.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:09:18:21:10:51:d3:e2:b5:93:4c:4a:e4:35:ea:b6:b4:b8:e1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 26 13:56:36 2025 GMT
Not After : Jun 25 14:01:36 2026 GMT
Subject: CN=5B3DC8734B4929BCD761D93F87494C3BDFA1CB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:3d:d7:ce:db:7a:c6:4f:07:72:b2:77:b2:
8d:4f:39:8d:ec:b4:10:45:51:0c:ba:50:ab:05:07:
17:b9:f4:fd:4d:2d:82:d6:ea:30:e7:e4:4d:8b:ca:
df:1e:a7:45:b1:fe:bf:ff:60:e0:99:c0:f2:81:15:
e2:23:7c:e1:e9:7f:3c:8d:a3:cb:74:6a:ad:31:69:
72:d0:af:62:22:74:5a:fd:71:74:50:62:da:d0:13:
4c:e8:43:6e:68:d9:01:01:bb:41:07:d4:e0:ab:55:
9e:4b:27:c8:f9:4f:4b:61:89:99:c2:5b:68:80:6d:
ff:98:73:3e:d4:4f:f8:d1:f4:81:6e:a5:f7:36:7a:
9f:89:dc:3d:24:88:d2:95:d7:9b:37:2b:35:43:94:
76:87:c0:69:b0:99:5e:25:64:37:0c:2c:6c:a0:de:
06:ae:0d:aa:7d:ef:a0:26:07:0a:cc:6a:42:60:18:
9a:3d:09:03:86:89:dd:6b:fc:b3:b9:4d:4b:21:8e:
2f:eb:bd:be:94:2b:bb:3c:41:d8:41:c8:8b:9a:4f:
cd:dd:32:30:48:c1:42:ab:2d:73:1a:1f:ea:6d:ea:
25:92:15:96:9f:17:16:f6:d5:69:09:ad:50:6c:eb:
72:2c:b2:04:9d:13:7b:b6:b4:f3:d6:87:9a:be:86:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:C8:73:4B:49:29:BC:D7:61:D9:3F:87:49:4C:3B:DF:A1:CB:1B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.144.0/24
143.20.146.0/24
143.20.148.0/24
143.20.151.0/24
143.20.153.0-143.20.154.255
143.20.160.0/24
143.20.165.0/24
143.20.170.0/24
143.20.174.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4d:07:cc:8a:7a:45:48:bc:b7:96:8d:63:e5:5c:ce:05:63:
80:3a:46:cb:12:7b:91:97:ca:a8:18:dd:a8:2c:ef:01:21:0d:
a5:1a:63:c8:e2:d0:30:61:01:e8:2c:a5:ee:50:44:df:16:2e:
ac:60:a7:64:01:d0:0e:1e:5c:fd:bb:67:c8:0a:b1:c2:5c:52:
c6:47:70:96:0f:77:eb:79:b2:0b:9e:d6:87:f7:b6:9c:64:3f:
8b:12:24:d1:a9:e4:a8:80:de:fe:79:50:61:c0:4e:7b:b2:79:
58:f5:1a:33:71:d4:e6:e1:80:1c:5f:84:04:42:8b:a8:66:bc:
a9:93:5e:bd:87:26:c2:ea:67:fa:7c:29:46:0e:dd:91:5d:2f:
71:5c:54:85:dc:8b:61:5f:bc:23:dd:e3:8e:18:db:e4:31:d4:
27:61:4a:65:20:50:54:73:98:c4:d3:98:fc:69:2a:4a:05:2c:
95:65:57:16:e5:7f:c3:3e:67:3b:58:e4:08:a0:ff:f2:d2:cb:
84:b0:c5:b0:75:95:8e:4a:bb:99:f8:2c:72:2f:e0:4a:2a:b0:
ca:80:af:8b:96:7d:8d:1a:5d:7d:99:03:b7:37:59:c0:e2:e3:
c4:ac:06:0e:b8:4a:4c:d1:59:03:13:52:c0:06:d3:59:fd:b5:
5a:5b:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:48:35 2025 by rpki-client