Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47952.roa
File: AS47952.roa (raw, json)
Hash identifier: uydfIdU/g+C0wAX5azHpAQHKJboW8gt1uatR1QsLVbI=
Subject key identifier: B2:C5:7E:8D:5F:58:77:A8:6C:42:BF:5B:50:DE:DB:57:8B:05:67:0C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5C106B9705D9D5B37B6946FE8DD4BACA8762B4EB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47952.roa
Signing time: Thu 07 Aug 2025 05:54:13 +0000
ROA not before: Thu 07 Aug 2025 05:49:13 +0000
ROA not after: Thu 06 Aug 2026 05:54:13 +0000
asID: 47952
IP address blocks: 92.112.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:10:6b:97:05:d9:d5:b3:7b:69:46:fe:8d:d4:ba:ca:87:62:b4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 7 05:49:13 2025 GMT
Not After : Aug 6 05:54:13 2026 GMT
Subject: CN=B2C57E8D5F5877A86C42BF5B50DEDB578B05670C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:09:22:e2:51:f5:45:3d:56:c7:4e:24:3c:
e7:0c:bc:24:ea:c9:28:e1:aa:b6:87:e0:43:5d:ea:
97:aa:b7:7c:9d:f4:49:97:8c:46:db:af:b4:ea:f6:
82:b9:db:42:77:1d:74:18:c4:af:9d:bc:41:25:47:
68:90:4d:d8:59:ef:70:70:f0:12:ca:ef:4d:5b:0a:
c7:6e:6c:ca:16:4c:ae:4c:b9:69:cb:79:60:3e:db:
e4:7c:ef:31:ea:4d:ad:6f:09:20:48:22:08:47:67:
14:a8:44:07:c2:b0:a6:5a:05:91:7f:d4:2f:ce:56:
8d:cc:ae:8d:b9:6c:5c:70:bd:b8:b5:b0:25:2c:7f:
86:82:9d:ca:05:7b:a4:e3:3c:e8:83:11:f3:40:67:
dd:53:98:6b:ab:cb:16:ff:c9:bd:2d:6b:7a:cf:91:
c7:23:b9:77:c5:38:f7:f6:2b:a8:53:3c:20:f2:a8:
49:0f:2e:49:94:62:24:f1:45:2a:1a:ac:88:e1:ed:
6e:37:1f:c0:22:80:8f:9e:5b:e0:fe:bb:b2:3e:b7:
57:ba:77:43:e8:65:de:41:64:0b:c4:e5:ab:9a:82:
ae:8a:7c:d3:2b:b2:da:ad:0d:f8:48:f2:50:08:be:
f2:22:68:c7:eb:e6:05:6f:59:88:73:9c:b5:a4:56:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:7E:8D:5F:58:77:A8:6C:42:BF:5B:50:DE:DB:57:8B:05:67:0C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.93.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9d:29:72:ea:32:b6:fd:d8:db:80:dc:b9:c4:7b:8c:9a:e6:
4c:2e:75:5a:19:bb:16:6a:09:db:52:28:9f:78:85:92:26:dd:
15:d1:ca:10:c6:d6:80:0d:21:c2:f0:c2:48:c6:0c:b6:6e:83:
b4:e7:0e:49:30:98:81:d8:7e:c5:5d:13:46:12:82:fa:9e:8a:
14:28:d7:71:c8:a8:04:26:f0:09:48:46:2b:c2:80:f1:1e:72:
7d:67:97:63:1f:f1:e2:85:b0:55:0e:e4:9f:c3:3c:e8:02:3c:
5c:33:fc:df:0f:15:b1:d3:cc:7e:ef:fc:e0:1e:4a:94:3c:51:
00:25:93:5f:76:3c:cb:c5:b8:5e:44:d7:df:f2:8d:c2:ca:72:
32:9a:36:bd:9a:26:60:03:3c:25:15:31:45:a8:4e:4c:ad:ff:
91:c1:fb:9e:88:30:a1:51:98:0f:aa:6e:27:e1:7f:3c:a7:88:
aa:90:b5:55:6a:8b:e8:a5:96:55:92:06:00:48:68:42:da:da:
b3:96:e9:34:3e:69:85:6c:18:46:db:ae:55:09:82:71:30:00:
f5:75:77:d9:d4:fa:b9:06:9b:cb:89:6f:6f:9d:31:14:6b:29:
d7:67:36:c2:de:e4:5d:09:51:da:0f:98:66:db:a9:68:01:6c:
a9:55:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:18:49 2025 by rpki-client