Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212669.roa
File: AS212669.roa (raw, json)
Hash identifier: jxsS1GYnYI4vJ4lLzdYqUJbXFKmPJry2xOWcCP/Oxlg=
Subject key identifier: 6A:17:43:33:41:80:03:97:9D:F9:89:1B:09:8D:59:91:2E:F6:AD:2F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5A6E7EAB55EDBB93AFA53C43D530C2B48438CC08
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212669.roa
Signing time: Tue 23 Apr 2024 13:06:54 +0000
ROA not before: Tue 23 Apr 2024 13:01:54 +0000
ROA not after: Tue 22 Apr 2025 13:06:54 +0000
asID: 212669
IP address blocks: 179.61.191.0/24 maxlen: 24
179.61.249.0/24 maxlen: 24
181.214.11.0/24 maxlen: 24
191.101.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 07:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6e:7e:ab:55:ed:bb:93:af:a5:3c:43:d5:30:c2:b4:84:38:cc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 23 13:01:54 2024 GMT
Not After : Apr 22 13:06:54 2025 GMT
Subject: CN=6A174333418003979DF9891B098D59912EF6AD2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:de:3f:9f:a5:0c:28:8a:09:28:7f:d4:07:
83:ad:20:77:73:d3:33:da:5f:78:be:cc:9a:f2:0b:
6e:b4:4b:65:1b:7b:60:b9:b8:eb:71:0e:27:38:75:
7d:87:b3:09:1d:dc:34:46:b9:84:2c:01:a1:a2:56:
40:82:9e:31:c9:71:a3:76:a4:3b:6d:26:89:85:52:
56:a7:e5:4c:4f:ce:fd:3d:9d:1d:76:7f:10:d5:0f:
56:b2:dc:84:fd:b2:87:3c:21:5b:82:2f:73:62:3e:
2b:42:25:43:ae:34:67:4e:12:3d:e1:d3:2f:36:e8:
fa:78:82:06:8d:f9:d1:69:50:94:79:5e:4a:28:fc:
ed:f9:ec:f1:b0:49:a4:ec:df:7c:56:d3:60:9f:76:
93:75:ed:4c:c4:19:54:9a:cf:a4:12:3f:c2:0e:c3:
b8:33:f9:fa:ed:17:37:76:c2:30:1f:15:8d:c7:1a:
6b:60:10:6b:e3:6f:5d:75:fe:ac:1d:fc:0f:f7:89:
93:d3:0c:df:67:86:b4:8d:ef:32:48:32:69:23:81:
bb:a1:ec:61:d4:ef:7c:e8:6a:f1:e4:c6:80:4c:72:
2a:0a:43:48:6c:61:c5:70:60:92:24:7b:af:06:0d:
83:7a:b6:87:b1:92:09:8e:1b:ee:b3:65:86:0a:63:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:17:43:33:41:80:03:97:9D:F9:89:1B:09:8D:59:91:2E:F6:AD:2F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.191.0/24
179.61.249.0/24
181.214.11.0/24
191.101.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bf:00:4d:26:e0:7e:e3:2c:b7:1f:4a:47:c1:24:fc:11:3d:
82:bd:10:39:28:06:05:7e:57:0d:2b:97:a9:24:7a:2f:95:ac:
10:b6:3f:55:89:46:07:41:d3:43:09:05:cd:e2:17:99:f6:17:
47:03:c7:9a:34:1b:8b:ba:f7:78:9f:7b:98:66:f9:3a:a8:ba:
bb:ec:07:dc:f1:3d:e2:4e:16:78:15:a5:a8:10:22:a0:ff:30:
30:44:1e:3f:7a:56:78:40:a6:c8:ae:19:7c:cd:c4:18:7d:62:
c8:9b:6a:4a:c4:0a:5d:df:2c:ac:d8:68:18:31:26:d3:ab:20:
18:ab:fb:d4:61:0c:1c:f6:ff:7a:de:38:c3:8f:4d:ac:b4:5a:
cf:af:87:16:4a:30:d2:dc:b1:d3:8a:b5:45:92:0e:8d:08:dc:
a9:31:6d:ae:9b:41:38:11:9f:0b:f2:63:62:33:54:7f:da:a1:
c3:00:98:b7:0e:aa:f2:12:06:f6:53:d9:b7:22:02:fc:0b:1c:
39:3c:4c:da:76:d8:fa:9a:bc:7c:43:19:93:22:74:e8:7c:79:
38:29:80:e8:9e:c2:9e:18:d6:a7:1d:81:d1:51:3f:e6:44:85:
9c:a4:8f:3c:b0:79:5d:65:a0:1e:1e:a9:b6:97:ac:77:a0:a4:
2e:a6:24:36
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUWm5+q1Xtu5OvpTxD1TDCtIQ4zAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA0MjMxMzAxNTRaFw0yNTA0MjIxMzA2NTRaMDMxMTAvBgNV
BAMTKDZBMTc0MzMzNDE4MDAzOTc5REY5ODkxQjA5OEQ1OTkxMkVGNkFEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdN4/n6UMKIoJKH/UB4OtIHdz
0zPaX3i+zJryC260S2Ube2C5uOtxDic4dX2Hswkd3DRGuYQsAaGiVkCCnjHJcaN2
pDttJomFUlan5UxPzv09nR12fxDVD1ay3IT9soc8IVuCL3NiPitCJUOuNGdOEj3h
0y826Pp4ggaN+dFpUJR5Xkoo/O357PGwSaTs33xW02CfdpN17UzEGVSaz6QSP8IO
w7gz+frtFzd2wjAfFY3HGmtgEGvjb111/qwd/A/3iZPTDN9nhrSN7zJIMmkjgbuh
7GHU73zoavHkxoBMcioKQ0hsYcVwYJIke68GDYN6toexkgmOG+6zZYYKY7URAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUahdDM0GAA5ed+YkbCY1ZkS72rS8wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEyNjY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsz2/
AwQAsz35AwQAtdYLAwQAv2X2MA0GCSqGSIb3DQEBCwUAA4IBAQCMvwBNJuB+4yy3
H0pHwST8ET2CvRA5KAYFflcNK5epJHovlawQtj9ViUYHQdNDCQXN4heZ9hdHA8ea
NBuLuvd4n3uYZvk6qLq77Afc8T3iThZ4FaWoECKg/zAwRB4/elZ4QKbIrhl8zcQY
fWLIm2pKxApd3yys2GgYMSbTqyAYq/vUYQwc9v963jjDj02stFrPr4cWSjDS3LHT
irVFkg6NCNypMW2um0E4EZ8L8mNiM1R/2qHDAJi3DqryEgb2U9m3IgL8Cxw5PEza
dtj6mrx8QxmTInTofHk4KYDonsKeGNanHYHRUT/mRIWcpI88sHldZaAeHqm2l6x3
oKQupiQ2
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:35 2025 by rpki-client