Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213690.roa
File: AS213690.roa (raw, json)
Hash identifier: RsFXmTvfeMTGwbLyTRBp9Ofu16E3+zO67QtdxxQb/Is=
Subject key identifier: AE:B9:9B:24:DE:02:89:EC:69:00:49:A2:EC:83:C9:87:7F:3E:62:2B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 73D48E1423F80E25992A6EAC73AA4995D6BB7E02
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213690.roa
Signing time: Mon 07 Jul 2025 12:25:49 +0000
ROA not before: Mon 07 Jul 2025 12:20:49 +0000
ROA not after: Mon 06 Jul 2026 12:25:49 +0000
asID: 213690
IP address blocks: 45.231.207.0/24 maxlen: 24
181.214.57.0/24 maxlen: 24
181.215.0.0/24 maxlen: 24
181.215.28.0/24 maxlen: 24
181.215.34.0/24 maxlen: 24
181.215.48.0/24 maxlen: 24
181.215.180.0/24 maxlen: 24
191.96.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d4:8e:14:23:f8:0e:25:99:2a:6e:ac:73:aa:49:95:d6:bb:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 7 12:20:49 2025 GMT
Not After : Jul 6 12:25:49 2026 GMT
Subject: CN=AEB99B24DE0289EC690049A2EC83C9877F3E622B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:c8:dc:61:7c:dc:f9:e4:b9:77:94:89:53:
55:a5:e5:6e:b6:2b:44:be:e8:90:21:e2:35:ca:b1:
d9:c3:70:6b:74:91:49:9a:6e:92:5b:c7:71:61:2a:
fd:33:54:56:43:56:94:c0:d0:b3:03:93:82:38:75:
94:a1:dc:d7:0b:db:c1:c2:7d:16:c5:e9:c7:58:25:
31:6a:0b:24:c5:bf:a7:58:54:da:d7:42:86:c7:7a:
0c:b3:87:14:ba:a9:66:06:df:2c:1c:55:84:ea:43:
71:ee:af:84:24:2a:27:31:5d:80:99:53:ca:a8:0e:
18:3f:9a:ef:0c:1f:42:1a:88:fa:c7:4a:2b:b7:cf:
2c:7c:cd:ae:d3:1d:af:fa:de:bd:70:ec:cf:e6:de:
ba:2e:d7:0b:b3:47:b5:f8:fe:8d:bc:cd:ac:e1:53:
52:7f:ba:ea:a2:ac:6d:d3:b2:fa:52:ed:b7:d5:0a:
1c:f6:bf:bf:88:4c:38:55:58:61:2f:bf:b6:b4:17:
90:5a:6b:cf:22:56:9a:25:c4:e0:1d:d0:c0:66:ec:
7c:b1:88:61:96:70:65:eb:64:49:b9:6f:be:58:00:
45:ac:70:f6:5f:73:3a:71:38:98:1b:a1:59:85:30:
93:93:f0:f1:57:81:38:24:12:14:cc:9f:fc:7c:1d:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:9B:24:DE:02:89:EC:69:00:49:A2:EC:83:C9:87:7F:3E:62:2B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.207.0/24
181.214.57.0/24
181.215.0.0/24
181.215.28.0/24
181.215.34.0/24
181.215.48.0/24
181.215.180.0/24
191.96.137.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e9:e1:20:60:be:bd:90:04:84:db:7e:07:ed:bc:7e:51:8c:
f9:16:63:ee:c1:71:57:cf:ed:de:95:05:98:e2:6e:ec:c8:fb:
8c:7a:6f:7b:be:cf:94:4c:79:e2:82:77:18:71:92:e1:30:1e:
33:ee:c6:b5:04:93:da:97:6b:59:fe:3c:99:e4:13:8e:7b:e2:
5e:d6:89:81:74:3f:ca:fd:11:ff:bc:d5:cb:82:44:1e:c8:06:
f9:10:be:32:dc:c2:1b:13:e3:05:7e:46:f2:70:dc:e2:ac:45:
94:9d:40:6c:ff:f0:03:06:d8:b6:9b:97:66:1b:13:53:3e:a0:
11:a2:86:74:d5:7c:ee:b9:b2:12:69:d8:9c:0b:1c:47:f0:18:
b2:91:0c:5e:28:27:68:44:df:fa:a8:c3:f9:d7:19:ac:f1:9c:
16:38:41:7e:01:87:89:20:fb:f3:aa:f5:0b:31:0e:2c:8b:26:
0a:a8:be:01:46:a0:25:cd:df:55:27:2f:06:60:9f:af:19:1a:
91:20:c8:61:99:b6:f9:fa:94:b7:7e:5f:73:88:5e:6c:78:1f:
bd:47:38:1b:57:b9:8a:d2:50:db:1b:51:fc:74:04:f2:4d:89:
5a:15:c6:fe:39:6c:99:32:65:6a:e6:36:e8:54:b6:8a:f8:33:
f0:39:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:27:03 2025 by rpki-client