Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: 82M6NBY2NXJag1bXyGH7SgtsgqtBRT1ZH7XHTiX3qvM=
Subject key identifier: 74:CB:13:D2:57:03:F5:63:8D:C5:6B:66:20:FE:17:09:F6:60:B2:2A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1CF5263D4B24B944DC87DBC796942C675AFE688C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212238.roa
Signing time: Fri 11 Jul 2025 00:01:06 +0000
ROA not before: Thu 10 Jul 2025 23:56:06 +0000
ROA not after: Fri 10 Jul 2026 00:01:06 +0000
asID: 212238
IP address blocks: 141.11.164.0/24 maxlen: 24
194.60.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f5:26:3d:4b:24:b9:44:dc:87:db:c7:96:94:2c:67:5a:fe:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 10 23:56:06 2025 GMT
Not After : Jul 10 00:01:06 2026 GMT
Subject: CN=74CB13D25703F5638DC56B6620FE1709F660B22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:8f:55:85:79:4d:fb:36:61:39:ae:3d:c6:
92:5a:e0:a0:56:a0:1a:fb:78:e5:01:e3:d2:c7:33:
e4:bb:08:a6:97:0a:8c:4e:ba:da:3e:5a:97:71:1c:
74:85:6a:1d:05:23:1d:c3:27:09:b2:7f:01:5d:b8:
1b:cf:7a:96:ce:60:54:ae:81:31:da:8f:8f:3d:16:
08:fe:cd:e9:4e:16:28:e7:a5:21:d1:1b:76:39:8f:
00:47:db:d1:c8:e0:80:18:e2:b7:b8:0f:e4:03:5c:
7e:9c:b2:02:f2:a3:e6:45:e8:ee:ba:fd:80:a3:e5:
8e:3d:57:49:bf:78:61:e6:98:65:46:ca:19:f3:2f:
e6:97:c5:4b:4b:75:fb:dd:18:33:4f:d6:d0:35:f2:
dd:06:89:83:12:64:f0:20:d9:c3:b1:10:84:fb:1c:
24:6d:2e:01:9b:7e:6a:6a:27:b7:67:a3:44:ca:b7:
d7:ad:47:e9:1c:38:a6:25:30:62:ff:fa:3f:7c:f7:
71:4e:78:f8:90:bf:1e:05:37:f7:77:ce:82:ea:12:
37:f8:4f:e1:dc:84:f3:48:ef:09:65:d0:69:d5:53:
23:23:7a:f4:54:af:77:2f:7b:8c:bf:cb:19:c9:91:
39:e0:fa:95:30:87:3c:c9:2a:9d:46:48:17:b7:27:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CB:13:D2:57:03:F5:63:8D:C5:6B:66:20:FE:17:09:F6:60:B2:2A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.164.0/24
194.60.93.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4e:42:bc:d0:a0:27:61:40:d9:14:40:72:b6:1c:38:be:26:
f4:17:af:15:2e:43:69:79:25:ff:fb:31:3b:cf:a0:76:9a:b3:
45:d7:31:6a:da:64:4d:e0:bd:ea:5e:b1:c8:5f:e7:45:09:43:
ee:d4:d5:67:0a:20:10:df:b6:85:fd:d3:1e:a8:2a:e4:e9:da:
4b:10:43:db:dc:a5:93:6a:51:3c:a9:51:58:01:e4:6c:ac:f2:
fb:78:a4:0e:7f:f0:5f:f7:d6:a2:d0:7f:1f:08:31:d8:d7:c9:
b9:b5:f3:ea:1c:09:78:7b:e3:af:bc:10:9f:b0:97:40:43:bf:
68:c0:16:65:4b:56:2d:48:7e:a1:13:de:28:91:d1:7d:3a:57:
7d:45:a4:9c:71:cf:b1:10:92:52:3e:65:ae:b8:71:4a:ea:cf:
06:ad:0a:61:33:4d:c6:68:a6:01:de:b3:47:5f:f4:3a:c9:06:
82:9c:c3:8b:d7:e3:ec:25:be:f3:29:e6:07:34:4d:ad:54:94:
9c:21:56:a5:6d:1a:36:8b:b3:4c:51:cc:66:f4:66:bb:2c:a4:
bf:63:19:38:f8:67:b0:06:aa:05:4a:69:1f:46:2b:f2:5e:cf:
ff:c6:d2:56:78:89:96:9c:8f:16:8f:9d:4a:48:29:a5:eb:70:
91:a9:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:15 2025 by rpki-client