Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212477.roa
File: AS212477.roa (raw, json)
Hash identifier: wh1odNd6sF3kHqbPoBFzFpq90nJSwoawdN6iYC7gQBc=
Subject key identifier: D6:11:B8:21:75:24:09:01:CB:D3:5A:EE:7A:70:95:6A:64:6A:75:1C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 45A0B36102C58A229D7160626166BC17BC15E362
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212477.roa
Signing time: Thu 10 Jul 2025 16:54:13 +0000
ROA not before: Thu 10 Jul 2025 16:49:13 +0000
ROA not after: Thu 09 Jul 2026 16:54:13 +0000
asID: 212477
IP address blocks: 141.11.88.0/23 maxlen: 24
141.11.192.0/23 maxlen: 24
141.11.212.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a0:b3:61:02:c5:8a:22:9d:71:60:62:61:66:bc:17:bc:15:e3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 10 16:49:13 2025 GMT
Not After : Jul 9 16:54:13 2026 GMT
Subject: CN=D611B82175240901CBD35AEE7A70956A646A751C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:b6:57:3e:71:e5:76:c4:3d:92:d5:d8:c6:
f5:69:e3:e3:dd:c2:00:46:02:4d:c7:95:d1:54:d0:
bf:fd:bb:68:bf:f0:9c:3e:83:92:fa:12:6f:d0:f4:
68:cb:7e:c3:e5:b3:3e:16:da:03:43:b2:35:52:2c:
41:37:d3:79:b8:b4:ec:b2:27:8c:da:81:11:60:3f:
ba:33:04:09:dd:f8:6d:cc:dc:e9:da:b2:01:88:95:
c4:c7:bd:2c:2d:5a:c8:8a:57:99:a0:75:a9:62:9a:
47:09:a0:74:8e:d6:83:9c:7a:83:6f:a0:9f:40:78:
2b:0f:f2:c0:6b:66:62:fc:38:6d:6b:68:c2:40:fa:
47:e3:a9:fb:6e:c8:77:63:47:b2:3b:ff:f4:3b:e5:
26:7a:8c:39:f6:da:da:4a:4a:62:ee:7c:8d:93:43:
60:63:72:13:d2:86:6f:c7:fe:c9:c3:eb:0c:d4:89:
70:76:07:f1:8b:78:3f:62:ab:cd:8e:ca:9d:f0:dd:
23:81:1e:6e:78:a8:39:98:e8:01:07:57:94:e1:d6:
1e:51:45:b4:89:6e:f2:18:b4:32:b2:42:eb:68:b5:
a7:d8:09:83:7f:14:a9:b3:ef:0d:ef:d4:21:d2:37:
e3:7f:d9:ef:6b:81:5b:6c:90:f5:3b:55:44:b7:64:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:B8:21:75:24:09:01:CB:D3:5A:EE:7A:70:95:6A:64:6A:75:1C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.88.0/23
141.11.192.0/23
141.11.212.0/23
141.11.228.0/23
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:1c:93:4e:4f:ac:6f:52:99:49:44:09:e7:85:78:30:39:32:
f7:1a:5a:79:8c:af:4a:d1:e8:13:61:27:50:e5:50:69:ae:e8:
cf:64:b1:49:47:ab:92:6a:95:3a:fa:30:6b:0f:e2:6c:76:71:
a6:8f:e7:ff:ac:2e:2e:ff:e8:4a:63:df:a8:58:23:59:83:61:
2b:b7:94:b3:ec:9b:cf:d3:d9:e6:32:09:5c:7e:7f:15:76:2d:
21:0f:4f:79:24:32:39:d1:5d:e0:d2:f1:e2:a0:ee:45:53:e9:
77:0e:6c:88:f2:d0:ee:f3:05:0d:c8:2e:44:b4:f8:7e:bd:a7:
4f:10:d9:1d:28:9c:d7:2c:32:6f:3b:5f:e2:45:e8:1e:35:90:
62:34:e0:45:59:ea:1a:19:ad:8f:99:29:41:ee:1c:c2:d7:4b:
89:66:94:88:26:16:5d:d6:3f:47:13:2f:7a:cc:68:8b:dc:a3:
66:63:2b:33:55:79:de:b3:6c:02:19:bc:95:e9:cc:f1:9d:e0:
f0:fb:85:f4:f6:5c:ee:29:ab:96:56:4d:63:47:01:7c:72:fe:
f7:84:a5:59:c9:70:42:18:f4:14:65:2b:a0:72:95:6f:2a:7f:
38:eb:df:b3:6e:86:97:d5:5d:ab:e6:6d:b8:60:33:61:94:bc:
ac:dc:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:02:31 2025 by rpki-client