Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213615.roa
File: AS213615.roa (raw, json)
Hash identifier: tX1ZGgw0y6vwMRZXQwQpvdshJDY3LZ+9sWd1edGUAic=
Subject key identifier: DE:09:5A:12:12:82:9F:FF:54:F3:93:37:CA:5B:96:EF:3C:C2:9F:4F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0D22185CDD982B3595D3FBF1121A9C68F01F21F2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213615.roa
Signing time: Fri 11 Jul 2025 00:02:10 +0000
ROA not before: Thu 10 Jul 2025 23:57:10 +0000
ROA not after: Fri 10 Jul 2026 00:02:10 +0000
asID: 213615
IP address blocks: 91.124.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:22:18:5c:dd:98:2b:35:95:d3:fb:f1:12:1a:9c:68:f0:1f:21:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 10 23:57:10 2025 GMT
Not After : Jul 10 00:02:10 2026 GMT
Subject: CN=DE095A1212829FFF54F39337CA5B96EF3CC29F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:0a:ff:c3:6b:9c:a3:62:e3:af:77:0c:ac:
a4:4f:34:fe:9a:5f:1c:79:5d:0d:9c:c2:79:06:60:
59:13:c5:e2:0f:64:50:48:b8:42:9d:69:a3:50:27:
ac:6d:b8:9e:43:f9:8c:23:15:87:b6:ce:bb:0b:4a:
7c:7c:22:67:aa:51:22:73:a4:48:24:64:f7:19:9e:
c9:b5:ab:3a:5c:24:f1:2e:7c:4b:f0:d1:07:4a:71:
d5:14:6b:ef:18:a4:2a:0d:e4:6a:21:62:43:20:03:
e7:81:20:df:05:e5:97:38:c5:4d:0f:02:40:99:f6:
67:a9:4f:b6:cc:50:fc:82:1a:f9:c6:1e:93:51:8d:
39:01:d2:fb:1b:42:ff:16:d2:11:60:8d:7b:6a:7c:
80:11:58:a8:6e:ae:a5:e7:dd:cc:1f:f8:7e:cf:15:
39:4c:31:d8:7c:9b:88:16:52:a2:b4:53:7f:fb:54:
a2:21:b6:92:6e:50:a4:1c:9f:5b:7d:78:27:a4:ab:
de:12:d1:d3:eb:4f:95:6b:26:72:39:ee:ca:08:c5:
9e:2b:07:c0:4e:74:d2:e0:f5:47:68:73:de:43:7b:
b3:51:e6:49:be:a4:6f:d7:bc:36:76:0a:37:a8:1a:
9b:0e:30:40:58:38:e4:50:d7:06:34:90:2d:00:08:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:5A:12:12:82:9F:FF:54:F3:93:37:CA:5B:96:EF:3C:C2:9F:4F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213615.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.1.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0c:d3:a8:1f:e5:98:05:b0:32:85:88:21:f4:e2:12:79:0f:
f2:53:b2:ff:dd:be:32:39:1f:b0:91:46:83:65:2b:3d:b4:9f:
c5:31:ff:d4:15:53:a6:5d:d6:2c:9e:e3:64:ef:08:37:e9:89:
ab:45:9c:b3:8e:ff:75:bf:bc:0a:a2:df:23:8b:9e:cd:e8:14:
3d:de:8a:cc:3e:ec:d9:b0:a5:f9:e3:89:6f:1b:fd:e1:39:44:
9d:63:86:db:b3:1e:b0:9e:24:37:b4:52:f3:8b:73:33:45:8d:
7b:7d:08:67:a3:ef:1a:4c:a8:08:7a:f4:95:4a:50:a1:b6:a9:
01:8c:93:3a:e9:51:34:ea:d0:88:1c:1d:c6:0a:81:b5:ac:8d:
61:69:4b:09:40:9f:dd:52:32:3c:61:c8:55:26:12:88:d8:b7:
c4:1a:c7:ce:61:b4:f2:f1:36:e4:f4:67:12:34:1e:70:d4:bb:
09:be:23:5d:79:5f:d8:c9:4b:3c:73:e6:b0:80:cf:a8:92:ca:
40:fc:10:a9:0d:0c:a1:ff:ea:e0:7d:7b:78:df:31:c6:f4:50:
76:be:08:1e:89:4e:87:c8:f2:b8:fd:44:fc:26:0d:93:06:3a:
a9:87:b4:6c:44:93:b2:c7:27:a4:67:a7:63:10:f1:5e:e6:19:
b9:76:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:24 2025 by rpki-client