Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: nWBdqbm9rHOgEObdB1WB2COToh3grZQJeqi/zMDJjIE=
Subject key identifier: 0F:36:BC:8F:6C:C3:9D:5E:DF:ED:27:92:41:84:6C:ED:08:28:1A:03
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5AF2C70ED6F20BE183898F8B116A865A9D592344
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
Signing time: Fri 23 May 2025 05:22:28 +0000
ROA not before: Fri 23 May 2025 05:17:28 +0000
ROA not after: Fri 22 May 2026 05:22:28 +0000
asID: 211484
IP address blocks: 185.135.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f2:c7:0e:d6:f2:0b:e1:83:89:8f:8b:11:6a:86:5a:9d:59:23:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 23 05:17:28 2025 GMT
Not After : May 22 05:22:28 2026 GMT
Subject: CN=0F36BC8F6CC39D5EDFED279241846CED08281A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:cd:b8:b5:c1:1e:00:fb:e5:2d:6a:5a:45:
f5:23:94:b6:40:21:ab:a8:3f:61:12:da:6d:9d:ab:
02:dd:e9:a9:a9:82:42:b8:95:97:d9:f8:a7:f8:e8:
20:b7:6e:5b:00:4b:58:e6:89:34:cf:fc:19:11:bc:
8d:ab:3a:e9:a0:d4:8c:40:ae:8c:f3:41:fb:bd:b9:
a4:65:fd:9e:f7:3e:2f:ed:6b:20:6f:c6:8f:59:a2:
00:31:8f:05:d5:19:9c:4e:f6:a6:f7:17:db:ed:4b:
01:8a:9a:ab:a8:ab:85:0c:9b:13:c7:3d:92:eb:57:
4d:94:90:77:3b:89:2d:4a:29:fc:35:eb:83:1c:c8:
28:d0:a3:b0:1e:f8:d9:92:9b:44:dc:dc:d8:07:95:
e0:d0:a1:f1:e5:26:bc:c6:16:7f:80:fa:6c:44:44:
d1:57:33:f2:57:b9:48:4b:1f:b0:a9:1d:28:24:56:
58:34:fb:25:00:78:32:fa:36:24:91:05:7f:72:30:
59:29:d3:17:cd:18:5c:8c:9f:64:af:f5:86:dd:cd:
2d:72:16:68:2e:97:68:e1:a0:90:72:47:97:a8:3a:
39:ae:33:ac:fc:4d:79:a0:e4:25:cb:4d:46:39:2e:
2f:77:36:f3:00:96:51:cb:af:5a:f0:76:ab:23:ca:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:BC:8F:6C:C3:9D:5E:DF:ED:27:92:41:84:6C:ED:08:28:1A:03
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c7:01:77:89:87:2a:76:b4:0c:39:99:68:dd:4f:9a:4a:e6:
dd:f5:5d:3e:62:a4:3b:74:b4:b0:55:07:39:10:f5:74:45:35:
ce:4c:41:9d:75:01:05:8b:38:c9:0e:dc:aa:a9:26:a8:7e:e4:
28:7f:43:fd:41:94:e1:92:8a:62:a5:d7:15:82:15:a6:d0:6e:
67:86:30:b7:e1:16:0c:cd:c9:36:a4:1e:e6:25:52:c1:be:72:
c8:8f:e5:9e:10:35:c7:4c:35:fe:95:82:b7:61:47:94:e6:da:
4f:de:d6:a4:52:cc:14:c1:21:5f:24:eb:a7:63:6c:f5:9f:45:
76:3f:2b:ec:4e:91:4a:ae:4f:63:39:1c:54:47:82:d2:da:8d:
10:12:79:36:b1:89:36:44:b4:7f:0e:37:12:3d:94:9f:ed:b1:
d2:21:94:a9:1f:e1:60:ba:3f:b9:0b:b7:38:a5:7a:4f:cf:19:
83:89:30:d5:21:aa:25:c3:3e:69:5a:a6:35:3e:7d:d8:07:f0:
3a:bc:e1:d1:32:f4:74:cc:6e:51:22:d1:e4:bd:4f:64:03:97:
72:39:08:68:61:84:36:3d:96:28:ce:bb:55:45:7b:d9:01:e4:
5e:29:c2:13:2f:31:ef:63:cc:2a:42:05:da:29:4e:0d:de:e3:
13:22:c4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:16 2025 by rpki-client