Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215672.roa
File: AS215672.roa (raw, json)
Hash identifier: QTORGUiVxi2/FW8WDThIBC89fYssIP84SIhwtf6vutY=
Subject key identifier: 51:DC:F2:18:70:0E:64:02:45:F6:84:BC:28:00:30:34:C9:60:85:7A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1B512B7BA585E1C29A8A904DC75498EE2A4BD2ED
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215672.roa
Signing time: Mon 02 Jun 2025 15:50:37 +0000
ROA not before: Mon 02 Jun 2025 15:45:37 +0000
ROA not after: Mon 01 Jun 2026 15:50:37 +0000
asID: 215672
IP address blocks: 191.96.206.0/24 maxlen: 24
191.101.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:51:2b:7b:a5:85:e1:c2:9a:8a:90:4d:c7:54:98:ee:2a:4b:d2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 2 15:45:37 2025 GMT
Not After : Jun 1 15:50:37 2026 GMT
Subject: CN=51DCF218700E640245F684BC28003034C960857A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:f1:b1:00:09:86:3a:2f:1d:80:0a:a1:0e:
57:11:47:d1:e8:2a:bd:b0:91:e9:9b:81:aa:9c:f6:
72:d0:2d:c9:15:9d:fc:a4:46:2b:08:e5:3c:54:53:
d6:3c:e1:0b:1c:ee:ed:4c:0d:55:6a:0a:01:91:54:
23:e5:7d:9c:88:15:6b:a5:b5:f7:9c:5b:47:7c:17:
1d:eb:dc:a6:0f:8e:d7:ea:26:6a:8a:d7:b4:c0:cb:
8a:72:fc:05:90:e5:f3:b5:9b:3e:49:fe:e3:18:7d:
da:99:a2:88:23:d3:5a:34:40:8b:be:86:13:0e:1d:
74:f7:b1:be:e1:1c:14:0f:df:f1:83:35:a9:78:54:
8b:b9:75:0f:90:ba:ff:8c:cb:ab:69:58:70:71:20:
f8:07:3d:ec:dc:70:a8:de:bd:6b:93:7a:64:dd:0a:
17:f3:2c:c8:15:8d:30:99:fa:05:a9:ea:48:f5:07:
95:0b:38:24:f9:de:cd:2c:67:8e:72:a2:6c:11:63:
46:90:1e:08:f8:e9:3e:19:e2:a5:31:12:39:89:54:
57:3c:a3:0d:97:6f:a6:8c:29:31:ea:f0:26:b9:0a:
fe:c0:55:1a:2b:53:0d:91:1b:4b:c5:3a:8d:76:c6:
f7:60:ac:ad:82:46:24:59:0a:e0:01:fb:8f:6d:cd:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:F2:18:70:0E:64:02:45:F6:84:BC:28:00:30:34:C9:60:85:7A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.206.0/24
191.101.176.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ef:c1:8c:9d:a7:43:c9:12:91:a4:c9:a5:6b:01:69:7b:f8:
7a:6a:1d:b7:65:42:2c:30:28:2a:07:95:01:6d:78:89:e7:21:
36:2e:eb:bc:91:90:79:0f:2c:83:22:9f:54:69:ee:49:7a:42:
f9:3a:2c:d7:76:f1:bd:7f:ad:64:fe:f5:13:cb:a8:f4:3b:12:
a4:dc:fb:86:87:d4:0b:06:cd:8a:23:6e:92:cd:fe:63:4a:ea:
ea:26:dc:af:9d:a4:23:eb:77:fe:87:35:93:8c:12:74:2e:3f:
cf:67:0c:eb:74:d5:54:22:65:cc:4f:5a:49:37:b8:7a:73:15:
9c:07:c3:91:19:c5:e8:fa:85:cc:86:8f:36:89:60:96:40:3d:
1b:41:f1:75:83:9c:92:60:7b:92:cb:e3:27:24:cb:a3:3c:db:
70:39:58:b5:49:7b:26:7d:50:f1:2d:12:81:ff:7c:7d:3c:d6:
aa:94:dc:fd:a9:bf:da:8c:02:75:20:ec:9b:dc:6a:1d:6e:92:
88:4f:a2:eb:9f:08:f0:10:f5:7c:6f:b9:39:73:5f:78:96:50:
11:ff:93:56:c9:69:03:a1:a3:20:9a:dc:85:40:7e:b8:13:68:
45:33:f9:e2:47:7a:55:0d:35:46:d8:c1:d5:af:68:cb:8e:06:
b4:19:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:14:57 2025 by rpki-client