Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134677.roa
File: AS134677.roa (raw, json)
Hash identifier: 2aIEdXxyPaGQt8mw7J3EIirNw2v4ci2k+oKns8sIhgM=
Subject key identifier: D2:76:B9:B4:EF:E4:3F:A1:80:10:8B:A8:5C:12:BD:28:E5:C4:DC:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5E93B98C19E2F9BAE8376FE6FAA27DCE6861068B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134677.roa
Signing time: Fri 30 May 2025 21:14:12 +0000
ROA not before: Fri 30 May 2025 21:09:12 +0000
ROA not after: Fri 29 May 2026 21:14:12 +0000
asID: 134677
IP address blocks: 2a13:9500:75::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:93:b9:8c:19:e2:f9:ba:e8:37:6f:e6:fa:a2:7d:ce:68:61:06:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 30 21:09:12 2025 GMT
Not After : May 29 21:14:12 2026 GMT
Subject: CN=D276B9B4EFE43FA180108BA85C12BD28E5C4DC71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:fb:88:83:f1:f8:80:ca:8f:7b:03:0d:a5:
62:37:a8:c7:83:2e:86:b8:7e:91:ac:a9:09:64:87:
54:9f:f3:e6:bb:a5:61:9f:13:c8:8e:1a:f1:85:53:
9f:4d:c9:b2:ac:f1:c7:36:45:17:5d:3c:42:0d:31:
53:65:bb:b5:4c:cb:a5:eb:3e:4e:cb:2d:99:c0:4e:
ec:c6:a0:1f:f3:21:ab:b5:cc:95:44:4d:03:30:62:
6a:0e:1c:35:92:b4:41:16:b3:09:1a:41:ee:59:2b:
45:98:32:35:60:d3:2b:64:b4:5a:6f:fa:84:29:ae:
6b:9e:ac:9f:9d:69:12:3d:d1:78:43:57:f8:38:4d:
4e:df:70:09:b6:af:c9:d7:7a:f7:ee:8f:11:c3:02:
4c:c8:80:8e:f3:24:7c:bf:f8:52:1d:7a:4e:55:17:
17:5e:56:50:84:d1:5f:dd:86:ed:92:81:0b:27:a6:
11:f5:a7:d2:f6:f5:a3:93:b4:51:24:59:b9:c8:ae:
f2:77:02:d5:b7:2b:d6:bf:31:0e:26:85:d8:70:cc:
41:73:8f:64:0f:10:5f:9f:da:c1:08:2a:25:6c:61:
db:09:98:10:80:dd:b1:21:44:e9:88:80:10:79:8e:
7f:46:32:b3:0a:bf:5d:8a:80:b8:69:c8:0e:c0:94:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:B9:B4:EF:E4:3F:A1:80:10:8B:A8:5C:12:BD:28:E5:C4:DC:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:75::/48
Signature Algorithm: sha256WithRSAEncryption
a8:db:17:b8:6c:2c:77:d8:c4:60:b6:af:cc:04:d2:e9:d9:52:
b8:98:9f:97:35:01:e2:a0:14:fe:12:4f:3e:d9:26:da:12:93:
08:a7:23:46:c5:ab:86:70:6f:51:d0:af:ab:7a:82:8d:c7:62:
2a:69:6d:19:54:cf:d7:6e:ec:12:5e:91:fc:ab:a7:82:93:4a:
a8:da:3d:7c:93:9f:1e:e1:2b:b8:b5:ba:0f:69:1d:96:c5:6a:
15:45:99:84:1a:b8:be:4e:ef:00:22:87:c1:9d:38:e2:64:d5:
c3:6e:b9:7b:76:c0:55:fe:12:df:e0:35:7e:cc:52:ad:e5:c2:
de:2b:a4:54:fb:51:a1:15:ef:c1:8d:5b:79:42:2a:83:0e:ae:
bb:c4:64:50:41:c2:73:d0:9f:38:3c:47:90:b9:d0:4f:61:94:
f8:8e:9e:5b:fb:0e:58:7f:2c:d1:e0:70:9b:9d:b8:c2:27:f0:
ef:c1:17:f4:04:4d:24:65:d3:99:44:87:11:50:9f:7b:87:ae:
2b:f7:17:f9:62:c8:e2:db:c4:4e:c2:f8:69:1c:93:ce:89:82:
ae:30:aa:94:e1:fa:31:18:86:12:b8:b4:bd:28:b8:3f:d2:c0:
52:6d:e1:e3:46:5e:30:6b:40:7c:2e:3e:01:40:dc:82:8d:3e:
90:d1:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:58:50 2025 by rpki-client