Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208751.roa
File: AS208751.roa (raw, json)
Hash identifier: ir6xZeFsiZF5mvhE/PQr9SKMBLHZ1eBFW9VlbyAeRTk=
Subject key identifier: B9:3F:50:F5:A5:78:EA:5C:7A:02:52:D3:07:B1:28:65:8E:98:F7:D2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2A2D9CC038B7E057D0D36EDDE4284612F7A065D4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208751.roa
Signing time: Fri 16 May 2025 10:19:31 +0000
ROA not before: Fri 16 May 2025 10:14:31 +0000
ROA not after: Fri 15 May 2026 10:19:31 +0000
asID: 208751
IP address blocks: 2a13:9500:45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2d:9c:c0:38:b7:e0:57:d0:d3:6e:dd:e4:28:46:12:f7:a0:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 16 10:14:31 2025 GMT
Not After : May 15 10:19:31 2026 GMT
Subject: CN=B93F50F5A578EA5C7A0252D307B128658E98F7D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:5d:e0:1c:eb:09:a1:44:68:83:9a:54:3a:
20:fa:7a:72:67:80:fa:35:47:11:b6:7c:24:62:89:
62:0d:2e:8d:fe:98:44:c3:30:65:c0:9e:49:5e:a8:
97:2f:53:78:20:a6:92:13:c4:62:6d:c0:24:38:78:
3d:cd:15:f8:00:b0:bc:86:8f:d3:e0:0b:e6:e4:46:
a6:b3:7a:7d:22:c3:6f:f5:b6:0c:70:16:61:24:a6:
96:3f:56:4a:1e:f9:1e:b3:38:46:2c:0d:91:ce:c9:
69:dd:7e:da:33:db:66:44:75:9c:cb:a4:42:8d:ad:
df:e3:45:1a:bb:66:8e:bf:fd:44:0b:d9:8b:f4:94:
82:ae:e2:84:99:c3:83:06:8d:1f:3c:79:73:72:c6:
6a:da:e0:e4:d8:e5:66:af:bb:a1:f4:fa:56:f7:0b:
83:a7:33:0e:8b:e3:1b:39:70:f5:8a:6a:7e:0f:07:
3e:d3:83:86:dd:4a:18:96:1c:82:17:c8:1b:d3:94:
e1:71:e5:99:b9:1e:64:d3:cc:4a:97:33:80:a9:8a:
c9:c0:13:77:c8:9a:6b:9d:5f:fd:64:4e:63:5f:40:
80:2a:86:74:ee:b6:82:6f:fe:0a:13:d0:e1:b2:99:
87:7b:bd:b8:32:5f:d3:b2:75:10:a4:0b:c1:a6:34:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3F:50:F5:A5:78:EA:5C:7A:02:52:D3:07:B1:28:65:8E:98:F7:D2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:45::/48
Signature Algorithm: sha256WithRSAEncryption
07:f6:ab:11:08:c8:cc:b5:46:6b:6f:17:dd:37:7a:51:7c:02:
37:93:50:45:36:fd:94:13:d3:b1:bb:a2:cb:93:e6:ed:0f:56:
f0:8c:c9:29:67:bb:5b:a7:74:17:b2:32:d5:8a:66:f9:68:bd:
e4:d2:ff:b3:e1:e0:1f:a6:6c:44:68:e2:1d:b8:b3:b1:fb:5c:
ea:11:50:2a:cc:7a:8b:eb:e7:e1:2d:4f:d4:de:f6:23:3a:d0:
32:7d:72:55:6a:fb:37:88:b9:44:5b:01:1f:1c:90:69:5e:1f:
fa:5a:36:2f:4b:59:ef:9d:2d:8a:93:77:8a:33:1d:fd:b6:2b:
b7:ca:9d:fd:01:fc:59:3c:2e:3f:95:1f:d2:f9:de:8d:3f:66:
a6:45:b2:11:7b:be:4b:ba:de:24:07:02:ae:17:e7:39:a0:20:
ea:02:63:4e:23:b0:90:0e:0d:0f:ec:78:ff:36:ea:b6:e3:fc:
00:67:ff:88:19:d8:57:7e:a9:32:fa:4d:76:82:a9:38:ba:4c:
3a:98:25:36:e8:0f:41:a4:52:ca:b6:8c:79:34:e7:f1:16:fc:
83:9c:1c:fd:8f:cd:82:36:28:c3:a2:5a:ae:8b:56:50:b3:99:
84:91:91:2e:db:2a:29:e2:3e:37:db:06:a3:9c:a8:9f:00:ef:
2f:a1:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:53:11 2025 by rpki-client