Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210633.roa
File: AS210633.roa (raw, json)
Hash identifier: fHPtLMLVQsuDkpEnTgGnL3a8KJLMXVyZvhDyc1Tvfps=
Subject key identifier: AF:8E:E9:AA:DD:35:6E:86:9C:CF:69:38:49:55:66:7A:A2:0F:FF:F1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C222B86C607647D0B9A19D61ADA75F44A3A885A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210633.roa
Signing time: Wed 28 May 2025 15:42:27 +0000
ROA not before: Wed 28 May 2025 15:37:27 +0000
ROA not after: Wed 27 May 2026 15:42:27 +0000
asID: 210633
IP address blocks: 2a13:9500:6e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:22:2b:86:c6:07:64:7d:0b:9a:19:d6:1a:da:75:f4:4a:3a:88:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 15:37:27 2025 GMT
Not After : May 27 15:42:27 2026 GMT
Subject: CN=AF8EE9AADD356E869CCF69384955667AA20FFFF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:d1:30:c5:0b:65:ae:db:8c:d9:65:90:e5:
c9:94:37:33:bd:17:dc:8d:99:50:a0:05:4e:45:7a:
c5:70:96:23:98:25:5f:22:37:bc:7e:0a:ce:42:4e:
6b:8e:1d:be:bb:33:8a:b6:50:43:ba:24:1d:4f:c5:
73:19:50:7a:51:9a:1b:da:a9:ca:a8:a3:fc:0b:a6:
2f:47:66:43:f8:ba:81:47:65:0a:d3:ae:cd:2d:d9:
db:54:99:5f:f9:93:ae:a7:d4:08:f7:cd:26:ca:ef:
fb:c3:28:b6:96:79:be:0c:7a:85:59:70:80:85:49:
2e:51:40:fb:2b:e6:6a:f1:4b:a1:19:4e:12:18:d1:
f3:d8:65:3e:aa:7e:28:9b:31:8b:e5:a9:ea:e5:ea:
31:bf:e9:50:08:6f:51:14:8f:79:bc:c4:af:e3:6c:
63:15:ec:dc:3e:21:40:16:45:ac:2a:e2:f6:ba:39:
a5:70:cf:b7:16:a3:eb:c9:21:c8:b3:fd:bc:da:71:
a4:fc:78:10:61:51:e4:d5:60:2b:7f:80:73:5a:9e:
26:fd:d3:6b:f9:40:68:2e:a1:52:84:1f:9e:44:0f:
6d:ab:b5:02:a1:d3:09:54:28:d9:53:be:4f:c0:bc:
f7:93:1e:0e:2d:45:b9:f2:22:27:7f:59:8f:50:7f:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:E9:AA:DD:35:6E:86:9C:CF:69:38:49:55:66:7A:A2:0F:FF:F1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:6e::/48
Signature Algorithm: sha256WithRSAEncryption
63:e6:92:1e:6b:53:8f:23:dd:ad:8a:00:0c:95:00:4f:c6:67:
67:58:a1:ee:2a:6c:20:8a:e9:00:c6:d8:de:27:de:cf:7c:5b:
28:56:05:3a:3c:42:92:b5:38:a7:8a:38:66:89:df:19:58:1d:
4b:90:9f:51:ea:33:5f:6b:9a:dc:dc:23:30:c8:d9:1e:03:28:
3c:9a:04:19:35:be:a6:33:15:32:46:ac:b2:99:ab:c9:b4:6b:
77:3b:f5:6d:e1:53:89:d2:93:e9:c5:b6:f1:82:d7:1f:2b:c4:
e6:76:fb:ce:c5:b9:13:8b:60:ca:42:f2:53:88:85:1f:7a:38:
db:b5:38:8a:25:cc:01:1e:b4:07:70:f7:a8:b9:69:93:1f:73:
eb:65:de:3d:bf:3b:a1:d7:c4:c5:00:69:09:62:6a:a2:54:a4:
19:ff:aa:a4:d3:e8:81:ba:c9:3d:f8:da:98:cd:48:d7:31:9c:
94:c8:29:7d:2c:7a:ca:48:cd:a0:16:30:17:51:21:cc:2f:f1:
a5:d9:29:1a:17:6f:88:06:a4:97:82:49:f6:62:56:69:11:77:
65:ed:d7:2f:71:f0:8a:3d:0d:0d:5d:e5:7b:7b:7a:c9:25:57:
53:7a:18:dd:b4:41:82:45:aa:85:71:80:d4:6b:85:6b:d3:de:
47:6f:09:3e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUDCIrhsYHZH0LmhnWGtp19Eo6iFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA1MjgxNTM3MjdaFw0yNjA1MjcxNTQyMjdaMDMxMTAvBgNV
BAMTKEFGOEVFOUFBREQzNTZFODY5Q0NGNjkzODQ5NTU2NjdBQTIwRkZGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHL9EwxQtlrtuM2WWQ5cmUNzO9
F9yNmVCgBU5FesVwliOYJV8iN7x+Cs5CTmuOHb67M4q2UEO6JB1PxXMZUHpRmhva
qcqoo/wLpi9HZkP4uoFHZQrTrs0t2dtUmV/5k66n1Aj3zSbK7/vDKLaWeb4MeoVZ
cICFSS5RQPsr5mrxS6EZThIY0fPYZT6qfiibMYvlqerl6jG/6VAIb1EUj3m8xK/j
bGMV7Nw+IUAWRawq4va6OaVwz7cWo+vJIciz/bzacaT8eBBhUeTVYCt/gHNanib9
02v5QGguoVKEH55ED22rtQKh0wlUKNlTvk/AvPeTHg4tRbnyIid/WY9Qf+B/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUr47pqt01boacz2k4SVVmeqIP//EwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEwNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AABuMA0GCSqGSIb3DQEBCwUAA4IBAQBj5pIea1OPI92tigAMlQBPxmdnWKHuKmwg
iukAxtjeJ97PfFsoVgU6PEKStTinijhmid8ZWB1LkJ9R6jNfa5rc3CMwyNkeAyg8
mgQZNb6mMxUyRqyymavJtGt3O/Vt4VOJ0pPpxbbxgtcfK8TmdvvOxbkTi2DKQvJT
iIUfejjbtTiKJcwBHrQHcPeouWmTH3PrZd49vzuh18TFAGkJYmqiVKQZ/6qk0+iB
usk9+NqYzUjXMZyUyCl9LHrKSM2gFjAXUSHML/Gl2SkaF2+IBqSXgkn2YlZpEXdl
7dcvcfCKPQ0NXeV7e3rJJVdTehjdtEGCRaqFcYDUa4Vr095Hbwk+
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:11 2025 by rpki-client