Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213430.roa
File: AS213430.roa (raw, json)
Hash identifier: 3KCCzSy8DthB1whUi4NNgUYZRVwTezDsLS7Ceo1oTVo=
Subject key identifier: CB:BC:AB:F1:A6:58:CF:5F:AC:37:0C:42:CD:66:6A:EF:2A:25:71:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 72629AC48E6F8FD2568D6EAFB675A66B226B7ED7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213430.roa
Signing time: Thu 15 May 2025 11:56:45 +0000
ROA not before: Thu 15 May 2025 11:51:45 +0000
ROA not after: Thu 14 May 2026 11:56:45 +0000
asID: 213430
IP address blocks: 2a13:9500:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:62:9a:c4:8e:6f:8f:d2:56:8d:6e:af:b6:75:a6:6b:22:6b:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 15 11:51:45 2025 GMT
Not After : May 14 11:56:45 2026 GMT
Subject: CN=CBBCABF1A658CF5FAC370C42CD666AEF2A25716F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:e3:6c:cc:47:ec:f0:8d:8f:07:ab:ab:ba:
25:42:b0:5e:24:2c:81:f7:7a:54:a7:00:33:d7:52:
d8:79:0d:e2:bf:08:8e:44:f0:6f:41:0e:17:c7:9f:
86:6e:27:01:30:3e:2c:01:39:b2:bc:ed:f2:69:c0:
7c:e0:89:6e:b9:6e:7b:56:34:b9:f3:93:8e:1a:5b:
7d:43:0f:47:2f:08:d7:56:17:b1:11:7b:06:5e:b3:
32:b1:e0:6b:0a:e5:12:b9:d5:f6:9b:62:84:4a:43:
f1:22:c6:0f:d4:91:b4:a1:32:0c:18:c2:ab:b1:b6:
c2:ab:fe:42:86:e7:9f:7d:22:b8:0b:00:56:b4:ef:
ff:52:4d:c7:0f:b2:9f:88:c9:05:31:97:35:d2:1b:
3e:ae:8d:b4:d3:32:5a:f9:a7:71:fa:a1:f8:7d:5d:
16:a8:57:52:be:f8:c4:0d:b9:00:0c:d0:2d:af:a1:
f4:73:b7:55:e3:c8:ad:91:23:4f:e4:21:62:e8:b8:
fc:48:5b:be:64:fb:b3:fe:ee:01:84:f2:3d:3f:31:
6a:91:36:96:bd:98:50:8e:ca:95:38:f3:77:be:48:
b4:c2:19:f3:5e:79:a8:78:9a:c0:64:6b:bf:22:11:
b1:00:91:a6:78:1a:a0:17:c8:39:08:4d:76:e5:e9:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:AB:F1:A6:58:CF:5F:AC:37:0C:42:CD:66:6A:EF:2A:25:71:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:41::/48
Signature Algorithm: sha256WithRSAEncryption
4e:9d:9c:85:7b:90:5d:71:67:48:e7:15:c8:d2:4b:16:4b:d9:
49:b9:ec:84:94:f7:cc:c5:f4:6c:c8:19:7d:58:d6:3c:0b:55:
f9:37:b8:9f:1d:73:19:e3:da:64:2b:6d:9a:0f:41:b1:48:f1:
7d:bd:4c:6b:cb:f0:78:8b:83:e6:aa:c1:54:14:02:66:e2:3b:
18:ec:de:09:0b:71:69:76:df:b9:83:f2:7a:4d:5e:85:68:d6:
49:a6:e9:52:2f:97:5b:19:45:0d:40:e7:26:32:d4:10:d1:4a:
d6:2e:b1:00:2a:f3:7b:f6:4f:e8:d1:0e:f4:78:88:18:8d:68:
8f:95:63:cf:3c:bb:35:a1:c0:71:96:27:21:98:ca:1d:46:2f:
42:ed:39:37:42:1e:6b:e6:3e:6a:e0:94:a8:f3:5a:6f:d0:4c:
5e:41:46:c4:0c:3b:7b:fe:da:bc:3b:ac:ed:67:0f:eb:97:06:
2e:77:e8:11:8e:aa:c0:bf:8b:f9:7a:b6:56:67:23:f1:16:83:
bc:6c:c7:a6:1b:6c:af:41:25:9e:d3:92:50:b3:42:c2:72:90:
e6:cf:c3:c7:47:ec:62:71:d8:f8:24:ab:97:46:58:ce:92:4a:
a1:21:6d:4c:22:1a:9b:23:41:1f:ba:6f:a3:9f:af:13:fb:07:
7c:94:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:16 2025 by rpki-client