Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
File: AS215370.roa (raw, json)
Hash identifier: gnnA4cz+X08uUlNAYCfwCu6y0+VvR4WqC7cwxmx0po8=
Subject key identifier: E4:0F:54:EE:60:EB:B2:38:01:E4:0F:22:B1:76:2B:DA:70:C5:E4:54
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16A4E7ED78DB59A19227406C399384AD849D9CB9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
Signing time: Tue 27 May 2025 08:30:14 +0000
ROA not before: Tue 27 May 2025 08:25:14 +0000
ROA not after: Tue 26 May 2026 08:30:14 +0000
asID: 215370
IP address blocks: 2a13:9500:68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a4:e7:ed:78:db:59:a1:92:27:40:6c:39:93:84:ad:84:9d:9c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 08:25:14 2025 GMT
Not After : May 26 08:30:14 2026 GMT
Subject: CN=E40F54EE60EBB23801E40F22B1762BDA70C5E454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:b1:6b:1a:14:5e:90:61:5f:ec:d5:c1:5c:
22:88:ff:e1:66:67:2d:2d:9a:72:31:8a:70:06:ab:
8f:54:6d:09:1c:4a:cf:50:bb:de:32:4c:7e:52:91:
bd:fd:87:e5:ac:4a:df:ae:3c:ca:50:d7:eb:e0:f1:
d5:bb:e7:1e:f9:de:b8:f5:f1:33:3a:ef:79:47:3a:
44:b5:58:97:27:06:a2:fd:87:1f:39:aa:db:27:c5:
ce:68:b0:85:de:fc:0f:67:dc:9e:55:97:18:9c:54:
32:92:6a:71:29:36:19:c5:b8:b3:85:02:02:aa:d3:
d8:f8:ec:f7:ad:b5:48:c4:47:e0:03:f9:b8:32:78:
12:cf:e9:f7:26:d3:28:0e:62:5d:79:6f:1a:88:20:
15:1e:55:e2:6d:c5:a1:9b:6e:f8:2d:55:65:07:1c:
f3:7b:5f:07:87:6d:28:1c:52:ea:a0:f3:58:23:a8:
fd:23:e1:ea:72:01:94:81:93:52:39:e3:40:c0:5f:
28:67:44:29:77:2e:ef:db:32:dc:e3:33:86:0e:62:
e7:6d:fa:2e:c4:d4:ff:a3:82:d3:58:39:b6:4a:c7:
72:df:85:a9:2c:b9:bd:d6:28:60:90:47:91:29:4b:
7b:3d:9b:39:1e:50:dc:1e:ab:89:bb:fb:8e:e9:3b:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:54:EE:60:EB:B2:38:01:E4:0F:22:B1:76:2B:DA:70:C5:E4:54
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:68::/48
Signature Algorithm: sha256WithRSAEncryption
3b:34:e2:42:b8:f0:57:34:39:01:30:6a:86:d8:39:4b:19:53:
4c:fe:47:a3:3a:0d:c8:cc:b9:3e:28:72:b6:89:fb:01:82:db:
a5:de:f8:07:0b:92:1e:6d:a2:7f:dd:ee:c5:40:d3:aa:c5:5d:
48:38:47:b5:bb:74:43:00:04:ed:95:7f:8e:78:ba:64:d5:04:
a1:b8:2c:95:dc:81:f3:f3:cc:cd:ed:91:d9:b4:96:95:0a:d5:
14:90:7b:55:e8:5d:df:95:0f:4b:2e:70:89:31:8d:77:9f:28:
63:95:a8:ef:93:00:c3:e4:d0:4d:6b:49:fa:d0:c2:06:08:1c:
23:28:0c:13:d1:97:48:11:13:f0:99:05:50:88:68:79:e8:b7:
6c:d5:29:bb:f8:4f:7e:9d:ab:10:7a:f1:60:a6:ca:a1:b2:87:
28:45:59:10:0b:5c:68:a1:c6:ff:7d:c6:a9:ad:19:fa:62:54:
bd:cb:c9:8e:bc:cb:82:dd:b3:02:14:62:20:52:78:c0:8f:56:
4f:a3:b9:dc:f0:30:e2:44:3e:b4:3e:b0:83:10:d5:f4:35:00:
6d:35:a2:38:8b:e8:19:06:71:1c:ea:ba:b4:53:21:ee:48:55:
0e:89:2e:e9:71:d1:61:f7:79:f9:9e:58:57:d4:a7:31:5b:8d:
ad:37:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:56:28 2025 by rpki-client