Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401681.roa
File: AS401681.roa (raw, json)
Hash identifier: 2uVrYJPxKVGxLWSxotGGrD413OOckVay8vp9mwIqsjQ=
Subject key identifier: CE:7F:60:33:2C:14:98:3E:B7:20:99:2B:1C:18:84:F6:3A:1E:F4:91
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D98992F09D38ACEA1F0CA4D290A824CD4F5CC21
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401681.roa
Signing time: Sat 31 May 2025 07:21:18 +0000
ROA not before: Sat 31 May 2025 07:16:18 +0000
ROA not after: Sat 30 May 2026 07:21:18 +0000
asID: 401681
IP address blocks: 2a13:9500:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:98:99:2f:09:d3:8a:ce:a1:f0:ca:4d:29:0a:82:4c:d4:f5:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 31 07:16:18 2025 GMT
Not After : May 30 07:21:18 2026 GMT
Subject: CN=CE7F60332C14983EB720992B1C1884F63A1EF491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:25:15:18:5d:45:37:b0:4e:a0:4d:7c:5c:
f6:51:fd:ea:97:7e:1b:64:29:a1:39:b4:b0:54:85:
13:c5:bf:31:b2:6e:91:9e:06:7a:14:91:1e:3c:83:
87:7b:5b:10:c9:ad:c7:d1:85:fe:fe:d9:6c:a6:4c:
7e:69:ef:b5:39:54:c8:54:80:a6:a0:e5:fa:65:c8:
89:78:49:57:cf:2b:d7:7b:d7:fd:8d:71:10:41:56:
0a:7c:3a:32:dd:9e:6a:85:ad:37:55:b9:75:be:62:
2f:25:70:d8:99:61:1e:2a:ae:64:2c:d5:e7:4d:2f:
88:62:3e:03:fa:c5:c8:47:e9:ed:ec:ea:dd:fa:95:
35:07:8c:3a:fd:f0:42:10:4a:2f:fc:60:94:f6:4c:
90:ad:1b:2a:91:de:dd:d0:bf:a5:44:13:09:36:eb:
4b:32:87:1c:4b:d4:67:c6:82:81:75:e5:98:89:e7:
ba:aa:24:93:52:5c:dd:46:34:a5:b8:1a:3a:f0:c5:
fa:b3:03:fd:bc:e1:31:08:16:f3:fd:47:46:ed:80:
eb:cd:08:3b:2f:ed:70:ea:4a:9c:6b:9a:b4:f5:35:
c1:d4:e6:61:a6:20:e1:d2:59:4d:ff:10:07:79:a5:
c2:c8:78:a5:7f:5b:f5:a9:98:a6:bb:69:33:ad:18:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:60:33:2C:14:98:3E:B7:20:99:2B:1C:18:84:F6:3A:1E:F4:91
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:77::/48
Signature Algorithm: sha256WithRSAEncryption
43:f0:d2:75:fe:b6:6c:20:5c:66:c7:87:3f:4d:da:a0:cb:34:
1e:29:ef:1f:69:29:3e:d4:36:78:c3:ee:cc:22:cd:5c:f8:1a:
5c:3e:74:32:03:5a:5d:a0:61:e6:ce:37:c8:e0:a5:0b:d0:09:
0e:b0:a8:11:35:f4:22:28:22:25:11:36:6c:77:12:59:fa:7c:
ed:ab:1b:b3:10:66:f2:da:a2:98:d6:bd:22:1a:2e:59:43:f0:
85:46:cb:1f:d9:a8:90:ea:0b:bc:9d:92:65:d1:6d:b9:24:6e:
1d:df:17:90:36:cd:d9:23:07:d6:cd:ae:f0:bb:d6:75:99:33:
0b:8f:81:3b:6f:ad:1f:7b:0d:b7:7b:52:5a:bb:78:96:98:20:
80:9e:2a:1d:9c:55:98:55:fc:65:fa:c3:c5:2e:22:16:cf:93:
38:d6:79:0a:84:97:98:7f:3a:40:d9:da:2b:09:4b:48:6e:ed:
ae:9c:20:d2:bc:9d:8f:8d:70:db:89:1b:5f:fc:ef:d7:37:05:
13:23:99:bf:6a:60:9e:e8:ba:4c:92:c6:c9:00:30:e5:15:94:
3b:e0:df:49:b0:67:95:e9:d6:7c:2a:7a:77:94:cf:ac:5d:a9:
db:9b:b1:9a:77:73:4e:17:67:dd:54:f6:2f:2d:75:9a:3f:49:
49:65:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:56:25 2025 by rpki-client