Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215567.roa
File: AS215567.roa (raw, json)
Hash identifier: ekOEToGLZJWurZPezOku0Pe+m+BcQAoNrG8malTxVZs=
Subject key identifier: 36:13:3A:6D:89:CF:A0:45:17:3B:99:EA:B3:2F:98:69:89:4C:25:23
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2D1566F2C7C6513113BD3C6042271127FD07C52E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215567.roa
Signing time: Wed 15 Jan 2025 17:53:51 +0000
ROA not before: Wed 15 Jan 2025 17:48:51 +0000
ROA not after: Wed 14 Jan 2026 17:53:51 +0000
asID: 215567
IP address blocks: 45.152.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:15:66:f2:c7:c6:51:31:13:bd:3c:60:42:27:11:27:fd:07:c5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 15 17:48:51 2025 GMT
Not After : Jan 14 17:53:51 2026 GMT
Subject: CN=36133A6D89CFA045173B99EAB32F9869894C2523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:d8:04:de:d7:e6:f1:62:c7:dd:52:73:a3:
83:f7:6c:6b:44:ad:ea:84:83:bb:90:f7:ed:a6:23:
e0:4e:ce:10:b9:a3:4f:94:de:5a:d4:53:d2:61:d6:
82:43:8a:0b:1a:07:44:39:fa:a6:be:05:ab:d4:87:
0e:ff:7b:ff:30:9a:c4:a5:d7:e9:14:c2:2c:57:76:
1d:01:43:81:28:3a:81:bb:97:c1:2b:73:3f:e0:63:
2a:02:ec:86:93:8a:ac:9a:1e:92:5d:8c:f5:71:7d:
38:76:c9:f0:b7:00:cd:92:9e:a7:10:0d:aa:6e:f7:
19:79:bd:55:9c:97:e4:77:82:ff:a3:b1:0a:8f:df:
ee:53:3b:de:05:2c:36:9c:76:94:e1:66:73:58:58:
73:c4:25:27:07:13:0e:6a:97:95:c4:8e:56:25:13:
3b:90:25:1e:b5:1c:ac:56:59:2e:97:1b:cb:c9:72:
cf:eb:df:1e:5a:6d:68:3f:ba:63:71:3c:40:92:06:
36:3f:0d:6c:c8:5a:b0:91:03:fd:a5:5a:1a:0e:bc:
fd:77:3d:21:71:d7:d7:ae:fb:68:0b:1d:2d:31:f4:
77:72:57:a6:77:e9:56:23:9e:1f:6a:4c:ba:15:62:
9b:e3:a2:d8:de:f3:93:c3:95:17:84:83:67:c7:18:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:3A:6D:89:CF:A0:45:17:3B:99:EA:B3:2F:98:69:89:4C:25:23
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215567.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:30:6d:da:e3:4b:5a:3a:d1:0f:4a:f4:95:cd:b4:99:be:7c:
40:ea:67:47:14:dc:3a:e7:8a:12:75:20:62:d2:da:8c:3b:9a:
39:02:b6:61:d5:ab:64:bf:59:5d:11:b4:10:59:f1:3d:c0:37:
fd:a1:bc:88:0f:22:f8:82:0c:33:3d:de:f1:32:b8:d2:a0:7c:
42:7f:ed:f7:5a:08:99:c4:3b:84:9c:42:31:73:76:0d:5e:e4:
9c:ff:05:4d:07:a9:88:3f:85:b8:8a:30:3a:f2:59:e9:82:12:
57:04:c0:60:ac:e4:f0:ef:e0:e9:ae:20:70:fd:60:1f:fa:30:
72:5c:26:f2:35:46:8c:9d:b5:35:3d:a9:de:d7:37:f7:9c:16:
9e:15:6f:02:4d:86:ec:d8:d4:d5:a3:13:b9:3a:8b:58:e7:43:
2f:06:ab:61:03:8e:bb:cc:d8:fa:89:72:1e:44:fd:1a:e2:8f:
e4:51:06:9e:1c:a4:01:84:cd:8f:3e:c7:9a:dc:94:8a:df:5d:
9c:e6:df:dd:95:0e:1f:bf:44:3f:a0:58:15:51:8f:c2:48:d1:
95:fb:9b:ff:68:80:ff:8d:02:21:5a:5f:ea:5d:27:0d:da:1f:
a1:d7:63:56:f3:a4:87:6a:72:6e:c2:95:73:5c:e6:70:7f:3d:
d6:78:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:23 2025 by rpki-client