Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215817.roa
File: AS215817.roa (raw, json)
Hash identifier: qZyF5oeTknRt4vs8+dsxY5AervXtTuvRslParLge7YQ=
Subject key identifier: 57:32:87:D5:64:63:1E:10:4A:AB:B8:B4:A6:CD:A9:CE:C4:FC:90:86
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1CD189A84D7B3770EFF3E28860010C27B7A9EFE3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215817.roa
Signing time: Wed 28 May 2025 07:54:08 +0000
ROA not before: Wed 28 May 2025 07:49:08 +0000
ROA not after: Wed 27 May 2026 07:54:08 +0000
asID: 215817
IP address blocks: 45.142.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d1:89:a8:4d:7b:37:70:ef:f3:e2:88:60:01:0c:27:b7:a9:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 28 07:49:08 2025 GMT
Not After : May 27 07:54:08 2026 GMT
Subject: CN=573287D564631E104AABB8B4A6CDA9CEC4FC9086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:5f:80:06:07:50:bf:ee:9c:6e:42:20:1d:
b2:d3:ba:b3:50:2d:6c:fd:fd:a3:15:da:67:1e:b6:
a8:e0:32:24:f9:0b:7e:a2:d7:35:02:fe:c5:d1:4e:
4a:96:41:65:9e:8b:b0:ea:3d:05:5e:07:aa:3b:fc:
46:1f:a1:9c:5e:8a:45:43:17:df:2f:36:76:2d:56:
11:59:f8:71:70:97:22:cf:da:15:ab:50:57:39:ec:
cf:3d:93:0e:d9:40:e6:b7:4e:8a:0d:92:fc:f7:b8:
08:4e:40:63:ec:be:64:a1:0a:e4:4c:ec:ad:35:4e:
44:9c:c8:17:64:39:4f:cb:e1:cd:4e:1b:e6:86:6a:
12:35:67:16:21:36:ef:57:70:1c:ea:fb:68:e8:2f:
fc:6f:d7:68:33:1d:6e:07:2b:30:5e:76:f9:4f:25:
de:3a:ca:24:2b:23:00:10:dc:fd:ca:8a:85:f4:22:
2a:b7:c4:b6:02:2d:fb:cb:79:3f:4d:31:7b:95:d1:
72:c5:8b:da:b7:2a:29:76:fe:4d:d2:6f:7c:63:b5:
8d:3f:a9:09:f2:be:6a:dc:4b:e4:38:00:f4:16:33:
2f:d9:aa:c6:e8:02:49:0c:7c:6c:28:3c:df:45:f4:
cc:5f:91:60:b0:55:cd:23:a1:ed:2e:96:5a:de:11:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:87:D5:64:63:1E:10:4A:AB:B8:B4:A6:CD:A9:CE:C4:FC:90:86
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8e:cf:3b:df:5b:8e:3d:1b:ff:cd:9d:b6:45:0a:98:74:94:
98:a1:7b:0f:0f:8d:69:44:95:6f:2d:74:f2:0c:af:80:50:2d:
f5:be:83:11:7c:a1:ee:fc:ab:fa:58:e8:02:08:bb:05:df:ed:
10:11:13:d3:be:83:ba:35:87:e0:34:7b:26:b6:9a:41:ca:c1:
1f:2b:54:af:a5:02:1f:22:1c:7c:3b:a3:d8:be:00:86:bb:a5:
a2:0e:f7:1b:53:11:9f:2d:93:56:17:c2:40:89:dd:ba:dd:26:
d9:62:e6:56:59:b1:e3:ff:6d:d3:9e:39:8d:60:82:19:fd:37:
2f:24:84:85:30:97:c1:94:18:cf:d1:b1:72:03:44:4f:ca:33:
ef:11:bc:f2:b3:c4:2a:5e:6f:eb:7f:5f:a8:6f:25:bb:07:33:
bd:03:44:0e:7e:55:8e:f2:6f:0f:13:33:e9:26:12:73:b0:e6:
63:04:15:c3:27:fc:64:fe:80:3f:d0:1c:d5:4a:7c:7b:ee:22:
3a:17:64:bb:61:7c:0e:e6:5c:f6:2f:c4:b4:b1:9a:5c:c7:03:
9f:74:09:e5:e3:a0:a0:74:5d:1c:1a:eb:0d:27:82:26:cc:3c:
02:6a:60:f2:21:1d:9f:3a:5e:13:13:17:e7:19:26:2d:1c:6f:
87:d3:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:14:29 2025 by rpki-client