Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208812.roa
File: AS208812.roa (raw, json)
Hash identifier: W8Mn5rhk78wSJ+Laj1GD04qx2g6qoDtLSPPZar3OaiE=
Subject key identifier: 2B:E4:E2:C0:5A:FB:1D:84:F5:3C:A6:93:D1:F5:28:A8:E8:26:0F:D9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 32FB6597370DC388F60D4C0BE2C1FF4BF79EDB3B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208812.roa
Signing time: Thu 15 May 2025 01:05:06 +0000
ROA not before: Thu 15 May 2025 01:00:06 +0000
ROA not after: Thu 14 May 2026 01:05:06 +0000
asID: 208812
IP address blocks: 2a0f:85c1:c33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fb:65:97:37:0d:c3:88:f6:0d:4c:0b:e2:c1:ff:4b:f7:9e:db:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 15 01:00:06 2025 GMT
Not After : May 14 01:05:06 2026 GMT
Subject: CN=2BE4E2C05AFB1D84F53CA693D1F528A8E8260FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:97:b7:28:e6:fb:bd:04:bc:81:6f:15:99:
18:52:cc:be:19:ef:e6:cd:a8:df:2c:e3:36:2a:2b:
3f:8b:67:aa:0d:af:10:f3:61:31:21:e5:7b:25:c1:
e0:3c:e2:04:7f:dd:d5:cf:e0:80:f5:75:ad:83:77:
83:60:6d:93:0e:0a:8c:0c:af:1e:77:5b:dd:76:6e:
74:e3:c4:e7:fa:d5:69:0a:ec:5c:da:5a:83:08:fb:
eb:e3:01:9e:49:f7:99:cb:cd:42:e0:92:ed:65:fd:
f5:4e:a1:47:ad:57:40:af:46:5c:30:bc:02:70:f2:
d4:40:fa:df:0c:76:83:28:6e:fc:bf:9b:ff:52:52:
7d:90:44:f0:d4:a4:2a:4e:ac:c6:93:f4:5b:27:ee:
d4:25:55:e7:e3:44:9c:8d:ce:a1:44:00:a7:38:33:
dd:8b:11:c8:c4:86:a6:f0:37:81:a6:ff:68:53:b4:
c9:95:96:27:40:d8:a3:f9:4c:09:db:6e:f1:c1:40:
ee:91:06:02:2e:f2:b6:d9:b5:98:1c:40:77:2c:8d:
6c:38:95:0d:d2:26:f4:3f:90:84:a4:c8:d4:75:fa:
91:ba:2b:56:50:67:81:4a:d7:64:53:8c:31:f7:f2:
5a:f4:4a:27:08:1b:1e:a7:81:99:53:d2:1a:89:ed:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:E2:C0:5A:FB:1D:84:F5:3C:A6:93:D1:F5:28:A8:E8:26:0F:D9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c33::/48
Signature Algorithm: sha256WithRSAEncryption
b8:24:f9:94:21:fd:32:73:8d:09:b7:79:d1:f0:9b:d1:04:8e:
d2:aa:42:c1:cf:1c:93:66:ee:83:bf:28:2f:40:f2:a5:ab:36:
93:a0:c3:e9:6f:02:d7:51:16:3b:2d:0d:ca:7f:ce:b4:9a:27:
05:6e:33:46:83:02:c9:e7:dd:e5:b5:a5:b3:43:3f:ef:89:ee:
4f:de:d0:d0:67:35:80:b7:ef:0b:b4:72:0c:4e:d8:2d:9d:0c:
a4:df:ed:7d:e0:6c:7f:5a:a0:8d:98:5a:c3:ec:58:49:03:ea:
c7:90:65:30:c9:c7:ce:c5:2f:9c:4c:9f:aa:eb:52:c7:a9:98:
f7:56:50:84:91:0d:61:10:9b:a1:c6:cc:22:a8:0e:1d:8a:e2:
16:0e:21:0f:f4:1c:f4:4a:31:6d:04:9a:33:a5:ee:6e:09:4f:
a5:0e:1d:81:19:ac:19:3e:34:ef:eb:cb:fe:8d:57:6c:0c:78:
cc:03:06:45:65:ef:fb:cb:a3:58:fb:29:6a:e6:79:4a:c9:92:
24:ab:1f:a4:d0:0e:0b:2c:1b:dd:e3:f2:d2:0d:76:d8:c3:4d:
2c:bc:9b:37:4e:79:e1:23:5a:38:8c:d1:64:46:5d:e9:15:2e:
76:0e:d3:03:8e:6a:18:01:b6:3c:f9:6d:ee:40:55:e1:8a:58:
6b:65:8c:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUMvtllzcNw4j2DUwL4sH/S/ee2zswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA1MTUwMTAwMDZaFw0yNjA1MTQwMTA1MDZaMDMxMTAvBgNV
BAMTKDJCRTRFMkMwNUFGQjFEODRGNTNDQTY5M0QxRjUyOEE4RTgyNjBGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6Je3KOb7vQS8gW8VmRhSzL4Z
7+bNqN8s4zYqKz+LZ6oNrxDzYTEh5XslweA84gR/3dXP4ID1da2Dd4NgbZMOCowM
rx53W912bnTjxOf61WkK7FzaWoMI++vjAZ5J95nLzULgku1l/fVOoUetV0CvRlww
vAJw8tRA+t8MdoMobvy/m/9SUn2QRPDUpCpOrMaT9Fsn7tQlVefjRJyNzqFEAKc4
M92LEcjEhqbwN4Gm/2hTtMmVlidA2KP5TAnbbvHBQO6RBgIu8rbZtZgcQHcsjWw4
lQ3SJvQ/kISkyNR1+pG6K1ZQZ4FK12RTjDH38lr0SicIGx6ngZlT0hqJ7WOfAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUK+TiwFr7HYT1PKaT0fUoqOgmD9kwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA4ODEyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQwzMA0GCSqGSIb3DQEBCwUAA4IBAQC4JPmUIf0yc40Jt3nR8JvRBI7SqkLBzxyT
Zu6DvygvQPKlqzaToMPpbwLXURY7LQ3Kf860micFbjNGgwLJ593ltaWzQz/vie5P
3tDQZzWAt+8LtHIMTtgtnQyk3+194Gx/WqCNmFrD7FhJA+rHkGUwycfOxS+cTJ+q
61LHqZj3VlCEkQ1hEJuhxswiqA4diuIWDiEP9Bz0SjFtBJozpe5uCU+lDh2BGawZ
PjTv68v+jVdsDHjMAwZFZe/7y6NY+ylq5nlKyZIkqx+k0A4LLBvd4/LSDXbYw00s
vJs3TnnhI1o4jNFkRl3pFS52DtMDjmoYAbY8+W3uQFXhilhrZYym
-----END CERTIFICATE-----
Generated at Tue Jun 3 10:14:35 2025 by rpki-client