Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212370.roa
File: AS212370.roa (raw, json)
Hash identifier: rGSDSgYRkpp0bS0joOJ4kINL82/7y5AK3zfKvFsY0Ys=
Subject key identifier: 34:79:31:D3:35:1D:91:8F:15:E5:D3:F3:0D:72:79:D6:E6:C6:F4:43
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 27A62817D81F55961AB7AFB68696E8B271BB6053
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212370.roa
Signing time: Tue 04 Mar 2025 18:03:51 +0000
ROA not before: Tue 04 Mar 2025 17:58:51 +0000
ROA not after: Tue 03 Mar 2026 18:03:51 +0000
asID: 212370
IP address blocks: 2a0f:85c1:bb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a6:28:17:d8:1f:55:96:1a:b7:af:b6:86:96:e8:b2:71:bb:60:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 17:58:51 2025 GMT
Not After : Mar 3 18:03:51 2026 GMT
Subject: CN=347931D3351D918F15E5D3F30D7279D6E6C6F443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:40:a1:02:68:59:6c:97:22:bb:9c:93:fb:
c0:5a:0f:c4:c8:64:b8:9d:0c:ac:29:2b:23:5f:76:
b2:12:00:f4:53:d4:64:e3:16:82:f2:b7:12:46:81:
b5:d4:ef:8b:8b:c8:01:55:b9:f8:64:00:a4:12:47:
b0:19:04:73:db:5e:f3:94:67:78:ff:cb:ab:f1:0f:
c0:a6:39:b7:c8:43:7b:30:43:78:38:72:60:d4:85:
44:cf:7f:aa:1d:d5:05:54:b4:73:a6:93:b0:fe:84:
20:49:73:26:1e:a1:8f:b1:a9:ce:47:2c:5c:b1:f7:
dc:05:17:97:62:78:51:ac:a5:14:08:da:cb:ec:ef:
f3:33:a4:be:df:b3:0b:0d:ff:b9:36:29:84:18:a5:
3e:91:f5:e4:cb:cd:1e:e0:a4:e4:0f:ab:20:38:27:
15:18:25:e8:0a:d3:70:79:5c:cc:89:56:42:81:f8:
44:d0:85:57:e1:8c:b1:df:75:44:f1:6c:fe:60:46:
b8:54:66:3e:65:90:5b:88:27:b1:88:10:1d:7b:6a:
4f:0c:c2:60:08:7b:61:49:3a:ab:9c:70:6a:59:3d:
20:aa:69:59:7b:13:2a:d5:43:1f:84:13:70:ee:f9:
9e:44:7e:84:d5:f1:04:81:90:07:be:00:33:51:80:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:79:31:D3:35:1D:91:8F:15:E5:D3:F3:0D:72:79:D6:E6:C6:F4:43
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bb0::/48
Signature Algorithm: sha256WithRSAEncryption
ca:a3:ee:ab:80:78:ba:5d:a0:d3:fc:13:52:61:09:7e:47:80:
67:23:22:6e:03:0a:85:a9:45:ac:34:0a:d8:4b:12:6c:55:20:
ac:17:04:cd:78:3f:b4:5a:31:12:51:49:55:42:be:82:ad:16:
06:08:77:bf:27:dd:08:0d:5d:f2:a9:32:c9:14:e8:0b:d3:15:
9c:d9:e4:fe:4a:5c:1b:f8:12:97:6b:68:94:63:30:ad:e3:1b:
cf:93:78:dc:74:df:a7:14:89:6c:bb:0f:ac:7f:81:cb:53:ec:
3a:27:31:3b:e1:07:8c:76:b1:b8:2e:86:99:57:7b:ac:fd:78:
74:cd:71:d9:f7:5c:6b:59:d7:a1:fa:d3:07:00:47:79:ee:b7:
cf:fc:77:07:81:9c:d6:25:ae:f5:9e:0a:f3:8d:c6:c3:8f:c3:
b9:c4:5e:e1:d5:20:2c:68:03:19:90:41:9e:3a:c7:1b:c3:7a:
97:8e:55:ec:89:9c:f2:ea:81:d5:da:79:dd:56:53:09:93:56:
a9:69:0d:62:5f:47:ab:c1:32:e9:af:af:ac:7d:53:f3:a6:e2:
32:5c:8b:6d:1b:7e:2b:f3:14:98:22:c5:52:89:e5:78:e3:6f:
60:7f:81:d6:66:34:69:80:1b:cc:cf:00:65:b6:e7:d1:74:eb:
c1:4f:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:28 2025 by rpki-client