Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212513.roa
File: AS212513.roa (raw, json)
Hash identifier: ig1qBYQJ+lSTaQWW3iwlBF8H6fZPZVAbBWAXRlPyjEE=
Subject key identifier: D4:80:D4:AB:87:73:BE:D5:1A:83:43:5A:58:2E:D6:A0:81:C4:5D:C7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 25C0A41D6F8848446E27AC1F83E6285075D3301B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212513.roa
Signing time: Mon 26 May 2025 22:16:34 +0000
ROA not before: Mon 26 May 2025 22:11:34 +0000
ROA not after: Mon 25 May 2026 22:16:34 +0000
asID: 212513
IP address blocks: 2a0f:85c1:bfa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c0:a4:1d:6f:88:48:44:6e:27:ac:1f:83:e6:28:50:75:d3:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 26 22:11:34 2025 GMT
Not After : May 25 22:16:34 2026 GMT
Subject: CN=D480D4AB8773BED51A83435A582ED6A081C45DC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:bd:b7:88:5d:48:b3:d6:55:42:78:9b:41:
f9:1f:c6:84:a8:0c:86:40:ea:04:7b:f4:95:0c:ca:
aa:4c:ec:62:60:4c:bd:45:72:a9:9f:13:ba:62:b9:
ae:0a:20:9d:ea:ee:98:3e:6c:25:c1:9f:5f:4e:26:
43:ae:4e:96:2c:ec:c3:9f:e7:c0:b2:38:1a:24:bd:
31:22:52:16:d9:ab:fa:3a:af:a2:c6:ad:c1:ff:75:
9a:66:db:5f:bb:87:53:e4:0a:46:58:f3:78:94:bf:
84:3a:ad:0f:44:30:36:c4:cb:76:dc:e2:d4:37:54:
b9:b0:e1:a4:4d:46:4e:d1:66:08:eb:8f:e8:a9:18:
25:46:c4:80:d0:ba:64:d5:07:dc:fd:82:33:68:29:
c6:77:8f:d3:c3:3c:1a:82:e7:ad:26:ab:59:2a:40:
93:59:f8:b4:3a:f9:02:de:cd:23:b4:87:2b:ee:03:
b9:57:dc:4f:2d:1b:18:e8:a6:8f:07:35:2c:bc:8c:
c4:44:b5:7b:a6:ff:ad:ab:fc:b0:4a:92:18:bd:4e:
a1:3d:5a:9c:72:62:7b:d4:40:80:ca:68:37:5c:6f:
5f:c5:b2:41:f5:98:29:d0:1c:9c:3b:4f:05:c4:3f:
fd:99:cb:1d:95:0b:3b:76:42:d0:d9:7b:7f:f5:eb:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:D4:AB:87:73:BE:D5:1A:83:43:5A:58:2E:D6:A0:81:C4:5D:C7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bfa::/48
Signature Algorithm: sha256WithRSAEncryption
97:46:a5:99:b2:4c:0c:43:80:16:a9:87:5a:09:5a:b1:4b:d6:
ed:4c:63:c6:9c:5c:33:7e:97:8e:84:f9:8d:89:d0:07:08:fc:
93:ef:d8:4c:99:db:2b:67:e3:cb:c6:02:99:de:6b:28:aa:af:
3a:c2:bb:b2:c9:1e:3c:6c:fe:0e:21:d6:e0:3f:8c:f3:a4:b0:
54:32:5e:0a:45:f1:a9:60:dd:f8:19:8c:5d:5c:23:40:8d:55:
57:04:42:fa:8e:c1:2d:4f:ca:39:88:6c:0e:ae:d6:07:20:0e:
51:13:00:30:b0:04:78:98:75:a1:f9:13:09:7d:78:9a:ff:59:
5d:f6:24:98:fb:e0:f1:e2:2b:ee:39:2e:68:63:82:c6:02:8b:
fa:d9:70:bf:e0:85:44:17:bf:1f:27:61:49:89:ac:93:82:fe:
96:ba:74:d1:4f:3d:a6:cc:9a:e8:5d:e8:52:a1:4c:da:ee:05:
ec:7d:bb:a4:72:07:c1:70:87:b7:5c:0b:50:c4:16:80:cc:a7:
7f:d1:8c:0d:a8:a1:78:3d:b2:29:b7:e4:4c:aa:82:c5:41:87:
96:d3:e8:15:b7:de:cc:6d:53:f5:11:8c:3b:fd:15:b2:37:4d:
82:fa:75:e6:63:58:73:dc:5f:10:89:4f:f0:8a:20:75:59:01:
83:d2:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:18:59 2025 by rpki-client