Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212528.roa
File: AS212528.roa (raw, json)
Hash identifier: ffpPMXDOuoV12W8tI8Z2pbytJalcg1Gg6y6M+tSaDJ4=
Subject key identifier: 0A:EC:6A:95:A6:67:EA:BA:77:D5:00:27:1A:33:27:95:0C:D0:1F:22
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6263039562BA3DB3E0DFE4637B87ACA65D5CBC88
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212528.roa
Signing time: Tue 04 Mar 2025 18:03:42 +0000
ROA not before: Tue 04 Mar 2025 17:58:42 +0000
ROA not after: Tue 03 Mar 2026 18:03:42 +0000
asID: 212528
IP address blocks: 2a0f:85c1:baf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:63:03:95:62:ba:3d:b3:e0:df:e4:63:7b:87:ac:a6:5d:5c:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 17:58:42 2025 GMT
Not After : Mar 3 18:03:42 2026 GMT
Subject: CN=0AEC6A95A667EABA77D500271A3327950CD01F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:d2:1c:f2:36:52:9c:23:d6:f3:4b:7a:af:
61:ac:70:12:e5:01:57:0f:31:ba:7a:64:ed:90:d9:
05:d6:75:f8:e2:f2:42:cc:6e:54:50:a8:d9:f8:23:
72:3f:d4:49:cf:4f:48:82:68:07:c7:2a:2c:fc:3b:
b6:fd:07:84:c0:5f:c8:ed:b6:73:ab:2c:97:37:0a:
28:e4:4f:55:7f:c2:74:c9:cf:ca:3b:eb:e8:90:d9:
a3:52:00:9a:d8:44:06:fa:da:5a:c4:d1:b5:65:c1:
3b:13:e0:b8:c0:91:4e:f5:78:f6:47:3e:5d:69:c2:
76:c3:54:e4:60:0f:61:16:db:c7:92:06:b5:99:c6:
f5:02:04:53:ab:94:9f:3c:b3:81:4d:9e:88:0a:b9:
32:ab:1d:54:d0:26:31:35:b5:89:28:f8:0f:af:9f:
17:ed:69:fe:17:27:de:2a:d6:11:2e:17:c2:80:fa:
e7:cb:d3:b0:b6:fa:e0:9f:fe:cb:ea:34:7e:89:34:
5d:9c:53:3f:0b:c5:6d:cd:b5:0a:2c:61:d4:a4:92:
98:cc:1b:7a:23:fc:f3:b5:a1:e1:73:8c:15:c2:40:
a2:a2:1a:c6:c3:5b:42:b4:53:fc:7c:57:0b:05:8d:
bb:8b:0d:79:a9:a1:72:8b:0e:57:36:70:ff:00:19:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:6A:95:A6:67:EA:BA:77:D5:00:27:1A:33:27:95:0C:D0:1F:22
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:baf::/48
Signature Algorithm: sha256WithRSAEncryption
62:e8:76:32:2b:c8:94:f3:72:2d:30:69:0c:33:a6:e2:c8:d0:
d9:c0:49:d0:08:05:5c:97:63:00:11:59:4c:b5:c8:e3:d0:c7:
e2:da:40:0b:da:f9:ac:b7:e7:07:e2:7b:87:51:c9:aa:56:3b:
9f:f4:1d:9e:5f:97:13:7c:e2:9f:8b:15:eb:36:0c:56:fb:a6:
9e:24:ba:55:d4:48:7f:c5:86:0c:e3:50:0d:a1:8b:09:97:d1:
c4:00:f3:6f:07:17:3f:3d:b7:9d:0f:25:82:b4:c3:bf:8c:bd:
85:eb:4b:b8:0d:5f:08:77:44:c2:f4:88:a5:9c:d6:ee:17:3c:
5e:22:c1:1b:b4:6a:ef:1e:ab:43:1c:87:0e:e0:03:70:ed:19:
cc:30:42:e9:6c:e2:66:e1:f1:e7:03:01:a8:39:b0:1a:5d:2d:
be:e0:6e:37:f1:da:30:4b:4d:6c:b3:83:57:36:0e:82:3d:6a:
0c:c6:a1:8a:93:0b:49:f3:cf:b6:74:5f:c4:e8:27:13:3f:db:
c0:d9:fa:00:9a:34:b9:70:ba:b7:ad:9e:6e:52:0a:7b:7d:d6:
9f:98:87:94:3c:c0:40:42:e8:d1:94:3a:e1:ac:9f:f2:d0:cd:
cd:05:76:3b:d5:6e:c8:9b:cd:e3:5b:71:0e:d4:0b:b1:f7:73:
b7:ec:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:30:08 2025 by rpki-client