Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213407.roa
File: AS213407.roa (raw, json)
Hash identifier: jrUktPXWKH9KmSyD922IERsXDs7/7zbMiHPdlhVlzSM=
Subject key identifier: 8C:93:D1:F6:FC:E4:EF:8D:60:FB:7E:47:BA:A1:A8:3F:8D:64:64:B5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 07D93A7B36FD2DA9AE3C71B277F7DD3A16BC197C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213407.roa
Signing time: Mon 17 Feb 2025 20:14:59 +0000
ROA not before: Mon 17 Feb 2025 20:09:59 +0000
ROA not after: Mon 16 Feb 2026 20:14:59 +0000
asID: 213407
IP address blocks: 2a0f:85c1:ba0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d9:3a:7b:36:fd:2d:a9:ae:3c:71:b2:77:f7:dd:3a:16:bc:19:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 17 20:09:59 2025 GMT
Not After : Feb 16 20:14:59 2026 GMT
Subject: CN=8C93D1F6FCE4EF8D60FB7E47BAA1A83F8D6464B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:00:4e:a8:41:93:03:37:46:80:bb:02:28:
3f:58:ca:66:d3:12:0d:a1:06:0e:2f:e5:71:14:55:
7c:c8:98:5b:2d:a9:4c:92:95:ac:0f:0e:45:1f:64:
00:0f:8a:f8:e0:92:87:2a:87:30:7a:e8:8f:22:f8:
13:3c:43:03:c3:c5:03:c1:be:7e:61:16:b0:1d:de:
b4:ee:4e:b7:49:74:36:63:54:c4:c2:01:c9:6b:b0:
e8:9d:fb:50:3b:9d:95:b6:4b:92:ba:09:b2:a8:fb:
f5:e8:3a:72:4e:2f:37:56:95:44:a4:74:36:e5:6c:
d5:f6:79:74:67:0f:19:a8:30:c7:b0:5f:6b:83:e3:
fa:b6:70:7c:52:8c:19:ca:90:0c:e9:fd:a7:d8:b9:
7f:86:72:07:46:3f:20:c0:8a:a2:a1:12:54:5f:ca:
20:c3:88:20:2f:46:5f:ad:26:9b:50:b5:c8:ee:7c:
12:b4:7c:61:50:04:03:85:13:f2:51:64:f4:bb:09:
e4:b0:f2:76:14:30:31:6c:dd:90:ee:f2:27:05:9a:
00:ec:28:bb:48:5b:cf:cb:62:1d:e5:38:99:02:7e:
db:1f:f1:53:18:48:c5:e2:98:2b:f2:38:96:7f:f9:
31:68:17:87:7a:eb:4c:b8:08:a6:01:7f:96:50:c8:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:93:D1:F6:FC:E4:EF:8D:60:FB:7E:47:BA:A1:A8:3F:8D:64:64:B5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ba0::/48
Signature Algorithm: sha256WithRSAEncryption
ed:a4:0f:99:07:50:d7:04:ee:2b:93:d0:39:34:0f:33:fc:b3:
55:18:aa:d0:e0:ca:ee:cc:bc:d3:32:dd:52:d7:7d:1e:26:e2:
b3:da:45:65:b0:2a:d5:5c:7a:0a:e1:09:a9:85:bc:21:45:f3:
b0:33:3b:90:e9:0f:8b:91:00:b3:a1:cd:cc:a8:3b:d3:d7:3e:
38:3e:46:63:0e:f9:c5:75:d3:9e:00:08:03:d0:d2:63:fd:44:
2a:f0:8b:59:8d:3c:1b:ee:7b:26:da:8d:c9:b0:35:6c:2b:a8:
74:97:37:6d:00:c8:ce:3a:59:f3:8e:80:55:3d:d3:c5:28:a8:
84:70:fc:c5:1b:a3:0b:34:74:fc:90:23:e5:42:66:f5:6f:5a:
63:0a:88:cd:e1:fd:68:26:54:df:79:fc:f3:ce:cd:2e:f1:5a:
39:47:eb:6d:78:cd:ac:03:0c:d0:3c:be:9b:d8:4e:fc:b3:83:
ae:25:23:a7:d9:b4:a8:29:6d:5e:a3:15:b4:e3:05:25:0b:20:
88:2d:f6:37:43:5c:08:53:25:3f:84:43:fb:37:44:7e:72:96:
c9:d7:21:88:de:08:dc:d8:ac:da:77:1e:aa:c4:7f:e2:34:68:
fd:5c:60:6a:60:d3:3d:31:4a:c1:6b:f9:74:0d:b7:60:62:7d:
e0:dc:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:27:05 2025 by rpki-client