Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213413.roa
File: AS213413.roa (raw, json)
Hash identifier: 2AcO6mWHHoRkV5SPU7xrwb8GLrpNJZCtiCJpFv41tIE=
Subject key identifier: 2D:CF:87:50:46:63:53:D0:D9:9A:09:9D:F0:18:90:BE:B6:ED:C5:40
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 57125475810D5CA2C0AF9876DB04B2C037F5AF6E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213413.roa
Signing time: Mon 17 Feb 2025 20:14:22 +0000
ROA not before: Mon 17 Feb 2025 20:09:22 +0000
ROA not after: Mon 16 Feb 2026 20:14:22 +0000
asID: 213413
IP address blocks: 2a0f:85c1:803::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:12:54:75:81:0d:5c:a2:c0:af:98:76:db:04:b2:c0:37:f5:af:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 17 20:09:22 2025 GMT
Not After : Feb 16 20:14:22 2026 GMT
Subject: CN=2DCF8750466353D0D99A099DF01890BEB6EDC540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:44:76:f2:ff:ef:8d:08:2c:c4:96:b8:cc:
21:0a:0c:30:c5:1d:fd:9c:b9:cc:ef:c7:5c:a1:b5:
19:8b:50:af:c1:98:3b:15:69:5d:6b:23:88:96:05:
40:25:57:c8:a6:4a:89:c0:47:e6:3f:05:78:ab:e3:
d3:aa:b3:03:0a:c6:78:ee:4b:31:45:a8:1b:3d:e5:
cd:04:6d:dd:0b:e2:75:3a:45:8b:95:58:fc:0e:b0:
6f:17:c2:9c:8a:91:54:7a:2a:b8:6c:a3:1a:7b:c3:
46:c5:5b:e5:de:3a:48:4f:ac:40:59:14:7e:d2:99:
a2:7d:db:97:3b:14:f9:b8:23:6c:b2:c9:1c:00:a8:
be:1e:06:08:f7:de:df:55:ee:b3:71:f8:48:36:08:
f5:bf:fd:a3:86:23:9b:f2:43:4e:e3:3b:3d:cf:c8:
82:4c:1f:9d:53:10:06:46:48:46:05:a3:7c:89:6a:
39:62:c1:a9:45:73:2f:83:6e:23:6e:ff:dd:4f:48:
3d:e3:56:1b:57:1c:39:05:48:0e:72:28:7a:0e:4f:
d1:d6:4c:94:79:49:52:a7:fd:d5:bd:03:ef:10:29:
66:1a:c7:47:ca:2d:35:3f:a2:d1:87:c2:5d:48:8f:
46:b6:2a:db:b4:94:aa:d1:3c:95:ca:9d:b3:6e:78:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:87:50:46:63:53:D0:D9:9A:09:9D:F0:18:90:BE:B6:ED:C5:40
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:803::/48
Signature Algorithm: sha256WithRSAEncryption
72:b8:30:e8:08:f1:b3:02:73:99:26:98:23:47:7a:85:29:87:
e4:87:d6:4a:c8:ad:3d:8a:cd:50:11:d5:af:db:58:27:83:6a:
a0:12:bc:27:f4:c3:a1:46:ee:bf:e8:fa:09:a5:98:f2:7f:37:
96:6f:1d:53:54:e0:6a:65:cb:75:ac:78:62:ec:04:55:5f:73:
49:99:36:69:77:e5:9b:1a:94:ba:58:d8:10:57:86:a0:2c:55:
e5:46:81:3f:c3:e0:a3:65:a7:78:f5:c1:24:0c:6c:84:3a:21:
7a:93:86:2f:23:da:c9:e1:f6:08:4b:08:7c:45:03:64:82:01:
d0:03:91:14:ff:65:d2:5e:43:d5:9d:16:d4:66:d0:82:76:ea:
e8:15:91:f1:d8:4c:03:96:c6:31:12:86:b2:16:0b:10:7c:69:
1c:17:60:ae:8f:fc:a7:d5:50:2c:64:0a:88:69:18:53:71:5a:
0a:69:ff:8c:94:e5:47:34:98:45:14:ba:33:ae:4f:f6:79:26:
df:93:5b:21:f3:50:49:4d:77:3b:e7:a6:3b:a1:ec:31:bb:96:
21:57:df:7d:ef:2d:3a:d5:12:71:17:ec:2f:62:ab:43:ac:0b:
d7:67:b0:7f:a1:5b:a5:13:de:27:de:f8:fe:7e:bf:3d:93:93:
68:18:eb:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVxJUdYENXKLAr5h22wSywDf1r24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTAyMTcyMDA5MjJaFw0yNjAyMTYyMDE0MjJaMDMxMTAvBgNV
BAMTKDJEQ0Y4NzUwNDY2MzUzRDBEOTlBMDk5REYwMTg5MEJFQjZFREM1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2ER28v/vjQgsxJa4zCEKDDDF
Hf2cuczvx1yhtRmLUK/BmDsVaV1rI4iWBUAlV8imSonAR+Y/BXir49OqswMKxnju
SzFFqBs95c0Ebd0L4nU6RYuVWPwOsG8XwpyKkVR6Krhsoxp7w0bFW+XeOkhPrEBZ
FH7SmaJ925c7FPm4I2yyyRwAqL4eBgj33t9V7rNx+Eg2CPW//aOGI5vyQ07jOz3P
yIJMH51TEAZGSEYFo3yJajliwalFcy+DbiNu/91PSD3jVhtXHDkFSA5yKHoOT9HW
TJR5SVKn/dW9A+8QKWYax0fKLTU/otGHwl1Ij0a2Ktu0lKrRPJXKnbNueAO9AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQULc+HUEZjU9DZmgmd8BiQvrbtxUAwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNDEzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgDMA0GCSqGSIb3DQEBCwUAA4IBAQByuDDoCPGzAnOZJpgjR3qFKYfkh9ZKyK09
is1QEdWv21gng2qgErwn9MOhRu6/6PoJpZjyfzeWbx1TVOBqZct1rHhi7ARVX3NJ
mTZpd+WbGpS6WNgQV4agLFXlRoE/w+CjZad49cEkDGyEOiF6k4YvI9rJ4fYISwh8
RQNkggHQA5EU/2XSXkPVnRbUZtCCduroFZHx2EwDlsYxEoayFgsQfGkcF2Cuj/yn
1VAsZAqIaRhTcVoKaf+MlOVHNJhFFLozrk/2eSbfk1sh81BJTXc756Y7oewxu5Yh
V9997y061RJxF+wvYqtDrAvXZ7B/oVulE94n3vj+fr89k5NoGOt2
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:31:23 2025 by rpki-client