Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213481.roa
File: AS213481.roa (raw, json)
Hash identifier: yTa0tC6Wv28XqS7j/QMu5rxfoEZ4SxMBHhayupDawqU=
Subject key identifier: 2A:31:31:22:C8:1E:C5:DF:9E:6C:45:B1:A1:49:DD:09:FC:8D:7F:CC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2BB6E196E55FB46B4EE8A4469B89EF25F470D71D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213481.roa
Signing time: Wed 09 Apr 2025 13:02:16 +0000
ROA not before: Wed 09 Apr 2025 12:57:16 +0000
ROA not after: Wed 08 Apr 2026 13:02:16 +0000
asID: 213481
IP address blocks: 2a0f:85c1:bd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b6:e1:96:e5:5f:b4:6b:4e:e8:a4:46:9b:89:ef:25:f4:70:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 9 12:57:16 2025 GMT
Not After : Apr 8 13:02:16 2026 GMT
Subject: CN=2A313122C81EC5DF9E6C45B1A149DD09FC8D7FCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:f7:3f:8b:2a:02:6b:39:34:21:37:62:db:
c8:38:fe:08:78:0f:aa:be:9e:b1:71:5f:99:f7:84:
c5:84:71:60:fd:0d:b0:91:db:90:eb:29:3f:85:27:
5a:b3:8c:9e:be:42:03:87:8e:1e:1f:5c:7e:76:61:
9a:10:08:c3:71:12:3a:3a:43:23:56:e1:37:b6:d4:
52:ff:82:8a:f0:8b:19:99:f4:d9:5f:11:78:b9:56:
50:f4:57:9e:0e:6c:f0:21:52:cb:9c:81:fa:df:9e:
77:7a:e8:2c:8f:37:ba:76:86:52:f8:f8:6f:f1:86:
38:b5:48:ed:32:3c:f5:ea:50:1f:7d:3a:dd:06:36:
3c:19:92:d5:12:ac:e3:36:a3:b2:73:0a:a3:90:ed:
26:d6:83:7b:41:7f:c1:5d:d0:90:59:6f:cb:bd:c1:
d4:ef:cd:51:a1:c5:ae:2b:2f:a0:72:a7:53:9e:22:
d1:23:cf:e7:ca:2e:c7:31:40:e0:54:aa:11:a3:6d:
e3:c7:bb:7c:73:27:b9:1a:1d:3b:ef:5a:3e:60:3a:
ca:30:54:c7:fa:69:be:94:0a:dd:d8:05:70:ab:76:
1c:87:97:b1:4c:d9:01:07:8e:aa:d9:a3:3f:1e:71:
4b:f0:d7:54:33:09:c3:a9:af:bd:ea:b6:22:bc:ca:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:31:22:C8:1E:C5:DF:9E:6C:45:B1:A1:49:DD:09:FC:8D:7F:CC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bd0::/44
Signature Algorithm: sha256WithRSAEncryption
57:f0:33:8e:9e:b8:e1:29:e9:02:2a:1f:de:9c:74:78:71:2f:
71:63:12:57:d1:b5:d1:7a:61:20:3b:5d:f5:7e:8e:12:6c:a7:
14:7b:eb:78:ed:24:69:fe:f1:1c:9a:27:27:08:c4:97:31:96:
5b:46:e0:cc:d3:81:04:e0:51:7f:37:55:11:09:1e:49:c1:1a:
98:4f:18:f9:55:36:6f:ca:a5:cf:58:45:a9:78:81:d4:62:af:
ae:6d:3d:9b:36:53:0e:00:b8:ba:ee:b4:a9:35:c4:a1:ae:af:
22:21:a6:2b:13:c7:7b:1e:bf:a6:78:ad:37:7f:ca:df:bb:31:
63:8d:f8:45:17:2d:85:2e:dc:f1:6a:39:b5:c3:47:73:30:59:
27:0b:47:55:6d:a5:85:72:6e:48:0b:da:7a:23:25:1c:b7:96:
02:88:57:82:6a:82:2f:92:21:37:82:36:b9:c3:fa:58:d3:c4:
b5:5f:d1:c4:9b:12:9e:51:5a:66:b6:c4:d1:bc:d3:59:ff:a3:
7d:0b:5b:2f:72:d3:0e:d7:4a:5c:04:ab:13:e3:36:1b:3d:ed:
bf:71:4a:94:76:35:aa:48:1e:64:08:7d:29:2b:08:ce:00:c0:
db:b3:77:36:a4:f9:90:65:80:59:ed:3a:28:af:b3:c1:2b:8e:
93:e7:fc:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUK7bhluVftGtO6KRGm4nvJfRw1x0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA0MDkxMjU3MTZaFw0yNjA0MDgxMzAyMTZaMDMxMTAvBgNV
BAMTKDJBMzEzMTIyQzgxRUM1REY5RTZDNDVCMUExNDlERDA5RkM4RDdGQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQvc/iyoCazk0ITdi28g4/gh4
D6q+nrFxX5n3hMWEcWD9DbCR25DrKT+FJ1qzjJ6+QgOHjh4fXH52YZoQCMNxEjo6
QyNW4Te21FL/gorwixmZ9NlfEXi5VlD0V54ObPAhUsucgfrfnnd66CyPN7p2hlL4
+G/xhji1SO0yPPXqUB99Ot0GNjwZktUSrOM2o7JzCqOQ7SbWg3tBf8Fd0JBZb8u9
wdTvzVGhxa4rL6Byp1OeItEjz+fKLscxQOBUqhGjbePHu3xzJ7kaHTvvWj5gOsow
VMf6ab6UCt3YBXCrdhyHl7FM2QEHjqrZoz8ecUvw11QzCcOpr73qtiK8ygrHAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUKjExIsgexd+ebEWxoUndCfyNf8wwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNDgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+F
wQvQMA0GCSqGSIb3DQEBCwUAA4IBAQBX8DOOnrjhKekCKh/enHR4cS9xYxJX0bXR
emEgO131fo4SbKcUe+t47SRp/vEcmicnCMSXMZZbRuDM04EE4FF/N1URCR5JwRqY
Txj5VTZvyqXPWEWpeIHUYq+ubT2bNlMOALi67rSpNcShrq8iIaYrE8d7Hr+meK03
f8rfuzFjjfhFFy2FLtzxajm1w0dzMFknC0dVbaWFcm5IC9p6IyUct5YCiFeCaoIv
kiE3gja5w/pY08S1X9HEmxKeUVpmtsTRvNNZ/6N9C1svctMO10pcBKsT4zYbPe2/
cUqUdjWqSB5kCH0pKwjOAMDbs3c2pPmQZYBZ7Toor7PBK46T5/yK
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:38 2025 by rpki-client