Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213707.roa
File: AS213707.roa (raw, json)
Hash identifier: NSeIbz0ngondz8PkRa1ekgI9pGb88eUc6E1ZMXTjE7c=
Subject key identifier: 29:7D:AC:E6:8F:92:EF:5E:AA:3C:7D:32:7F:0D:CC:BA:81:3E:C5:77
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6D813A3801D5FD32DEA94EEC656600D3DCC027D8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213707.roa
Signing time: Wed 15 Jan 2025 02:21:22 +0000
ROA not before: Wed 15 Jan 2025 02:16:22 +0000
ROA not after: Wed 14 Jan 2026 02:21:22 +0000
asID: 213707
IP address blocks: 2a0f:85c1:b45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:81:3a:38:01:d5:fd:32:de:a9:4e:ec:65:66:00:d3:dc:c0:27:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 15 02:16:22 2025 GMT
Not After : Jan 14 02:21:22 2026 GMT
Subject: CN=297DACE68F92EF5EAA3C7D327F0DCCBA813EC577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:54:2c:d3:cf:8e:fb:ac:ad:a2:ff:10:fc:
dc:df:87:9a:e7:b2:eb:2d:0f:e2:0a:bd:d3:9a:9c:
df:92:5c:8f:c6:d4:71:96:c5:cd:42:be:2a:6b:ea:
c4:5a:17:f2:a8:e8:2d:15:c7:84:84:0d:73:41:96:
fa:93:e1:92:42:62:e7:02:12:46:fb:7e:2d:9b:46:
ff:ca:03:d2:48:1c:84:94:04:ca:1a:36:f1:3c:88:
fd:a3:28:29:a3:97:ca:c2:15:86:44:ee:dd:b4:54:
88:1b:5e:59:95:60:df:65:d5:a8:32:31:d1:25:35:
46:66:a2:7c:ff:44:79:71:5c:bd:da:61:10:fc:bb:
69:28:c8:fd:7c:3c:cd:f6:9e:da:35:7c:42:07:81:
90:41:58:0b:4a:62:e3:28:b5:dc:0f:43:38:d6:d6:
de:ae:ec:38:b8:97:3a:24:de:50:c7:e5:8a:6d:69:
19:8a:91:58:87:35:99:c8:08:fa:13:07:eb:1f:48:
76:9f:b6:fc:cd:d8:92:c1:1c:25:01:f0:40:3a:1a:
c8:d7:5c:14:29:46:af:8f:2c:d3:df:9c:a3:9a:37:
ab:5d:21:96:80:23:90:48:50:35:61:f2:d6:85:38:
77:27:2f:cb:f6:02:93:06:a7:99:6a:41:a5:74:c7:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7D:AC:E6:8F:92:EF:5E:AA:3C:7D:32:7F:0D:CC:BA:81:3E:C5:77
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b45::/48
Signature Algorithm: sha256WithRSAEncryption
96:ce:b2:fe:4b:49:9b:d4:f5:c3:35:84:15:61:6e:ba:42:d5:
ae:67:39:8c:a2:d6:b5:86:f8:ae:5a:e1:26:bc:9a:3e:a1:6e:
08:7d:bf:1a:66:a6:27:2a:20:bb:97:d4:cc:ef:35:69:2a:8a:
7e:78:a1:d7:3b:30:57:83:0c:b9:82:d9:25:c0:80:18:85:2d:
0f:c3:8d:b2:cf:42:24:a4:4c:8b:06:6e:ad:0c:43:99:fb:58:
fb:87:2a:76:eb:5b:7c:d2:7f:9a:1e:21:16:88:ea:e7:26:73:
cf:9f:32:c7:8d:36:02:d4:b1:8e:f9:ca:35:b2:e6:5a:48:a3:
39:ce:3d:a8:8d:21:f6:46:8a:da:47:f8:04:01:10:66:94:9e:
9a:16:6f:85:ab:fa:d0:2e:66:8d:eb:d6:6f:bb:a2:5d:d3:27:
8c:a4:fa:66:73:bb:38:6a:f5:04:a7:f1:63:7b:01:42:33:d2:
a8:75:c3:2d:f1:35:86:3d:d7:ad:10:f0:54:95:80:8a:9a:fc:
8c:2b:15:43:48:f4:7b:fe:89:fb:74:ec:ed:05:2e:9b:09:6a:
e7:91:31:b7:7e:83:af:d2:8e:ec:54:fe:73:40:ec:76:80:da:
bc:34:85:ec:87:36:02:b6:45:26:97:81:6c:9e:69:bc:fc:00:
e9:23:2b:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUbYE6OAHV/TLeqU7sZWYA09zAJ9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTAxMTUwMjE2MjJaFw0yNjAxMTQwMjIxMjJaMDMxMTAvBgNV
BAMTKDI5N0RBQ0U2OEY5MkVGNUVBQTNDN0QzMjdGMERDQ0JBODEzRUM1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOblQs08+O+6ytov8Q/Nzfh5rn
sustD+IKvdOanN+SXI/G1HGWxc1Cvipr6sRaF/Ko6C0Vx4SEDXNBlvqT4ZJCYucC
Ekb7fi2bRv/KA9JIHISUBMoaNvE8iP2jKCmjl8rCFYZE7t20VIgbXlmVYN9l1agy
MdElNUZmonz/RHlxXL3aYRD8u2koyP18PM32nto1fEIHgZBBWAtKYuMotdwPQzjW
1t6u7Di4lzok3lDH5YptaRmKkViHNZnICPoTB+sfSHaftvzN2JLBHCUB8EA6GsjX
XBQpRq+PLNPfnKOaN6tdIZaAI5BIUDVh8taFOHcnL8v2ApMGp5lqQaV0x+PzAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUKX2s5o+S716qPH0yfw3MuoE+xXcwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNzA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQtFMA0GCSqGSIb3DQEBCwUAA4IBAQCWzrL+S0mb1PXDNYQVYW66QtWuZzmMota1
hviuWuEmvJo+oW4Ifb8aZqYnKiC7l9TM7zVpKop+eKHXOzBXgwy5gtklwIAYhS0P
w42yz0IkpEyLBm6tDEOZ+1j7hyp261t80n+aHiEWiOrnJnPPnzLHjTYC1LGO+co1
suZaSKM5zj2ojSH2RoraR/gEARBmlJ6aFm+Fq/rQLmaN69Zvu6Jd0yeMpPpmc7s4
avUEp/FjewFCM9KodcMt8TWGPdetEPBUlYCKmvyMKxVDSPR7/on7dOztBS6bCWrn
kTG3foOv0o7sVP5zQOx2gNq8NIXshzYCtkUml4Fsnmm8/ADpIysV
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:58:52 2025 by rpki-client