Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215267.roa
File: AS215267.roa (raw, json)
Hash identifier: vJYHOc2dbXoSDfi/xMfp+i3C2ytqcwBvcydoTffWK84=
Subject key identifier: 6E:F7:5E:76:48:4B:67:2E:AF:62:FE:E8:B3:4C:CE:0C:AB:D8:9A:3F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 391EB9CE733E0BB1D89FAAB926F0A94DC0826D9F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215267.roa
Signing time: Tue 11 Feb 2025 05:51:42 +0000
ROA not before: Tue 11 Feb 2025 05:46:42 +0000
ROA not after: Tue 10 Feb 2026 05:51:42 +0000
asID: 215267
IP address blocks: 2a0f:85c1:b32::/48 maxlen: 48
2a0f:85c1:b78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1e:b9:ce:73:3e:0b:b1:d8:9f:aa:b9:26:f0:a9:4d:c0:82:6d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 11 05:46:42 2025 GMT
Not After : Feb 10 05:51:42 2026 GMT
Subject: CN=6EF75E76484B672EAF62FEE8B34CCE0CABD89A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:87:21:0e:bd:6f:aa:fa:4c:ed:29:93:1e:
ca:4f:f6:e9:29:8d:cb:71:ef:7f:e4:2a:0c:63:cd:
ce:27:d9:89:03:21:22:7b:46:2d:2e:a2:4c:ec:32:
4f:f7:79:a5:b8:1a:21:66:6d:f7:7b:81:7e:c3:c6:
db:5b:3a:6d:10:ea:85:86:1d:d4:e2:9e:b0:f1:24:
60:1e:25:8f:44:65:69:88:2d:0f:31:cf:0d:f6:0a:
f0:29:45:c1:20:e5:3e:ef:1e:63:5e:25:70:8a:ac:
37:60:bc:c6:31:22:d2:0d:5d:1e:14:15:2b:d4:d3:
2c:85:19:b5:cf:54:52:cd:6a:72:dd:f4:1b:8e:4b:
2e:18:67:85:0d:65:48:6a:43:3b:d5:c6:99:66:2e:
b8:af:bb:fe:02:4a:70:0a:29:ef:84:7c:16:7e:cb:
d7:30:8c:8a:e8:92:3b:f4:17:55:86:0a:75:71:b8:
3a:83:e7:63:aa:5e:ae:07:e4:61:9d:60:f7:b0:4b:
94:9d:70:af:a0:34:0b:4c:58:a6:e5:ed:40:7f:59:
2e:0f:e4:16:82:48:d6:6b:78:61:1c:f7:0a:a1:7b:
83:18:1d:d0:55:01:7e:c6:00:b3:44:f2:86:74:33:
b8:c3:d6:dc:db:8e:cc:0b:65:14:d6:12:6a:e0:b0:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F7:5E:76:48:4B:67:2E:AF:62:FE:E8:B3:4C:CE:0C:AB:D8:9A:3F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b32::/48
2a0f:85c1:b78::/48
Signature Algorithm: sha256WithRSAEncryption
a2:c4:44:5f:b0:50:24:16:87:03:95:32:48:42:d0:f0:35:56:
c5:b3:33:8e:d9:5e:62:d6:ec:47:72:11:5a:4b:44:d7:50:93:
dc:73:82:98:e2:16:67:cf:4f:de:e1:fb:74:49:05:70:9e:16:
3f:e9:b8:fa:b3:cd:51:9e:5f:2e:5a:54:39:12:1b:c5:f1:af:
24:31:d1:43:8d:a1:ff:3c:d5:68:fe:65:b7:b4:4a:0f:46:0a:
2d:af:b6:dc:08:4f:e8:8b:08:36:a6:43:c7:7e:55:b6:05:0d:
d3:76:65:7d:88:f2:14:54:87:ba:b4:52:ee:25:03:cc:ea:f7:
5b:c9:47:be:ca:d9:d4:6e:02:73:cc:42:a9:dc:90:74:e3:72:
90:eb:0d:67:af:e9:0d:0c:d6:25:f1:cb:d2:bc:49:6e:76:ff:
73:19:02:9e:2b:dd:94:9b:fd:a3:1a:2e:9a:4f:75:14:3b:44:
65:c1:14:d4:00:9a:51:bd:d6:17:eb:db:d9:b6:65:47:b6:7c:
3d:fe:40:11:65:9c:ab:92:83:8f:00:12:e7:d3:30:dd:1a:a6:
8c:38:45:c7:5c:31:1b:5d:6b:d9:a2:13:af:04:e1:a2:02:25:
d1:de:3f:02:1a:49:bd:1b:bb:50:93:d5:02:1f:e7:9f:ce:6f:
0b:73:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:48 2025 by rpki-client