Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213549.roa
File: AS213549.roa (raw, json)
Hash identifier: mWKepysG/k6WO1hcrVm8yz9eQtVon8WNHoJIZLSZQic=
Subject key identifier: ED:7F:D6:54:94:B4:78:0E:07:A0:16:C4:72:76:54:43:81:1D:29:21
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 69161D77967BD4354C2CE02BC413601086EEB23B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213549.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 213549
IP address blocks: 2a14:7581:fe9::/48 maxlen: 48
2a14:7581:9f40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:16:1d:77:96:7b:d4:35:4c:2c:e0:2b:c4:13:60:10:86:ee:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=ED7FD65494B4780E07A016C472765443811D2921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:9f:e4:93:d0:6c:c7:f0:69:ef:f8:25:72:
88:31:e0:2a:e4:70:36:76:bf:c3:cb:10:30:1e:1c:
c4:6a:45:ff:c6:16:fa:57:83:70:84:fc:a6:dd:bc:
9d:7b:e0:dd:1f:29:5a:fc:21:4d:29:e2:8e:95:3f:
50:d1:57:05:b7:8d:f8:18:0e:db:41:11:90:07:a6:
d4:45:a7:d2:ab:f9:81:c9:d8:2f:f5:44:5a:91:a4:
17:a3:6d:28:6f:1b:03:74:15:f5:15:e5:86:d9:c4:
97:e4:9f:12:e7:82:06:d3:bf:b7:37:2e:74:bc:1f:
2e:a2:dd:56:0f:92:b1:e4:37:7b:33:f3:9b:f0:57:
42:1e:b5:0b:13:31:c9:fb:26:65:72:ae:89:f2:ae:
e2:e7:db:a2:30:81:c2:65:d4:a1:26:b3:e5:7a:73:
30:4d:f5:19:09:a1:d8:68:45:39:f2:ff:76:5b:16:
3a:d0:78:dd:59:e5:b6:28:66:36:b6:53:28:78:7e:
74:e4:a5:27:3b:73:d4:36:95:8f:cf:9f:da:14:ed:
c0:30:39:4f:97:7d:ef:53:2a:07:0a:60:b3:b4:c4:
d5:ee:1e:67:ac:01:ff:aa:6b:28:79:42:a3:7d:32:
98:9b:88:16:95:b4:cb:fe:01:ab:a4:e6:73:41:eb:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:D6:54:94:B4:78:0E:07:A0:16:C4:72:76:54:43:81:1D:29:21
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fe9::/48
2a14:7581:9f40::/44
Signature Algorithm: sha256WithRSAEncryption
45:6c:11:df:b7:d2:5a:08:d6:3d:48:40:18:8a:a8:32:19:b1:
cf:12:91:9a:07:c9:43:09:a9:d8:b4:43:b4:40:f8:4f:3a:40:
01:1e:ec:a3:a8:34:7b:53:62:6b:0b:4b:07:00:2d:f0:b9:34:
3d:b4:b2:37:56:d0:71:17:04:53:87:ee:ae:64:c2:47:7e:0a:
bf:62:ec:e7:19:ec:c0:b6:9c:0a:f5:42:6b:42:da:7b:30:ea:
cd:89:df:dd:95:5e:02:fa:50:4b:61:a4:d7:0c:93:2d:2e:4a:
51:e0:6e:04:f1:e9:74:09:d1:23:ee:5d:ac:3d:ca:70:1f:a3:
a7:35:6b:a7:9f:bd:fa:a9:19:5c:bf:ce:ad:97:3c:d9:52:db:
f3:9f:dd:d2:3d:17:bd:38:7a:1c:ba:85:7b:a8:e2:74:8d:ee:
44:16:aa:0f:b8:f3:04:be:c2:94:a3:59:9e:6e:16:cb:ad:c0:
4a:91:5d:cc:4b:82:b7:4b:00:ca:9e:01:89:a5:89:99:7c:4c:
97:ab:53:3c:2f:47:ca:5b:81:46:8e:d6:4d:c5:e5:a2:65:0c:
26:03:ff:59:24:ab:11:4b:bd:ff:eb:da:97:b0:4a:76:f8:32:
f3:d4:9b:2c:92:5c:44:ac:e8:4e:1c:19:67:b9:9a:d1:ce:2d:
aa:36:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:57 2025 by rpki-client