Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215084.roa
File: AS215084.roa (raw, json)
Hash identifier: exGz58r/nFME7nm/RYdX1Hql+jfcmLZQ5K9BNY5Bivw=
Subject key identifier: FE:C5:19:E1:00:44:D8:9B:8C:A3:E8:4B:13:55:1A:18:92:FC:21:EB
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6384279011C133861589CB48675F480D7C70D065
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215084.roa
Signing time: Tue 04 Feb 2025 00:17:07 +0000
ROA not before: Tue 04 Feb 2025 00:12:07 +0000
ROA not after: Tue 03 Feb 2026 00:17:07 +0000
asID: 215084
IP address blocks: 2a14:7581:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:84:27:90:11:c1:33:86:15:89:cb:48:67:5f:48:0d:7c:70:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:07 2025 GMT
Not After : Feb 3 00:17:07 2026 GMT
Subject: CN=FEC519E10044D89B8CA3E84B13551A1892FC21EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6b:44:a0:a4:76:d8:be:5c:b3:fd:d0:af:21:
b5:bb:ce:99:8b:dd:9f:34:10:62:9c:0c:54:43:a2:
6f:2d:54:ef:06:e9:f6:cc:74:92:cc:c2:62:db:c6:
fc:c3:72:f4:a3:f5:e2:da:74:d7:18:cb:d5:65:99:
4a:95:d8:d4:8d:9f:86:f6:da:9f:bd:46:34:15:85:
33:76:f4:c7:21:de:fc:d4:a3:a3:7a:40:96:51:50:
4a:f4:38:6e:1b:bf:bc:21:4e:d1:e5:2e:71:f4:60:
c2:94:08:1c:64:32:c4:13:d5:a8:77:d3:98:b0:6e:
07:ca:55:a7:6b:a4:e3:8c:75:2b:23:52:81:b9:90:
bf:80:f4:5e:b4:41:a9:62:ea:da:57:00:b6:90:82:
93:5e:fd:65:30:ae:2b:c7:2d:40:a0:d3:b6:4a:a2:
51:a2:7c:42:e7:57:73:cc:a7:23:34:39:d9:4d:d4:
ec:d2:45:f1:15:c8:44:0f:3e:07:c6:a5:3c:fb:de:
ff:e4:58:b9:17:f7:65:ac:f4:1b:3b:80:05:be:8a:
b4:3c:8e:82:5e:21:36:b1:b9:ad:63:6c:11:53:d1:
60:a8:85:77:29:9e:6e:40:93:5a:3b:45:84:04:6e:
f3:7d:7a:51:9d:78:d5:5b:41:c5:8c:04:c4:59:7a:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C5:19:E1:00:44:D8:9B:8C:A3:E8:4B:13:55:1A:18:92:FC:21:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:a00::/40
Signature Algorithm: sha256WithRSAEncryption
8d:74:35:7f:2b:37:3c:98:5a:6b:3b:f8:58:9e:ae:61:c0:3a:
a4:f2:97:11:3e:47:14:61:f6:02:1d:d0:25:a9:5d:12:8b:e2:
63:5c:59:4f:0c:a6:92:4a:38:55:07:40:35:8d:09:c2:7b:d4:
04:47:4b:83:1c:64:46:07:26:33:bb:40:c1:5c:ab:8a:09:47:
a7:74:c6:b3:0f:a5:1b:f1:61:c4:9e:a4:d5:64:c8:76:8e:a5:
e7:50:5b:40:a0:ff:6d:d2:59:50:f8:e3:de:e9:d8:7b:e2:11:
53:98:e0:49:8f:4f:df:7a:41:55:4b:40:2a:50:02:1a:69:32:
1e:94:ef:37:f1:d2:15:1f:02:54:9f:dc:b4:90:ab:2a:d0:ee:
fc:e2:6b:f0:ae:5c:3f:d1:6f:2a:92:9e:8a:62:fb:25:b1:e0:
39:51:1f:1a:67:0c:4d:d1:85:b7:29:b9:5a:63:8a:90:93:40:
a4:03:37:0e:4a:5a:23:1c:3e:b4:11:07:6c:ef:30:79:4a:fe:
a3:ec:3c:77:0a:f5:17:8c:87:ea:75:d8:0d:fe:0d:76:12:f0:
f8:80:dd:e9:e2:c7:39:d3:b5:8c:47:c7:2d:ba:66:15:f4:c5:
cd:30:72:36:50:3f:d6:c2:a8:63:9f:0e:9a:e2:ce:91:b3:51:
c0:90:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:31:30 2025 by rpki-client