Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215832.roa
File: AS215832.roa (raw, json)
Hash identifier: FiLaptRrvOaYf8PnhD/STQ0Ia/HRzaD3XzePPE8ZkEw=
Subject key identifier: 09:92:A2:58:B9:4C:92:D1:EF:43:90:B2:9D:0E:F1:A2:27:EC:48:D1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6EE4F62191826E6640AE08A165688CF65D73F54A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215832.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 215832
IP address blocks: 2a14:7580:c000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e4:f6:21:91:82:6e:66:40:ae:08:a1:65:68:8c:f6:5d:73:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=0992A258B94C92D1EF4390B29D0EF1A227EC48D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:15:9d:d6:f7:de:00:95:ef:67:41:b2:5f:
88:ac:ea:99:32:49:79:05:f2:9e:17:68:5b:b9:9d:
ad:45:08:13:63:ef:55:d5:64:99:a0:7d:3b:b5:29:
d4:2c:7c:46:2a:d1:31:4e:18:26:6d:eb:18:5a:0f:
85:e2:44:4a:87:b0:ec:76:93:4c:f8:a9:7d:e9:07:
b9:dc:26:cb:be:77:7f:a0:d9:9c:0e:53:b5:91:4f:
b7:22:98:da:79:43:eb:ab:16:97:f8:1c:00:fb:b5:
cd:56:7c:96:7d:af:b6:24:36:dd:56:15:25:f0:d4:
ef:3e:d5:44:1a:56:f9:8f:d1:ed:98:36:96:63:8b:
79:b9:f8:79:bf:81:80:c1:cd:da:28:56:e8:d0:50:
27:9a:87:78:0c:75:b2:2d:c2:f1:81:5d:81:5f:c5:
2d:cd:8a:3c:39:d7:2a:59:30:00:e4:b9:47:29:08:
fe:a1:88:89:1f:5b:f9:80:2d:11:b3:3c:72:33:c0:
81:4c:32:cb:03:e1:b1:98:4c:c3:46:e0:5a:1b:ce:
d8:4d:9b:6e:c6:65:86:78:6f:12:80:70:8c:83:0c:
29:34:87:aa:d7:74:b6:ab:b6:9d:c9:88:87:7d:6f:
fe:19:fd:2e:ef:e8:0c:91:74:ce:ed:fc:cd:ca:f2:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:92:A2:58:B9:4C:92:D1:EF:43:90:B2:9D:0E:F1:A2:27:EC:48:D1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:c000::/36
Signature Algorithm: sha256WithRSAEncryption
6a:7f:1c:a1:ad:e1:10:4c:c2:04:66:06:ab:2b:85:d3:69:68:
f2:01:6a:ee:6f:f6:4d:68:8b:ad:d2:14:e9:bf:5f:d9:9f:55:
06:fa:4a:eb:08:f9:0a:f5:fe:50:df:b9:d4:01:94:aa:82:30:
d7:68:3a:27:b7:7f:37:fa:6d:9f:f3:58:20:b1:8f:16:02:0c:
2b:53:92:38:b9:0a:b0:fe:aa:af:06:e0:dd:4b:56:d0:c2:a1:
82:26:3b:f0:fb:12:ef:ff:9e:2c:5b:74:a6:e2:90:08:21:b1:
92:ff:b0:45:9d:1b:04:0b:a1:f1:2a:15:21:00:51:a4:41:1d:
67:25:55:4f:c8:54:c9:78:d7:88:b6:1d:84:f5:9a:14:eb:e3:
86:17:30:7c:95:0d:9e:38:dd:52:e9:c7:d6:b0:b0:a7:ac:30:
34:4d:4d:13:16:23:c9:25:17:b2:02:7a:f1:7e:db:fc:37:7a:
4e:10:a2:d6:02:71:c5:f3:bd:ed:3b:b8:76:cf:10:c9:80:d0:
0e:36:17:54:3e:00:c7:6b:4e:d0:7a:04:82:26:d1:cb:23:9c:
4b:1e:bf:a4:58:8d:4f:05:c5:37:d3:7e:6c:44:88:ce:66:70:
de:d7:7a:8e:18:8c:ab:16:e9:57:9a:3f:5e:89:6c:65:26:a0:
3e:44:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:25 2025 by rpki-client