Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216052.roa
File: AS216052.roa (raw, json)
Hash identifier: e9/MO3afzFmmUzeL8bix2YNV+0Ymr6QfiwMGjyCZ7Jo=
Subject key identifier: EC:E4:2D:15:6B:4B:F5:8B:B9:F0:1E:6D:7D:B3:E4:6F:9A:19:01:02
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 320F089E74DAEAB0597D30C69A61606B5D460625
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216052.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 216052
IP address blocks: 2a14:7581::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0f:08:9e:74:da:ea:b0:59:7d:30:c6:9a:61:60:6b:5d:46:06:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=ECE42D156B4BF58BB9F01E6D7DB3E46F9A190102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:60:c8:19:38:cf:46:0e:ce:99:00:fd:bc:
e2:ad:8d:75:19:69:02:49:b3:84:57:08:83:54:6a:
6a:fa:c6:8a:0f:ac:0d:90:db:4b:4a:e4:0c:ca:af:
f0:16:8f:3a:b7:4f:7a:c0:4f:b1:97:da:9f:84:c5:
5f:f0:0b:63:90:7a:05:bf:a0:f4:f4:68:33:12:f5:
d3:06:29:67:b7:dc:21:43:a7:05:69:8d:a8:02:96:
e1:dc:b2:36:08:5c:a9:8b:58:07:15:62:a6:b0:b4:
2c:0a:be:62:8c:1b:4b:5e:86:7c:34:16:31:65:ff:
ec:3f:30:b2:95:b0:8d:4b:8a:db:c4:cf:5a:79:f8:
c6:0a:b0:5f:93:ac:b5:91:71:fa:7d:39:6a:76:02:
b4:2c:66:ff:ca:eb:2c:97:16:a5:2c:8f:e1:87:12:
fe:0c:a0:e6:b3:88:9e:c3:65:5f:aa:4c:3c:b3:b9:
a9:a4:0f:c3:16:21:26:11:17:c0:36:ae:35:74:5c:
86:c1:82:e3:33:12:ce:28:2a:a7:02:80:a2:f2:b0:
9c:08:01:93:61:fc:4f:6f:a4:dd:a2:40:23:f2:c0:
fa:69:2f:68:45:bd:4e:91:0f:f7:8c:3a:ca:35:6f:
8c:57:0b:41:1f:c5:86:4a:80:7c:05:2b:ad:4e:bc:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:2D:15:6B:4B:F5:8B:B9:F0:1E:6D:7D:B3:E4:6F:9A:19:01:02
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581::/40
Signature Algorithm: sha256WithRSAEncryption
9e:e3:c8:04:84:d6:21:b6:00:c8:ff:74:c3:98:df:f8:90:1c:
fb:8a:d1:d0:7b:24:41:e1:5d:34:15:3b:2c:14:f9:85:c5:56:
4e:d5:3b:42:6c:e0:f3:b8:7d:8e:91:65:e8:e1:e0:1a:a9:04:
c7:14:72:d0:dc:af:b8:19:39:8a:ac:0e:1a:e7:26:ca:af:bc:
7d:41:f9:ab:5d:49:b1:2f:a3:d4:70:d7:63:3f:fc:53:38:ed:
dd:12:df:70:4c:0a:eb:3d:a8:bd:b5:20:85:97:10:b6:71:10:
94:8d:de:8f:5f:13:6d:ce:97:5a:34:6a:85:1c:66:09:15:eb:
d6:1b:c3:e4:6e:a2:86:5c:12:7a:46:85:53:c9:b8:c9:c8:6d:
ab:79:04:b3:53:f6:74:29:cf:28:cc:8c:95:37:e7:40:8e:be:
84:9a:02:dd:af:f3:88:ce:fe:e8:75:cb:da:46:7c:16:29:15:
f4:19:0c:91:4c:97:d1:7d:3f:36:e3:e0:9d:f0:68:96:d1:a6:
9e:df:a1:6b:d3:8d:47:68:9f:c0:af:b3:71:89:3b:02:ec:54:
ec:3b:c1:f1:2d:a4:5f:8b:cd:60:8f:48:cb:29:49:a9:4e:0b:
23:4c:88:c6:cb:df:71:02:5f:6d:f7:8a:bc:bd:96:bd:fb:85:
27:cf:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:14:21 2025 by rpki-client