Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS211557.roa
File: AS211557.roa (raw, json)
Hash identifier: QEte9lLmt/FAL0wPtx+jNmuN4uLKDX8bg29LKwyx7Aw=
Subject key identifier: 3A:16:D5:04:EE:DA:75:08:DA:18:62:49:2F:63:02:15:7D:BC:AF:C1
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 0A0F59EEDA086B8453E6684237225BF152A4CF6C
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS211557.roa
Signing time: Thu 22 May 2025 07:49:04 +0000
ROA not before: Thu 22 May 2025 07:44:04 +0000
ROA not after: Thu 21 May 2026 07:49:04 +0000
asID: 211557
IP address blocks: 185.231.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0f:59:ee:da:08:6b:84:53:e6:68:42:37:22:5b:f1:52:a4:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: May 22 07:44:04 2025 GMT
Not After : May 21 07:49:04 2026 GMT
Subject: CN=3A16D504EEDA7508DA1862492F6302157DBCAFC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:fb:24:10:f0:e4:6f:97:88:57:58:8e:8a:
31:57:3c:d6:6c:1e:3d:7e:06:ce:04:9c:8c:98:21:
60:33:b0:2a:f9:b3:41:1d:6e:05:97:ae:20:8c:ca:
6a:6e:36:f6:e2:1d:cb:72:3d:cb:b3:77:e5:66:1f:
07:6d:ba:f5:24:a2:47:74:7d:1a:85:bf:40:97:da:
22:75:ae:55:7f:f0:f8:f9:c9:98:be:c2:d2:da:b2:
8d:f5:6f:c7:9a:dc:b6:6a:c6:90:35:a5:39:ce:e3:
18:11:2f:52:82:ad:7b:b9:25:8c:cc:98:1c:31:d5:
f8:3d:a8:48:2b:e7:66:74:01:b0:8a:f3:90:f4:21:
79:6d:27:87:64:c5:d4:bd:f0:cb:bc:04:4d:28:12:
ba:0d:1f:d9:0d:e8:73:2f:b1:13:1f:41:aa:c4:9f:
fe:c6:11:07:ab:92:c6:6c:c0:c4:7b:3d:66:f7:69:
5d:95:e7:25:ee:db:51:5a:5a:66:7f:84:4f:ed:00:
66:84:ae:83:09:88:e0:d0:50:ab:3f:72:f9:c1:61:
b1:63:7a:6e:a8:af:a5:04:40:5b:d8:a8:04:0e:1f:
b4:a2:64:84:9a:a1:ec:95:8e:b8:38:e7:24:6b:6e:
35:8b:c9:d3:93:23:65:43:9b:6a:2a:99:d6:1a:23:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:16:D5:04:EE:DA:75:08:DA:18:62:49:2F:63:02:15:7D:BC:AF:C1
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS211557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e7:15:3a:2e:e1:5c:0d:77:09:1e:5b:6e:92:8e:f2:b1:cf:
c1:bb:81:73:bd:c1:d6:83:cc:23:5e:f5:9d:a2:df:c2:db:54:
3e:02:d7:86:3d:89:f3:7f:c7:f4:56:28:fa:25:7c:7c:8a:4c:
86:7f:a3:8b:30:d7:9a:6a:83:f6:9e:00:92:65:83:bc:06:da:
db:67:20:f5:06:10:30:8e:8b:95:bc:5e:38:7f:3d:c4:f9:f2:
78:c6:34:e5:4c:26:d3:0c:56:e2:5a:81:12:68:f8:b4:4d:25:
61:aa:80:bf:bb:09:11:44:ef:10:f2:49:5b:6f:53:ba:7b:09:
d6:52:db:5b:77:f7:e7:f0:6c:cf:c7:a0:e7:b3:f9:36:ee:67:
7e:8b:16:f6:06:1e:8f:6e:61:4f:20:c7:0b:88:4b:60:a9:f9:
a5:5a:03:c2:82:c7:82:92:a7:67:75:26:94:2a:d5:0c:01:fc:
a7:0a:68:bd:39:d0:11:28:94:52:d6:5d:ee:0f:67:6c:ba:4f:
01:e3:aa:dc:c8:78:74:47:01:e6:44:f8:e4:e3:a2:21:8d:fc:
e0:c3:44:9e:86:0c:62:8c:f2:60:ca:0e:c1:22:19:12:2f:de:
49:bb:05:38:c7:4b:96:72:cd:9a:46:97:37:32:e5:ce:f5:28:
36:6b:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:17:00 2025 by rpki-client