Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa
File: AS212219.roa (raw, json)
Hash identifier: sx6DXJwFI8wywmbpDT/dcn1xzLkvYQzNVR8SyjqKzwQ=
Subject key identifier: B2:CD:0E:FF:6C:74:91:36:2A:6F:D2:49:48:50:99:E0:EE:57:31:96
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 2CD9C523149A02B4D3F2542B1910DCFC37A100D7
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa
Signing time: Thu 03 Apr 2025 09:07:35 +0000
ROA not before: Thu 03 Apr 2025 09:02:35 +0000
ROA not after: Thu 02 Apr 2026 09:07:35 +0000
asID: 212219
IP address blocks: 5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
92.249.61.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
176.96.131.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
217.18.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 01:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d9:c5:23:14:9a:02:b4:d3:f2:54:2b:19:10:dc:fc:37:a1:00:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 3 09:02:35 2025 GMT
Not After : Apr 2 09:07:35 2026 GMT
Subject: CN=B2CD0EFF6C7491362A6FD249485099E0EE573196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:d1:42:a1:c4:fe:80:f6:c8:75:83:29:36:
69:cd:6a:56:04:bb:41:a0:27:0a:ca:88:43:5b:e0:
ed:2b:f9:3c:c1:f4:89:af:91:c4:53:10:df:33:88:
b6:51:e5:f5:ae:da:8f:2e:cd:47:b4:3f:8c:03:c4:
30:4a:70:44:83:c4:05:32:f8:2f:30:81:bb:69:6e:
80:3b:af:c8:39:8e:50:84:e7:87:71:22:6c:a8:01:
32:a0:a7:70:9a:bb:48:35:5f:59:d5:55:aa:9a:37:
7c:6d:a1:ef:74:95:62:92:48:93:b2:38:1e:96:9e:
66:5b:fd:08:b3:dc:e3:81:cb:c7:00:8a:3b:ed:84:
dd:d2:66:97:27:7a:4f:73:a4:73:d2:15:ff:74:5d:
a0:62:e0:d6:d9:3b:09:3f:dd:93:f3:dd:17:b8:bf:
e4:d6:de:86:91:49:43:59:d4:7b:3d:6b:b6:c5:20:
71:1f:7e:c8:fa:14:ac:53:09:04:c3:62:07:2a:22:
f4:8c:f9:fe:65:cd:bb:88:5c:a7:f2:e7:bf:a3:c6:
29:4c:cf:26:fd:c3:28:2e:e4:fd:68:2c:ea:42:59:
b8:bb:6e:c9:17:71:59:5a:7d:e8:27:c7:5d:bf:33:
63:41:57:39:f9:db:cb:eb:7f:00:b2:1f:fb:c0:9a:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CD:0E:FF:6C:74:91:36:2A:6F:D2:49:48:50:99:E0:EE:57:31:96
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.102.0/23
92.249.61.0/24
176.96.129.0/24
176.96.131.0/24
193.111.77.0-193.111.78.255
217.18.210.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:86:95:76:36:22:9c:87:8a:0a:96:65:a5:36:be:ce:7c:fa:
ec:ed:82:87:86:00:c2:ed:e8:11:60:4e:4b:c0:f1:7d:f3:bf:
f2:d1:ea:c4:84:10:e0:69:0f:74:c6:fd:9d:89:6a:27:80:dd:
9a:c2:cc:99:7f:fd:e9:43:b0:86:e9:a4:5a:73:b2:71:a5:54:
08:d7:b2:9d:60:ad:99:a2:05:3e:18:9f:eb:e1:e7:66:ef:bf:
58:86:ac:e9:84:68:05:c6:04:17:d7:63:27:8c:ca:73:b1:73:
1b:98:0c:fc:d9:be:29:1b:41:ee:bb:fc:fa:4d:c8:62:25:ae:
fe:b0:d4:3d:e3:59:d4:6a:bf:36:7b:9b:4d:5e:2f:35:7c:f2:
b7:b6:23:be:49:7b:20:43:89:d1:0e:47:19:b2:9c:17:8e:23:
c7:a8:88:df:89:5f:37:5f:e1:7e:d3:fe:27:fe:c4:a5:80:88:
77:93:e3:66:e7:9e:67:75:f9:13:ad:b3:e4:88:12:b3:92:ff:
74:f0:6f:5d:28:dd:6e:22:e9:04:a7:80:fa:fd:e6:af:be:b4:
bc:89:d2:b1:eb:d2:b8:a2:88:24:e9:fa:d2:b1:3b:88:87:5d:
1b:c4:b1:71:2a:13:fa:33:a4:a3:3d:fa:ca:5d:36:e2:c4:d5:
34:80:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:36:23 2025 by rpki-client