Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa
File: AS212219.roa (raw, json)
Hash identifier: 5vzo1gZbz84ko624HDE62+0m8qn84zP6YCzfLjCRS9w=
Subject key identifier: E0:C7:44:A4:8C:58:46:57:8D:63:A1:23:E4:85:4D:EF:54:D6:01:3D
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 443AF4C4AF70EA5EBA7B59048DE6B2FFE6E336CA
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa
Signing time: Wed 15 Jan 2025 17:10:39 +0000
ROA not before: Wed 15 Jan 2025 17:05:39 +0000
ROA not after: Wed 14 Jan 2026 17:10:39 +0000
asID: 212219
IP address blocks: 5.133.102.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
176.96.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3a:f4:c4:af:70:ea:5e:ba:7b:59:04:8d:e6:b2:ff:e6:e3:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 17:05:39 2025 GMT
Not After : Jan 14 17:10:39 2026 GMT
Subject: CN=E0C744A48C5846578D63A123E4854DEF54D6013D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:6c:19:2f:c7:53:0f:68:f9:33:1a:bf:42:
21:76:77:68:69:43:57:f3:d2:f8:b8:fa:fc:cb:fb:
3c:0c:78:46:71:f1:9c:a9:00:6e:04:37:4a:5e:1f:
fe:a2:3c:56:2b:1b:29:92:44:d6:f5:7c:3e:03:ba:
18:ec:6a:d6:15:88:ca:dd:8f:2e:fb:43:d2:d6:68:
43:1d:7f:2e:c9:e2:18:bd:f4:c4:f8:c7:26:a1:21:
64:d0:0c:df:aa:55:5a:76:f9:ab:8c:f7:81:c2:36:
3e:9a:24:2b:ad:ee:86:a3:d1:ef:e6:e6:cb:ba:62:
96:d7:79:f8:5b:e9:ff:32:29:95:1d:91:3b:00:9b:
e8:4d:f7:fa:d3:dd:65:a2:e7:26:66:c1:cd:ee:c3:
6a:38:b4:be:cb:2f:8b:cd:46:a1:24:66:aa:60:9a:
b9:ee:eb:71:e0:f7:00:dd:25:e5:6b:cd:aa:6a:92:
41:a0:29:9d:ed:d5:b2:12:11:d1:15:50:e4:cc:ef:
1a:10:c9:5f:c2:ec:b3:5c:43:6f:ad:62:ba:bd:8e:
7a:28:81:14:a1:93:d9:2c:f7:33:09:e5:6e:e5:5d:
0d:01:12:b2:cc:58:50:2b:0a:eb:e9:a3:ca:f6:0a:
4a:38:d2:56:b3:89:ca:73:aa:0b:48:89:36:55:f2:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:44:A4:8C:58:46:57:8D:63:A1:23:E4:85:4D:EF:54:D6:01:3D
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.102.0/24
176.96.129.0/24
176.96.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2a:30:23:06:47:d3:91:ce:d1:e5:bb:17:47:29:93:cc:97:
8b:30:9b:fb:ba:93:34:a5:ba:5d:b6:dd:fe:b3:30:89:59:84:
fa:bd:49:d2:59:2c:c8:65:0b:b6:70:ac:a4:fe:ca:44:3b:af:
44:cd:4f:9f:9d:64:0f:5f:f4:dd:88:59:c0:0a:ed:f5:93:2e:
e7:2a:a3:37:70:05:f3:8d:33:91:0a:b5:90:65:f6:a7:66:5e:
23:d4:86:bc:38:df:92:00:6d:ff:be:05:d5:50:b7:a6:d1:93:
bc:9f:e4:d3:48:bf:09:88:0c:5b:30:11:66:f8:34:05:58:10:
a2:66:5a:3f:3b:24:8d:7b:cb:c3:15:6e:67:24:7e:56:17:b4:
9e:94:84:20:63:23:30:70:fe:22:e1:56:72:cc:db:e7:2d:21:
5a:6a:b7:50:a9:ec:f4:dc:d9:9c:6d:24:6b:13:29:5a:a8:7c:
e4:a4:a2:42:a2:00:c9:d3:cb:35:35:88:e4:23:24:3c:b0:4a:
a1:14:73:17:3d:cd:2e:72:71:38:73:f3:0e:d7:32:a7:b5:2b:
29:27:86:23:9d:cc:4e:50:d4:5c:26:4c:d6:0e:b3:cb:f0:c7:
53:17:2d:62:ec:96:ba:1b:27:5f:dd:90:5b:cf:66:c8:e2:f7:
a8:c0:60:ef
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIURDr0xK9w6l66e1kEjeay/+bjNsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAxMTUxNzA1MzlaFw0yNjAxMTQxNzEwMzlaMDMxMTAvBgNV
BAMTKEUwQzc0NEE0OEM1ODQ2NTc4RDYzQTEyM0U0ODU0REVGNTRENjAxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynGwZL8dTD2j5Mxq/QiF2d2hp
Q1fz0vi4+vzL+zwMeEZx8ZypAG4EN0peH/6iPFYrGymSRNb1fD4DuhjsatYViMrd
jy77Q9LWaEMdfy7J4hi99MT4xyahIWTQDN+qVVp2+auM94HCNj6aJCut7oaj0e/m
5su6YpbXefhb6f8yKZUdkTsAm+hN9/rT3WWi5yZmwc3uw2o4tL7LL4vNRqEkZqpg
mrnu63Hg9wDdJeVrzapqkkGgKZ3t1bISEdEVUOTM7xoQyV/C7LNcQ2+tYrq9jnoo
gRShk9ks9zMJ5W7lXQ0BErLMWFArCuvpo8r2Cko40lazicpzqgtIiTZV8oFvAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU4MdEpIxYRleNY6Ej5IVN71TWAT0wHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEyMjE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABYVm
AwQAsGCBAwQAsGCDMA0GCSqGSIb3DQEBCwUAA4IBAQBKKjAjBkfTkc7R5bsXRymT
zJeLMJv7upM0pbpdtt3+szCJWYT6vUnSWSzIZQu2cKyk/spEO69EzU+fnWQPX/Td
iFnACu31ky7nKqM3cAXzjTORCrWQZfanZl4j1Ia8ON+SAG3/vgXVULem0ZO8n+TT
SL8JiAxbMBFm+DQFWBCiZlo/OySNe8vDFW5nJH5WF7SelIQgYyMwcP4i4VZyzNvn
LSFaardQqez03NmcbSRrEylaqHzkpKJCogDJ08s1NYjkIyQ8sEqhFHMXPc0ucnE4
c/MO1zKntSspJ4YjncxOUNRcJkzWDrPL8MdTFy1i7Ja6Gydf3ZBbz2bI4veowGDv
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:39 2025 by rpki-client