Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212598.roa
File: AS212598.roa (raw, json)
Hash identifier: gqorn+aQ+LUMfsUETo+LsObIl6Brfys7mZUD9AzeVbk=
Subject key identifier: CB:2F:44:8E:0F:0A:26:6A:05:1D:41:F5:87:BA:39:79:B6:AD:10:05
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 42E68829BB8A1B40CF9AFE5C90C6C56AC1F0EA08
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212598.roa
Signing time: Wed 15 Jan 2025 16:37:49 +0000
ROA not before: Wed 15 Jan 2025 16:32:49 +0000
ROA not after: Wed 14 Jan 2026 16:37:49 +0000
asID: 212598
IP address blocks: 193.17.6.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e6:88:29:bb:8a:1b:40:cf:9a:fe:5c:90:c6:c5:6a:c1:f0:ea:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 16:32:49 2025 GMT
Not After : Jan 14 16:37:49 2026 GMT
Subject: CN=CB2F448E0F0A266A051D41F587BA3979B6AD1005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:a9:66:32:bc:62:ed:83:50:1d:ec:91:9d:
20:d0:40:9f:dc:2d:ec:8c:cb:a4:af:8f:72:dd:c3:
af:06:92:3e:06:9c:65:e4:98:1b:98:a8:fb:68:c6:
d5:ff:c8:fd:18:dd:7b:85:4d:7a:1b:e9:36:c0:da:
f5:e1:8b:35:d4:48:07:a8:f0:0e:ab:5f:e3:45:98:
eb:0d:1f:8c:ee:f9:ea:55:2c:4f:27:36:c6:27:95:
d7:e1:b7:ed:63:13:63:cf:28:57:e6:75:c4:a5:51:
c2:cc:3f:b2:05:a8:55:b3:20:01:3e:ed:37:b9:22:
f0:a2:77:67:18:16:f5:e0:48:4e:23:2a:ee:23:f3:
54:6a:bd:02:d6:39:86:5d:08:b4:7f:83:c1:05:06:
55:b0:d6:a1:34:2c:4d:98:b8:85:2f:70:ce:3a:f7:
33:19:9a:54:bc:1d:d2:47:0a:5f:b3:50:0d:b5:10:
66:1d:63:b3:0e:a0:14:ae:10:e2:da:7b:ae:73:c7:
65:ec:a4:92:be:ca:37:d1:b1:b8:4d:d8:3e:86:d3:
84:31:12:49:b1:c1:1e:15:5b:82:30:20:cd:fe:34:
5b:5d:6d:71:2e:da:8b:44:8f:33:a4:a4:8c:ad:87:
ed:16:3b:96:87:e9:bf:68:31:31:5b:0f:62:a0:a3:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2F:44:8E:0F:0A:26:6A:05:1D:41:F5:87:BA:39:79:B6:AD:10:05
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.6.0/24
193.111.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3e:07:0a:d8:3a:c8:5e:4b:66:51:9f:55:31:93:5e:36:56:
40:3e:8f:a8:8a:cc:c7:9d:8b:2b:19:54:6f:f6:97:15:b5:75:
93:f6:cc:b8:9e:79:c4:57:7d:0d:63:63:fe:b9:a6:81:cf:aa:
92:b6:cd:68:3a:60:62:dc:6d:f4:ef:4c:71:09:ab:61:38:71:
76:dd:10:b3:0e:3c:c1:1a:dd:c4:aa:b7:f7:08:31:a6:c2:68:
6f:3b:74:13:0e:14:a5:55:9d:4f:e1:8e:45:10:58:21:eb:27:
2b:9c:fc:55:f4:23:e0:6f:2c:61:0f:da:f5:de:52:a5:73:95:
cf:84:52:3e:f6:ce:32:b7:86:d2:dc:33:32:b6:24:1d:d8:6b:
a6:c5:b2:1e:ee:67:21:5b:27:93:72:f7:2d:c8:47:3b:88:0f:
95:fd:84:63:0a:b5:35:46:0f:66:82:2a:36:89:fd:03:21:3f:
e5:6d:da:c4:57:77:3a:7b:37:8f:a6:3d:01:17:d6:1c:e2:e7:
62:68:b3:95:64:12:d0:4b:f3:cc:d7:c5:c2:48:ea:70:8c:8e:
dd:f3:8d:66:d7:5f:14:a0:e2:0a:3f:ee:17:e6:e5:6c:77:ac:
93:8f:7f:c4:a3:14:6e:d2:2a:9b:56:85:ac:3c:c1:08:53:85:
bb:91:d2:bf
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUQuaIKbuKG0DPmv5ckMbFasHw6ggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAxMTUxNjMyNDlaFw0yNjAxMTQxNjM3NDlaMDMxMTAvBgNV
BAMTKENCMkY0NDhFMEYwQTI2NkEwNTFENDFGNTg3QkEzOTc5QjZBRDEwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVF6lmMrxi7YNQHeyRnSDQQJ/c
LeyMy6Svj3Ldw68Gkj4GnGXkmBuYqPtoxtX/yP0Y3XuFTXob6TbA2vXhizXUSAeo
8A6rX+NFmOsNH4zu+epVLE8nNsYnldfht+1jE2PPKFfmdcSlUcLMP7IFqFWzIAE+
7Te5IvCid2cYFvXgSE4jKu4j81RqvQLWOYZdCLR/g8EFBlWw1qE0LE2YuIUvcM46
9zMZmlS8HdJHCl+zUA21EGYdY7MOoBSuEOLae65zx2XspJK+yjfRsbhN2D6G04Qx
EkmxwR4VW4IwIM3+NFtdbXEu2otEjzOkpIyth+0WO5aH6b9oMTFbD2Kgo+J7AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUyy9Ejg8KJmoFHUH1h7o5ebatEAUwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEyNTk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwREG
AwQAwW9OMA0GCSqGSIb3DQEBCwUAA4IBAQAfPgcK2DrIXktmUZ9VMZNeNlZAPo+o
iszHnYsrGVRv9pcVtXWT9sy4nnnEV30NY2P+uaaBz6qSts1oOmBi3G3070xxCath
OHF23RCzDjzBGt3Eqrf3CDGmwmhvO3QTDhSlVZ1P4Y5FEFgh6ycrnPxV9CPgbyxh
D9r13lKlc5XPhFI+9s4yt4bS3DMytiQd2GumxbIe7mchWyeTcvctyEc7iA+V/YRj
CrU1Rg9mgio2if0DIT/lbdrEV3c6ezePpj0BF9Yc4udiaLOVZBLQS/PM18XCSOpw
jI7d841m118UoOIKP+4X5uVsd6yTj3/EoxRu0iqbVoWsPMEIU4W7kdK/
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:50:37 2025 by rpki-client