Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215645.roa
File: AS215645.roa (raw, json)
Hash identifier: UBLNE8vPFJ4RJ8CwzT37PS6O2qc5ZKDXh9nZDQtS0Ag=
Subject key identifier: 46:30:A0:42:92:3C:BC:6A:5E:91:A9:AE:3D:A4:38:D0:9E:2C:CF:B5
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 39003884D6D8876F25256F3F491ED9D0F9B27164
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215645.roa
Signing time: Wed 15 Jan 2025 17:15:21 +0000
ROA not before: Wed 15 Jan 2025 17:10:21 +0000
ROA not after: Wed 14 Jan 2026 17:15:21 +0000
asID: 215645
IP address blocks: 85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:00:38:84:d6:d8:87:6f:25:25:6f:3f:49:1e:d9:d0:f9:b2:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 17:10:21 2025 GMT
Not After : Jan 14 17:15:21 2026 GMT
Subject: CN=4630A042923CBC6A5E91A9AE3DA438D09E2CCFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:68:99:80:78:6c:5e:07:ae:0c:e9:38:ce:
71:97:cd:27:56:d0:cf:1d:c3:26:65:3b:9e:dc:41:
ba:b9:24:8f:52:08:69:e2:f0:28:d7:cc:aa:fe:8f:
99:e0:8d:60:f3:b4:5f:eb:b0:bf:bf:1d:b0:95:ab:
e2:33:53:48:82:15:af:0e:fa:df:a1:79:6c:4a:d6:
98:6b:73:0e:73:59:07:e0:2c:56:de:47:ae:6c:ef:
8a:72:54:bf:a6:99:ed:0f:80:3b:6e:b8:db:70:e1:
29:8c:1d:b2:22:fb:14:3f:cd:7c:f9:34:88:11:17:
38:60:8d:1f:a9:89:d5:80:de:51:13:87:f7:89:de:
89:60:e2:13:6a:4c:c8:cd:5f:90:30:51:f3:92:c9:
4a:d0:92:37:56:37:df:2c:19:ab:fd:16:fe:9b:aa:
e5:53:2c:93:11:31:c2:6b:42:01:b7:e2:df:26:a1:
2f:93:29:6a:4e:17:14:0c:fc:65:3a:45:eb:37:d6:
10:08:ff:25:0c:19:5a:eb:36:0e:a9:b9:65:f9:d1:
3e:13:85:be:55:6e:35:ad:64:88:61:15:f4:3d:b8:
e0:7e:50:ab:cc:27:d0:80:56:2e:2b:3f:12:ef:ba:
bb:98:01:09:6a:b1:3a:43:c4:29:f7:8f:2e:62:00:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:A0:42:92:3C:BC:6A:5E:91:A9:AE:3D:A4:38:D0:9E:2C:CF:B5
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.74.0/24
93.190.8.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ca:59:a5:02:90:10:61:e6:0e:cf:8d:c4:4b:ca:55:44:86:
a5:d2:77:bf:bf:44:68:ff:5e:8d:7a:2c:ee:41:e3:2b:33:0f:
a1:4c:ea:2d:da:a3:5b:56:02:6d:ed:1d:aa:45:61:c5:9c:fd:
92:bc:9c:cb:b3:d6:9d:d4:1e:26:ca:ca:53:91:f1:22:65:fb:
0e:61:a0:d3:2c:f7:bf:b8:17:45:05:f0:7c:21:aa:d2:e4:ba:
27:70:ce:f5:1e:a8:b6:c6:06:d1:c8:3f:77:49:4f:ee:3f:c7:
92:75:4b:ed:73:59:c9:a1:a2:24:79:1e:8b:25:a0:3f:11:0d:
86:86:b8:fc:6e:d7:97:99:5a:f6:55:b8:6b:da:27:f6:fe:c5:
01:09:27:a2:a3:e6:21:82:07:f0:5d:ce:07:f5:46:c6:bc:29:
80:9a:cd:9d:c2:ed:28:f8:bb:12:be:f6:e2:36:01:44:5a:5c:
f8:f4:db:67:d7:00:30:9b:7c:ef:09:75:d4:98:89:c1:de:3b:
da:8c:5e:07:72:2f:04:79:d1:2a:01:76:c8:af:1d:05:78:c9:
f0:39:50:ab:95:b4:98:16:4e:44:13:2f:c2:b5:bd:79:4c:05:
45:a0:7f:16:1d:20:75:2f:dd:57:13:5a:b2:5f:5a:b4:9b:f0:
96:40:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:55 2025 by rpki-client