Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
File: AS212336.roa (raw, json)
Hash identifier: sz2EiLrW146Neo1ZJ1UMu7KGuMOU+a5Pz8+xnAIQpGs=
Subject key identifier: E9:0A:8F:50:3D:D2:3D:17:85:B0:7B:88:7B:07:AB:08:46:82:45:71
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 53D156310CB170A457B92464F119D767BABBB9C1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
Signing time: Wed 23 Jul 2025 03:10:23 +0000
ROA not before: Wed 23 Jul 2025 03:05:23 +0000
ROA not after: Wed 22 Jul 2026 03:10:23 +0000
asID: 212336
IP address blocks: 141.11.138.0/24 maxlen: 24
141.11.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 00:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d1:56:31:0c:b1:70:a4:57:b9:24:64:f1:19:d7:67:ba:bb:b9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 23 03:05:23 2025 GMT
Not After : Jul 22 03:10:23 2026 GMT
Subject: CN=E90A8F503DD23D1785B07B887B07AB0846824571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:53:b8:86:f8:ed:64:71:1f:13:fe:5c:61:
63:e6:32:9c:39:26:6d:9d:2d:ff:2d:fa:05:24:54:
98:a5:88:34:c8:9e:9a:22:0e:96:98:16:06:d6:05:
99:bf:e4:8c:b0:3a:79:2c:1b:55:b8:53:6d:d3:c8:
1e:6d:ee:49:a7:40:ca:ec:68:e0:58:27:25:58:bc:
79:17:4e:f7:43:6a:89:72:62:85:1e:59:97:ec:8e:
bf:5c:8c:e7:bb:85:02:2b:03:95:7a:0c:87:ed:6a:
b0:fa:75:80:20:9d:1c:00:4a:1b:41:23:5f:29:84:
9d:08:d1:eb:68:07:59:59:88:a4:a6:cc:31:68:d9:
f3:62:4d:19:26:5f:ac:f8:4f:bf:22:de:44:f2:d9:
fe:3a:b0:24:bf:36:62:73:b4:c4:d3:20:ae:b9:aa:
17:45:01:99:7e:7d:ef:e4:3a:bc:70:de:62:3a:dc:
9d:83:63:cc:cc:c6:9a:ee:e3:a7:17:45:91:f8:5f:
72:c5:2b:ff:76:e9:38:1a:78:0e:bd:dc:b5:90:d9:
27:73:69:09:1c:b6:52:d1:b8:22:2a:16:a5:40:8d:
f1:32:2a:e0:6d:cb:84:e0:cb:55:b5:ea:14:60:12:
38:b4:5f:fd:22:09:ec:5c:20:27:77:8c:40:02:4e:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:8F:50:3D:D2:3D:17:85:B0:7B:88:7B:07:AB:08:46:82:45:71
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.138.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:d0:95:29:92:91:f2:6a:64:8a:cb:d8:3d:45:03:8c:1f:22:
d1:cf:de:2a:52:b4:e2:7f:2f:a6:d3:4b:09:7d:99:b2:6e:0f:
6b:b5:c4:96:4a:3b:1f:9b:7d:db:87:7c:ba:2f:3d:90:73:7c:
8d:c7:07:ba:b1:e6:07:a6:43:9d:7f:52:98:48:67:9a:bf:8c:
d1:30:ff:b3:79:48:28:58:e7:65:e0:b6:d5:06:36:8e:7d:46:
ba:62:68:54:8b:ab:23:f3:e1:b6:dd:b8:ff:94:4b:45:ec:e9:
f8:7a:c4:e6:ff:07:f1:2e:4a:20:5d:ff:84:d7:3a:46:59:7c:
c7:86:fc:eb:23:ad:f1:7a:83:a7:8f:0d:00:8d:52:c4:5b:74:
65:97:3d:0e:ee:1f:11:9b:8f:af:e7:25:09:20:3e:f7:8f:95:
66:a9:dc:a4:ad:de:34:12:51:3e:14:2d:a1:e3:c6:d8:51:6c:
f2:b6:54:5d:a6:81:50:54:3b:9b:e3:9b:ca:97:cd:47:3b:6e:
9e:8e:db:e2:3e:8b:5c:2c:dd:70:9d:fc:88:af:6f:9a:e0:02:
6d:0c:e2:32:2a:2d:b9:6c:ea:e3:40:dc:6b:59:9b:55:44:53:
aa:5c:e6:bc:50:4b:79:1e:ab:3e:3c:18:46:d0:54:a8:64:d8:
4e:b5:47:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUU9FWMQyxcKRXuSRk8RnXZ7q7ucEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA3MjMwMzA1MjNaFw0yNjA3MjIwMzEwMjNaMDMxMTAvBgNV
BAMTKEU5MEE4RjUwM0REMjNEMTc4NUIwN0I4ODdCMDdBQjA4NDY4MjQ1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvVO4hvjtZHEfE/5cYWPmMpw5
Jm2dLf8t+gUkVJiliDTInpoiDpaYFgbWBZm/5IywOnksG1W4U23TyB5t7kmnQMrs
aOBYJyVYvHkXTvdDaolyYoUeWZfsjr9cjOe7hQIrA5V6DIftarD6dYAgnRwAShtB
I18phJ0I0etoB1lZiKSmzDFo2fNiTRkmX6z4T78i3kTy2f46sCS/NmJztMTTIK65
qhdFAZl+fe/kOrxw3mI63J2DY8zMxpru46cXRZH4X3LFK/926TgaeA693LWQ2Sdz
aQkctlLRuCIqFqVAjfEyKuBty4Tgy1W16hRgEji0X/0iCexcICd3jEACTj41AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU6QqPUD3SPReFsHuIewerCEaCRXEwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEyMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQuK
MA0GCSqGSIb3DQEBCwUAA4IBAQCd0JUpkpHyamSKy9g9RQOMHyLRz94qUrTify+m
00sJfZmybg9rtcSWSjsfm33bh3y6Lz2Qc3yNxwe6seYHpkOdf1KYSGeav4zRMP+z
eUgoWOdl4LbVBjaOfUa6YmhUi6sj8+G23bj/lEtF7On4esTm/wfxLkogXf+E1zpG
WXzHhvzrI63xeoOnjw0AjVLEW3Rllz0O7h8Rm4+v5yUJID73j5Vmqdykrd40ElE+
FC2h48bYUWzytlRdpoFQVDub45vKl81HO26ejtviPotcLN1wnfyIr2+a4AJtDOIy
Ki25bOrjQNxrWZtVRFOqXOa8UEt5Hqs+PBhG0FSoZNhOtUfd
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:26 2025 by rpki-client