Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
File: AS212027.roa (raw, json)
Hash identifier: OBaIIgn/kYGtB1xrCvCWVYDWS9B31pDzmyUHmefT9tY=
Subject key identifier: 6A:16:E1:73:A9:09:B4:E4:05:30:50:03:EA:78:B0:AF:65:4D:FC:22
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: D33503CBE68A99B6A431B0FE812C90CD38CDC9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
Signing time: Mon 24 Feb 2025 04:33:29 +0000
ROA not before: Mon 24 Feb 2025 04:28:29 +0000
ROA not after: Mon 23 Feb 2026 04:33:29 +0000
asID: 212027
IP address blocks: 95.135.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d3:35:03:cb:e6:8a:99:b6:a4:31:b0:fe:81:2c:90:cd:38:cd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 24 04:28:29 2025 GMT
Not After : Feb 23 04:33:29 2026 GMT
Subject: CN=6A16E173A909B4E405305003EA78B0AF654DFC22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:99:02:75:71:1a:17:9a:86:11:05:55:6d:
66:a8:ee:82:86:da:99:f7:ea:7b:c5:25:7a:95:1d:
aa:d1:e0:d6:9d:83:19:8f:ee:9d:ab:cb:0e:f0:55:
08:e1:c6:ad:0f:a2:8b:d8:df:19:1e:f5:32:07:98:
c8:d3:dd:1b:0e:9c:80:67:11:34:85:f4:f1:8d:6a:
28:97:e8:92:44:3c:ba:49:6c:94:c5:90:0f:e7:91:
77:b1:76:70:c6:60:4e:1c:a3:0f:e5:57:e3:41:ba:
f4:ad:5b:40:70:6f:f1:af:85:27:bd:1e:10:83:c8:
74:41:5d:1c:c5:de:a7:53:07:72:c3:10:5a:6f:db:
36:1d:24:8e:8e:2e:8f:bb:b7:41:a5:58:60:80:79:
48:10:af:e2:75:82:2a:ba:fb:03:4a:64:9b:2f:f5:
3f:d3:b1:67:45:ad:1e:42:0f:30:9d:f4:13:5e:e9:
ee:67:20:84:03:7c:d3:7d:d3:4c:ea:5e:10:e2:53:
9a:b0:0c:84:89:c4:d7:72:4f:cc:f0:e5:6f:66:51:
2a:9a:c1:86:06:42:43:f8:0f:b3:4e:26:01:74:64:
b6:0c:99:d0:30:d8:41:25:62:f8:d7:db:52:0e:ee:
10:cc:e9:12:7b:70:94:0e:10:1e:f2:31:88:94:84:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:E1:73:A9:09:B4:E4:05:30:50:03:EA:78:B0:AF:65:4D:FC:22
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.251.0/24
Signature Algorithm: sha256WithRSAEncryption
72:50:61:16:2c:94:ac:45:9b:00:0e:88:2a:cb:d6:73:af:80:
26:30:10:a9:9e:99:90:42:fd:b8:f6:9f:5a:0b:ba:bd:36:49:
2e:11:72:4a:c9:e2:fa:03:16:33:30:4c:fa:94:42:9f:c1:9f:
1f:c1:00:04:96:71:fa:21:07:da:23:91:f6:d0:2e:68:d4:12:
b1:c2:bd:89:f5:ce:88:e5:68:9f:d3:3f:e0:e9:b6:5f:57:b7:
d4:38:25:8c:f1:a8:4e:78:fe:5c:11:3b:91:1e:45:5c:5a:56:
50:10:49:b4:3a:8e:7e:69:97:85:37:b6:6c:53:74:f1:36:7e:
ad:15:45:c3:07:91:2c:96:0a:31:14:f4:e0:ef:1f:0f:69:2c:
9c:78:b9:d5:71:9d:9f:30:aa:51:32:73:f2:36:fc:e9:b7:5e:
7b:15:7e:df:9e:7e:eb:f4:11:e1:cd:35:e3:f5:82:9c:a3:a3:
4c:3e:b6:bb:63:15:7f:a9:75:c4:e8:6e:f0:38:b9:f8:a1:46:
e1:ee:7f:ad:3f:dd:3a:1e:a6:75:65:ce:41:bd:95:97:64:17:
07:67:fb:35:11:b1:b1:1b:66:5e:b2:31:2f:8a:27:d9:06:29:
81:0b:c5:20:c9:5e:09:fd:53:74:c7:93:d3:88:02:a2:6a:62:
ca:a3:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:13 2025 by rpki-client