Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212335.roa
File: AS212335.roa (raw, json)
Hash identifier: rSWYxcn8e6ODdM0Sk5aN7GRLq+xtNojoOuw/7VZW0po=
Subject key identifier: B8:AD:31:90:75:63:8C:12:21:D0:CC:67:60:D9:8E:F1:6B:E1:42:9E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 251EB7859B925B46DC4306BD09BCC4C8C7E774A1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212335.roa
Signing time: Thu 29 May 2025 11:06:18 +0000
ROA not before: Thu 29 May 2025 11:01:18 +0000
ROA not after: Thu 28 May 2026 11:06:18 +0000
asID: 212335
IP address blocks: 91.124.65.0/24 maxlen: 24
91.124.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1e:b7:85:9b:92:5b:46:dc:43:06:bd:09:bc:c4:c8:c7:e7:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 29 11:01:18 2025 GMT
Not After : May 28 11:06:18 2026 GMT
Subject: CN=B8AD319075638C1221D0CC6760D98EF16BE1429E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:3d:52:58:87:d9:8d:9d:13:5f:c1:db:ca:
70:72:76:eb:3c:d9:d1:b4:54:50:9f:22:8d:eb:b4:
da:e2:42:fd:93:e4:16:f0:d8:55:0d:24:08:cb:16:
05:5b:28:f7:87:94:45:b6:92:3a:11:7c:06:aa:a6:
c4:18:27:b8:f9:65:3d:b4:70:5a:f8:ef:a0:58:4f:
af:52:4e:fa:16:fa:2e:b3:f3:24:ba:5d:02:96:84:
fe:aa:91:70:6f:ee:c5:0c:ce:70:a1:33:58:70:9d:
bc:76:3c:ee:cc:38:72:fd:d8:0b:7d:ff:05:71:38:
fd:37:48:6f:b6:f5:9a:4f:be:44:cf:53:9f:77:9b:
b1:4c:3f:7f:d3:de:70:35:71:3b:c2:23:b7:a3:22:
12:62:d0:42:f2:bc:54:ba:5c:d2:30:59:48:1d:61:
1f:58:d8:51:85:83:81:27:f5:ba:7b:b5:d1:3e:6b:
0f:ae:3b:0d:69:c5:e9:72:23:e8:43:61:01:3b:52:
8f:f4:6d:32:68:fa:96:aa:bc:fc:6b:d6:26:b7:f7:
a8:76:c4:c7:ce:94:68:43:e4:6d:9d:4e:67:05:1d:
5b:54:b7:1b:f1:35:0d:b7:48:00:18:e5:05:4a:cc:
a3:99:1a:a8:98:46:42:c0:f7:30:27:9e:dc:e3:06:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:31:90:75:63:8C:12:21:D0:CC:67:60:D9:8E:F1:6B:E1:42:9E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.65.0/24
91.124.169.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3f:d3:7e:b5:9d:a2:4c:41:a0:4f:4b:36:90:7e:22:3a:bf:
19:81:34:79:96:58:3e:60:9c:35:3d:b6:aa:83:41:a7:c9:e1:
10:ff:06:63:7e:79:93:16:95:e9:f9:2e:49:cc:9e:43:c2:7b:
8f:97:25:ae:6c:34:e6:65:c2:59:55:75:aa:43:b7:4d:a4:dd:
81:60:e6:e9:0f:3e:f0:d0:7d:a2:cd:43:6f:63:27:31:9e:1d:
88:de:00:52:c5:7f:6d:3a:bc:36:c4:9f:24:2b:f7:56:e5:9c:
60:bf:b2:80:ea:f4:4e:ac:e7:b6:9f:45:5a:1f:64:48:d6:d1:
b7:71:46:2c:c6:91:c4:3f:d6:79:1a:b0:1a:88:98:13:1e:f9:
86:7f:43:54:49:dd:a8:c4:ac:b6:37:0f:43:01:fa:34:37:13:
8a:37:26:72:e9:b8:a0:a7:43:3d:0f:3f:22:77:f3:bd:24:28:
50:d8:52:5a:a3:20:0f:44:0c:02:ad:44:f3:27:fc:9b:ca:80:
41:ce:b9:75:56:5e:db:5e:26:63:38:ac:0e:88:fd:08:b9:e7:
76:65:e6:76:0b:27:6d:c6:4f:ae:df:c2:be:32:59:6c:79:d9:
9b:83:45:8c:05:64:ca:f4:4d:13:7c:ad:73:ed:fc:4b:72:41:
de:46:8f:b3
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUJR63hZuSW0bcQwa9CbzEyMfndKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA1MjkxMTAxMThaFw0yNjA1MjgxMTA2MThaMDMxMTAvBgNV
BAMTKEI4QUQzMTkwNzU2MzhDMTIyMUQwQ0M2NzYwRDk4RUYxNkJFMTQyOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqEz1SWIfZjZ0TX8HbynBydus8
2dG0VFCfIo3rtNriQv2T5Bbw2FUNJAjLFgVbKPeHlEW2kjoRfAaqpsQYJ7j5ZT20
cFr476BYT69STvoW+i6z8yS6XQKWhP6qkXBv7sUMznChM1hwnbx2PO7MOHL92At9
/wVxOP03SG+29ZpPvkTPU593m7FMP3/T3nA1cTvCI7ejIhJi0ELyvFS6XNIwWUgd
YR9Y2FGFg4En9bp7tdE+aw+uOw1pxelyI+hDYQE7Uo/0bTJo+paqvPxr1ia396h2
xMfOlGhD5G2dTmcFHVtUtxvxNQ23SAAY5QVKzKOZGqiYRkLA9zAnntzjBgWJAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUuK0xkHVjjBIh0MxnYNmO8WvhQp4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW3xB
AwQAW3ypMA0GCSqGSIb3DQEBCwUAA4IBAQBFP9N+tZ2iTEGgT0s2kH4iOr8ZgTR5
llg+YJw1Pbaqg0GnyeEQ/wZjfnmTFpXp+S5JzJ5DwnuPlyWubDTmZcJZVXWqQ7dN
pN2BYObpDz7w0H2izUNvYycxnh2I3gBSxX9tOrw2xJ8kK/dW5Zxgv7KA6vROrOe2
n0VaH2RI1tG3cUYsxpHEP9Z5GrAaiJgTHvmGf0NUSd2oxKy2Nw9DAfo0NxOKNyZy
6bigp0M9Dz8id/O9JChQ2FJaoyAPRAwCrUTzJ/ybyoBBzrl1Vl7bXiZjOKwOiP0I
ued2ZeZ2Cydtxk+u38K+Mllsedmbg0WMBWTK9E0TfK1z7fxLckHeRo+z
-----END CERTIFICATE-----
Generated at Wed Jun 4 10:14:27 2025 by rpki-client