Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213615.roa
File: AS213615.roa (raw, json)
Hash identifier: Qq4jmJRW1DyyB7CSqVxpeLR66VIQ3GfcJsqm0phlS1o=
Subject key identifier: 38:47:EB:08:FD:A9:D4:FD:9A:F0:05:AA:60:AD:AD:AB:44:1A:A2:37
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2485C80BB08D43809FBDF387DEBA9D705EAA1C9F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213615.roa
Signing time: Mon 13 Jan 2025 11:02:22 +0000
ROA not before: Mon 13 Jan 2025 10:57:22 +0000
ROA not after: Mon 12 Jan 2026 11:02:22 +0000
asID: 213615
IP address blocks: 91.124.1.0/24 maxlen: 24
92.113.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:85:c8:0b:b0:8d:43:80:9f:bd:f3:87:de:ba:9d:70:5e:aa:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 13 10:57:22 2025 GMT
Not After : Jan 12 11:02:22 2026 GMT
Subject: CN=3847EB08FDA9D4FD9AF005AA60ADADAB441AA237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:43:82:58:08:31:cc:16:b3:8d:68:46:7c:
ae:f3:f8:83:b3:38:69:87:31:16:df:4d:59:d5:00:
ea:d3:07:13:58:e1:f0:ef:26:a4:a9:65:12:7b:9b:
41:4a:9e:f3:4b:8e:99:a2:dc:a8:7c:da:09:f8:d9:
01:a3:8c:92:e8:23:be:21:50:a5:f3:11:3b:75:4e:
4f:50:2a:71:52:bf:ab:fd:38:2b:e5:56:1d:fd:93:
82:06:27:a3:59:e6:78:63:73:4d:2c:01:f1:4c:c1:
3c:7f:5e:6c:c0:64:c8:db:a6:40:8b:97:40:82:26:
74:5b:0f:03:ac:84:e7:ae:bd:8f:61:d5:27:c6:d5:
c7:3d:b5:05:43:78:59:17:37:34:e6:7d:a9:44:7e:
7b:a8:e5:59:57:e6:a2:3f:13:5c:cd:ce:7f:5e:c4:
70:f3:b8:4b:80:bb:20:b8:fa:c9:a4:7d:f9:2f:10:
0b:eb:1e:21:13:c1:b2:88:ab:5d:ba:de:61:c6:41:
12:70:d4:68:6d:9e:35:87:19:4a:e8:1f:d6:fe:e6:
1c:50:d2:d4:e5:bd:7e:c2:0c:8d:1c:cc:6e:cc:13:
cb:59:be:c2:7a:84:89:94:30:76:36:99:de:9c:89:
73:47:1d:b8:d1:78:00:fd:91:dc:92:14:c2:3b:f0:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:EB:08:FD:A9:D4:FD:9A:F0:05:AA:60:AD:AD:AB:44:1A:A2:37
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213615.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.1.0/24
92.113.0.0/24
Signature Algorithm: sha256WithRSAEncryption
92:07:60:1b:df:de:af:0f:ce:70:c8:92:c0:c2:32:e6:af:6e:
13:3c:16:80:94:25:c9:5a:05:89:da:58:35:e5:8c:07:bb:e5:
b9:3f:86:df:4b:6b:6f:c8:b8:95:09:90:6d:41:71:06:ee:dc:
e7:3b:48:b8:3f:f5:e1:c0:8d:c5:3e:db:b8:d4:ee:7d:86:39:
11:4c:fa:98:64:a8:b8:71:80:9a:c1:69:e7:0c:65:6a:99:fe:
4c:47:29:58:a5:bd:a2:ed:0d:f4:4e:21:10:8f:62:cb:95:99:
13:b9:0a:36:bb:f7:06:df:77:0b:7d:0f:53:6a:10:32:69:38:
e2:bf:52:79:e0:b4:13:ac:5e:a4:64:b6:2e:1f:72:ce:56:2a:
06:c4:4e:9d:68:dc:5b:c0:1b:fc:e4:06:1c:4f:f6:63:51:3a:
bf:14:a1:9c:3f:b3:fd:9d:09:06:82:86:86:e1:d7:78:5d:35:
93:48:41:30:b5:ae:5b:53:2e:38:43:23:0e:1b:d0:30:78:d5:
2b:65:62:9e:75:20:ba:e9:3d:dc:2c:60:15:98:65:b6:58:58:
ff:5b:a9:cf:6c:dc:3c:dc:bc:8b:43:82:ca:f9:e6:fd:b1:b2:
0b:6d:35:86:e6:f5:ce:3d:50:34:5c:85:49:10:1d:34:33:49:
3c:a7:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:01:07 2025 by rpki-client