Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213993.roa
File: AS213993.roa (raw, json)
Hash identifier: P5zdfGwlpewBocYmy9/gzb0QICUZlVMEhYRXPcCotDA=
Subject key identifier: AB:CE:C3:1F:99:C3:20:FF:8B:68:92:36:81:98:A0:04:71:74:E1:31
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 353DF5A0C8DB341771D6F0B502C00E489EC0DF86
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213993.roa
Signing time: Thu 03 Apr 2025 11:10:42 +0000
ROA not before: Thu 03 Apr 2025 11:05:42 +0000
ROA not after: Thu 02 Apr 2026 11:10:42 +0000
asID: 213993
IP address blocks: 91.124.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3d:f5:a0:c8:db:34:17:71:d6:f0:b5:02:c0:0e:48:9e:c0:df:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 3 11:05:42 2025 GMT
Not After : Apr 2 11:10:42 2026 GMT
Subject: CN=ABCEC31F99C320FF8B6892368198A0047174E131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:4e:ba:d5:c8:f1:89:d7:01:27:02:de:93:
4d:06:60:86:e7:6a:f5:90:86:a4:73:36:e1:88:94:
7e:d5:d9:ac:31:71:f8:d3:bc:95:fa:e5:52:6f:c2:
79:c1:07:7f:79:17:e0:7a:c8:f0:3b:58:2e:ef:df:
38:f5:bd:20:d3:94:7d:ee:ed:dc:07:d9:6d:1a:09:
fa:c8:2b:ac:e7:de:eb:12:a8:0a:33:d9:3f:c8:d8:
13:09:2b:d0:69:c2:27:7e:d7:6a:2a:d2:d3:57:39:
2f:2e:36:6f:e1:e2:e1:0b:e0:29:7e:ed:2e:4c:84:
e4:7e:96:d2:43:68:9a:bb:e1:92:b3:ea:e1:2d:74:
8b:b4:fc:54:a9:52:c4:23:8d:b7:19:00:a5:e8:5e:
4e:b6:65:da:ee:9e:68:7d:c1:9f:85:ba:31:b9:97:
76:38:b7:d3:0d:a7:5b:d0:73:c9:66:c0:6d:e4:a1:
cd:c9:ca:99:b2:da:fe:e4:da:8d:90:5c:0a:a5:40:
1c:19:21:b4:28:63:b9:b8:09:db:09:5b:e5:38:4d:
f6:ad:e5:69:56:fb:a1:1d:ac:7b:3c:97:65:7c:1b:
97:a1:e5:ff:cf:56:76:ad:25:23:54:d8:94:fc:49:
cc:5f:ae:7b:01:bb:8b:13:ea:e7:2e:02:c3:48:91:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:C3:1F:99:C3:20:FF:8B:68:92:36:81:98:A0:04:71:74:E1:31
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:19:c3:b5:d5:bf:d4:c9:bd:50:2d:32:76:de:5e:47:0f:7e:
24:43:8a:97:20:a7:93:2f:c7:33:13:3b:1d:03:d5:d7:3f:ec:
01:a4:b2:77:15:36:b6:2e:fe:bc:f1:e8:1d:83:f2:d4:61:bd:
0d:78:7d:64:3e:e6:58:bf:32:96:47:11:1a:fe:28:48:36:3d:
5a:a6:94:3b:2f:ad:a4:fb:33:d6:9e:d9:d1:f6:e0:81:1b:74:
fe:98:78:72:35:1b:bb:53:63:f2:a2:02:1f:28:a1:e9:0e:c0:
0f:c5:aa:00:7b:83:65:f3:b6:f8:5a:3c:33:81:f3:a4:7f:ab:
ff:a1:d4:26:b2:d5:d1:03:e7:c7:9b:fa:da:09:d6:af:41:d0:
4a:8a:cf:03:58:08:fc:e2:0c:48:3f:d0:ab:9a:eb:6c:b2:c5:
66:25:cc:8a:b9:fe:25:ad:29:98:bc:08:18:de:01:92:af:3e:
a8:7c:40:14:72:e0:3f:d2:90:e7:de:ad:af:1b:05:a7:6f:7c:
c2:02:30:72:7c:7f:f0:84:1f:3c:6a:b9:49:95:d0:ae:f8:ac:
fb:f0:8e:82:3b:94:d6:0e:88:53:bb:b4:57:3f:13:5b:9c:98:
61:a7:f2:70:90:40:39:42:78:43:87:0a:00:9c:27:3e:0f:c0:
89:9d:13:2e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNT31oMjbNBdx1vC1AsAOSJ7A34YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA0MDMxMTA1NDJaFw0yNjA0MDIxMTEwNDJaMDMxMTAvBgNV
BAMTKEFCQ0VDMzFGOTlDMzIwRkY4QjY4OTIzNjgxOThBMDA0NzE3NEUxMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iU661cjxidcBJwLek00GYIbn
avWQhqRzNuGIlH7V2awxcfjTvJX65VJvwnnBB395F+B6yPA7WC7v3zj1vSDTlH3u
7dwH2W0aCfrIK6zn3usSqAoz2T/I2BMJK9Bpwid+12oq0tNXOS8uNm/h4uEL4Cl+
7S5MhOR+ltJDaJq74ZKz6uEtdIu0/FSpUsQjjbcZAKXoXk62Zdrunmh9wZ+FujG5
l3Y4t9MNp1vQc8lmwG3koc3Jypmy2v7k2o2QXAqlQBwZIbQoY7m4CdsJW+U4Tfat
5WlW+6EdrHs8l2V8G5eh5f/PVnatJSNU2JT8ScxfrnsBu4sT6ucuAsNIkX23AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUq87DH5nDIP+LaJI2gZigBHF04TEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEzOTkzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3wO
MA0GCSqGSIb3DQEBCwUAA4IBAQCfGcO11b/Uyb1QLTJ23l5HD34kQ4qXIKeTL8cz
EzsdA9XXP+wBpLJ3FTa2Lv688egdg/LUYb0NeH1kPuZYvzKWRxEa/ihINj1appQ7
L62k+zPWntnR9uCBG3T+mHhyNRu7U2PyogIfKKHpDsAPxaoAe4Nl87b4WjwzgfOk
f6v/odQmstXRA+fHm/raCdavQdBKis8DWAj84gxIP9CrmutsssVmJcyKuf4lrSmY
vAgY3gGSrz6ofEAUcuA/0pDn3q2vGwWnb3zCAjByfH/whB88arlJldCu+Kz78I6C
O5TWDohTu7RXPxNbnJhhp/JwkEA5QnhDhwoAnCc+D8CJnRMu
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:27 2025 by rpki-client