Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: q7jPXa7LfN3VzRSLXamLfF9xReZKvJge5m0gwwMKsYs=
Subject key identifier: 3B:A3:DB:83:3A:15:BA:CE:5D:F0:B3:78:75:D9:2C:96:F8:76:62:E7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2E2DAB46F4C30A2436C3460FB25BF79E37153BE1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215287.roa
Signing time: Sat 08 Mar 2025 15:29:43 +0000
ROA not before: Sat 08 Mar 2025 15:24:43 +0000
ROA not after: Sat 07 Mar 2026 15:29:43 +0000
asID: 215287
IP address blocks: 92.112.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:2d:ab:46:f4:c3:0a:24:36:c3:46:0f:b2:5b:f7:9e:37:15:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 8 15:24:43 2025 GMT
Not After : Mar 7 15:29:43 2026 GMT
Subject: CN=3BA3DB833A15BACE5DF0B37875D92C96F87662E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:99:bc:42:a4:5b:a5:df:88:20:f6:73:f1:
b1:a4:e8:ce:c0:26:1a:bc:1f:6a:09:8c:f9:ee:c8:
4e:29:0e:c6:1b:9b:f5:6a:ef:9f:11:80:8b:2e:91:
6b:a7:37:fa:c1:ad:bc:70:6d:67:85:3e:f8:5d:3a:
8f:7f:02:ab:d1:a5:37:45:2c:0b:37:9b:54:3a:f6:
4d:86:9b:0e:be:47:71:0a:28:d3:a4:c1:64:1c:97:
7b:c2:88:76:79:2d:f0:58:b7:09:05:8b:a5:52:c7:
3a:3d:b8:68:61:0e:03:22:28:fd:ee:9f:69:fe:12:
f0:26:45:e0:16:1f:76:e6:0a:79:2f:7d:c1:df:bd:
bf:b4:cc:21:23:5e:56:fa:e1:7c:a5:e5:bd:4c:f9:
f2:56:58:11:4d:66:59:97:9c:e7:ac:21:64:3c:69:
f6:2b:3a:17:4a:ec:ae:42:0a:1c:37:39:bd:d4:3f:
d1:ed:8d:28:eb:42:eb:c1:04:f1:a4:c8:02:26:76:
d8:ee:23:cb:b8:cf:01:a9:3d:2b:0b:15:c8:50:7f:
e9:a6:5c:46:a6:e9:52:1b:40:3e:e4:23:9b:ac:cf:
06:f8:76:ed:ed:35:5f:1c:eb:84:70:c8:aa:b2:8b:
0b:a2:ec:63:54:48:4e:cc:98:26:58:f4:71:30:cc:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A3:DB:83:3A:15:BA:CE:5D:F0:B3:78:75:D9:2C:96:F8:76:62:E7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.8.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3a:6b:62:63:f9:06:aa:d8:fa:6d:2d:85:6c:55:a3:44:fa:
16:26:1b:d7:29:06:b3:83:ab:e9:7b:09:2e:95:f7:39:e0:03:
8d:89:cf:c1:37:3c:ba:4b:d6:8d:b4:41:fd:77:c9:7e:ec:e3:
9b:72:d9:50:8d:31:e8:9e:3f:5c:b4:a7:73:c1:3b:d8:29:5f:
f2:3b:71:30:98:e2:bf:ba:22:9f:d4:8a:2f:0b:cc:e2:7f:aa:
d1:31:b4:6c:b0:1a:f2:66:c8:f3:07:11:60:eb:bf:75:30:b7:
4f:e7:88:de:a1:7e:b4:15:c8:06:a8:63:9b:42:b7:5e:6a:a0:
c4:b0:df:14:57:56:84:0e:17:a1:e1:98:7b:4a:09:fa:54:f2:
af:25:44:33:1a:20:db:c3:e8:44:1e:51:44:28:25:cf:ec:f9:
8f:e1:62:68:91:1d:f2:a6:60:19:cc:12:e7:91:32:4e:c9:03:
71:65:98:47:f5:2f:24:2d:9f:76:01:e2:89:04:d0:61:04:fd:
bc:69:4f:7e:65:9b:00:5c:fc:c7:2e:18:ad:82:82:38:71:fa:
6a:03:14:b0:cb:8f:a9:56:9b:2f:cd:38:aa:12:f0:d8:ab:26:
74:c4:c5:a7:78:32:91:66:28:ba:15:07:ec:d1:1c:f7:9d:62:
71:63:d2:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULi2rRvTDCiQ2w0YPslv3njcVO+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAzMDgxNTI0NDNaFw0yNjAzMDcxNTI5NDNaMDMxMTAvBgNV
BAMTKDNCQTNEQjgzM0ExNUJBQ0U1REYwQjM3ODc1RDkyQzk2Rjg3NjYyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DJm8QqRbpd+IIPZz8bGk6M7A
Jhq8H2oJjPnuyE4pDsYbm/Vq758RgIsukWunN/rBrbxwbWeFPvhdOo9/AqvRpTdF
LAs3m1Q69k2Gmw6+R3EKKNOkwWQcl3vCiHZ5LfBYtwkFi6VSxzo9uGhhDgMiKP3u
n2n+EvAmReAWH3bmCnkvfcHfvb+0zCEjXlb64Xyl5b1M+fJWWBFNZlmXnOesIWQ8
afYrOhdK7K5CChw3Ob3UP9HtjSjrQuvBBPGkyAImdtjuI8u4zwGpPSsLFchQf+mm
XEam6VIbQD7kI5uszwb4du3tNV8c64RwyKqyiwui7GNUSE7MmCZY9HEwzF+XAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUO6PbgzoVus5d8LN4ddkslvh2YucwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1Mjg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHAI
MA0GCSqGSIb3DQEBCwUAA4IBAQAoOmtiY/kGqtj6bS2FbFWjRPoWJhvXKQazg6vp
ewkulfc54AONic/BNzy6S9aNtEH9d8l+7OObctlQjTHonj9ctKdzwTvYKV/yO3Ew
mOK/uiKf1IovC8zif6rRMbRssBryZsjzBxFg6791MLdP54jeoX60FcgGqGObQrde
aqDEsN8UV1aEDheh4Zh7Sgn6VPKvJUQzGiDbw+hEHlFEKCXP7PmP4WJokR3ypmAZ
zBLnkTJOyQNxZZhH9S8kLZ92AeKJBNBhBP28aU9+ZZsAXPzHLhitgoI4cfpqAxSw
y4+pVpsvzTiqEvDYqyZ0xMWneDKRZii6FQfs0Rz3nWJxY9Kl
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:08 2025 by rpki-client