Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212935.roa
File: AS212935.roa (raw, json)
Hash identifier: PRTTWlRZbY9dhxjn2sZ1p8A/ytWqCQ5yigBiXdrLUoc=
Subject key identifier: D8:F1:2E:6A:C1:47:C5:E2:97:17:F7:91:3D:8F:BF:11:18:48:87:2C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1F06F5BE035B9D736D437AE346666C078AE583F0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212935.roa
Signing time: Fri 11 Apr 2025 07:34:03 +0000
ROA not before: Fri 11 Apr 2025 07:29:03 +0000
ROA not after: Fri 10 Apr 2026 07:34:03 +0000
asID: 212935
IP address blocks: 191.96.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:06:f5:be:03:5b:9d:73:6d:43:7a:e3:46:66:6c:07:8a:e5:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 11 07:29:03 2025 GMT
Not After : Apr 10 07:34:03 2026 GMT
Subject: CN=D8F12E6AC147C5E29717F7913D8FBF111848872C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:bf:b2:48:63:99:fa:f5:71:ce:46:7e:06:
74:cf:e6:34:48:d5:d9:73:68:45:8e:d9:47:4f:a2:
45:81:18:93:6b:4f:cc:ef:e0:66:f3:de:ed:9e:8d:
37:89:b3:90:7b:f3:5a:91:9b:0b:05:60:95:15:b1:
ea:3c:3b:b8:0b:18:7d:c4:c0:81:71:1f:e7:73:07:
59:0d:f3:f7:16:e8:5e:b7:6f:12:35:ae:fc:9e:7a:
0c:3e:20:dc:2d:fc:ec:91:03:e0:66:9a:f0:8d:a1:
dc:ea:33:b7:7b:d0:b6:14:98:05:36:fc:4b:3a:c2:
a5:6a:5b:4c:d8:20:34:70:02:89:fb:9c:d3:24:96:
fe:c5:c0:d7:0a:ba:f0:fe:99:e7:82:81:5d:9a:4d:
9a:aa:6a:41:ec:28:9a:49:d3:03:0e:1f:f3:90:98:
78:62:2f:21:50:76:ab:7d:8a:77:a3:39:b9:cd:28:
96:83:10:2a:8a:77:a5:97:fc:d9:20:69:2c:bd:6f:
92:6f:9c:9f:89:29:a0:e5:9a:15:56:19:f2:9e:84:
be:0a:a9:71:3d:1c:09:5a:dd:76:e5:a6:5a:68:6b:
68:56:d5:95:0d:26:3e:84:f0:7c:18:23:bc:c5:dc:
9f:fe:10:d9:52:12:d7:ef:88:b5:e4:ee:33:94:25:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:2E:6A:C1:47:C5:E2:97:17:F7:91:3D:8F:BF:11:18:48:87:2C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.204.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d1:3e:fa:d9:c4:3a:bd:00:6b:5a:e9:52:1b:3c:77:65:b1:
4a:b3:9a:0c:24:d4:a5:23:d5:68:d9:e7:a4:d3:4d:b7:6e:a2:
53:5c:35:7e:66:ac:8c:8d:8e:c3:c8:1b:57:5e:d9:e3:7e:aa:
1b:28:34:61:b2:53:57:a0:31:fb:b1:dc:1b:bd:fa:00:fc:c0:
31:82:f6:e8:34:f9:c8:16:00:9b:75:e6:75:74:fd:2c:95:b6:
c9:53:48:27:d6:28:06:fe:fb:14:11:0b:9a:28:91:8b:53:4b:
98:00:0e:14:bc:2b:58:a1:d6:07:0e:c0:2a:50:12:f0:53:f3:
7b:b9:69:d9:9d:37:37:e6:f8:65:c8:76:b4:f8:2f:02:d4:1f:
3b:1a:20:2c:77:be:38:8f:22:87:d0:30:b7:35:49:b0:56:3f:
88:7e:d1:b7:22:97:76:e1:bc:1c:8a:18:e3:c2:91:2e:1d:75:
fc:fe:bf:a3:ae:63:ec:ad:f2:96:bc:cd:ab:8b:6a:61:91:e1:
8d:48:6a:85:cc:a7:1f:3b:62:76:61:41:a7:e7:f0:e5:1b:a7:
90:3f:37:59:75:72:01:57:60:e9:1b:ed:c2:b4:c8:13:94:57:
d7:8b:a6:59:b4:55:06:58:95:44:3d:74:f7:c3:e9:bb:07:4d:
dc:b8:5b:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHwb1vgNbnXNtQ3rjRmZsB4rlg/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA0MTEwNzI5MDNaFw0yNjA0MTAwNzM0MDNaMDMxMTAvBgNV
BAMTKEQ4RjEyRTZBQzE0N0M1RTI5NzE3Rjc5MTNEOEZCRjExMTg0ODg3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKi7+ySGOZ+vVxzkZ+BnTP5jRI
1dlzaEWO2UdPokWBGJNrT8zv4Gbz3u2ejTeJs5B781qRmwsFYJUVseo8O7gLGH3E
wIFxH+dzB1kN8/cW6F63bxI1rvyeegw+INwt/OyRA+BmmvCNodzqM7d70LYUmAU2
/Es6wqVqW0zYIDRwAon7nNMklv7FwNcKuvD+meeCgV2aTZqqakHsKJpJ0wMOH/OQ
mHhiLyFQdqt9inejObnNKJaDECqKd6WX/NkgaSy9b5JvnJ+JKaDlmhVWGfKehL4K
qXE9HAla3Xblplpoa2hW1ZUNJj6E8HwYI7zF3J/+ENlSEtfviLXk7jOUJY9lAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2PEuasFHxeKXF/eRPY+/ERhIhywwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEyOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2DM
MA0GCSqGSIb3DQEBCwUAA4IBAQAW0T762cQ6vQBrWulSGzx3ZbFKs5oMJNSlI9Vo
2eek0023bqJTXDV+ZqyMjY7DyBtXXtnjfqobKDRhslNXoDH7sdwbvfoA/MAxgvbo
NPnIFgCbdeZ1dP0slbbJU0gn1igG/vsUEQuaKJGLU0uYAA4UvCtYodYHDsAqUBLw
U/N7uWnZnTc35vhlyHa0+C8C1B87GiAsd744jyKH0DC3NUmwVj+IftG3Ipd24bwc
ihjjwpEuHXX8/r+jrmPsrfKWvM2ri2phkeGNSGqFzKcfO2J2YUGn5/DlG6eQPzdZ
dXIBV2DpG+3CtMgTlFfXi6ZZtFUGWJVEPXT3w+m7B03cuFvi
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:43:08 2025 by rpki-client