Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215311.roa
File: AS215311.roa (raw, json)
Hash identifier: XnnHQm/mkwf46S02H8tymxeZb5wu0i+50LFppvCVL2Y=
Subject key identifier: C6:91:2E:D8:30:8E:22:28:D8:D6:B0:4C:70:80:3C:D4:C5:B6:97:FF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 54E510F62037C014DB67107F75C10E2F5E3C0A26
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215311.roa
Signing time: Mon 17 Mar 2025 00:00:44 +0000
ROA not before: Sun 16 Mar 2025 23:55:44 +0000
ROA not after: Mon 16 Mar 2026 00:00:44 +0000
asID: 215311
IP address blocks: 181.215.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e5:10:f6:20:37:c0:14:db:67:10:7f:75:c1:0e:2f:5e:3c:0a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 16 23:55:44 2025 GMT
Not After : Mar 16 00:00:44 2026 GMT
Subject: CN=C6912ED8308E2228D8D6B04C70803CD4C5B697FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:6d:71:b7:a4:f6:1f:33:9d:b6:34:16:04:
fa:d0:4a:8f:37:2f:b9:0c:b1:a2:35:71:a0:c1:fa:
d4:23:be:98:df:f8:62:d3:4c:c1:01:31:9c:6c:98:
8a:83:51:6c:17:8b:b0:02:ee:b7:52:00:32:ea:0c:
f5:0d:dd:ea:c4:87:c5:34:fa:96:21:a7:03:30:f5:
37:41:4e:ed:68:05:6c:38:98:5d:e5:5d:88:32:1a:
62:db:0f:5b:91:5d:08:0a:c5:67:76:38:46:e0:95:
73:20:7b:7d:b7:1c:80:54:8f:7c:9c:6b:6c:09:58:
00:ad:c7:07:b2:bb:70:20:0b:e6:5b:64:ad:f9:9b:
c7:e5:1a:da:33:5e:f1:8c:5f:fd:28:e2:66:db:07:
54:54:61:3c:37:f6:e1:96:22:4a:c4:9b:f3:85:aa:
41:13:e8:cd:16:c1:34:61:11:98:78:e1:16:85:07:
8a:c1:a4:3d:dc:f2:ff:fd:a4:e0:49:af:8c:2a:07:
e7:fe:d7:38:75:3a:9b:a3:42:bd:d6:97:b5:79:23:
8f:db:4c:84:4a:fc:99:bb:9e:f7:ae:91:d3:91:e3:
0a:61:f3:7c:18:58:ab:ff:ce:9e:58:2d:6d:f4:46:
a7:b2:84:a5:2e:cc:54:ee:28:34:59:0b:f6:42:49:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:2E:D8:30:8E:22:28:D8:D6:B0:4C:70:80:3C:D4:C5:B6:97:FF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.39.0/24
Signature Algorithm: sha256WithRSAEncryption
43:6e:8f:d5:c4:5e:0d:db:a1:54:32:f1:9e:06:9e:b5:57:b6:
cb:90:67:ba:99:a3:b3:2b:d2:88:e9:2d:d1:3c:cc:98:32:33:
88:6d:a3:5c:35:da:aa:e8:23:c2:0f:11:e9:87:7d:56:36:4a:
61:ca:f6:b8:d7:52:f5:7d:85:40:76:c1:21:0e:65:95:22:6d:
45:49:ef:29:75:20:b9:13:86:6a:79:1c:bb:07:b8:e6:87:79:
14:f6:bd:3f:cc:30:b7:01:76:37:d5:8e:b2:03:2b:af:8c:e1:
ed:17:98:c4:8e:e4:bb:79:72:27:93:df:2f:60:eb:4d:fb:06:
8e:da:9a:b2:78:d2:56:2a:76:68:6f:cd:8b:10:62:aa:ef:76:
93:2e:31:dd:a1:03:60:03:d8:7e:54:4d:cc:4c:22:27:d1:a4:
0f:b0:8b:69:80:c9:a9:5d:b3:0f:fd:80:d2:09:a3:98:95:70:
79:c9:a2:d6:61:c7:75:a4:e1:33:c4:55:4d:24:a5:96:3b:f6:
e6:92:55:01:cc:d2:77:3c:78:f5:85:8e:52:a7:c4:86:ed:76:
b1:e1:e4:cd:28:d1:4c:04:eb:13:57:81:b8:1a:8d:0b:0f:7d:
77:b9:c0:82:4f:1a:d1:f0:1b:61:55:d8:8f:ad:6c:ba:58:20:
12:32:35:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVOUQ9iA3wBTbZxB/dcEOL148CiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTAzMTYyMzU1NDRaFw0yNjAzMTYwMDAwNDRaMDMxMTAvBgNV
BAMTKEM2OTEyRUQ4MzA4RTIyMjhEOEQ2QjA0QzcwODAzQ0Q0QzVCNjk3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO6m1xt6T2HzOdtjQWBPrQSo83
L7kMsaI1caDB+tQjvpjf+GLTTMEBMZxsmIqDUWwXi7AC7rdSADLqDPUN3erEh8U0
+pYhpwMw9TdBTu1oBWw4mF3lXYgyGmLbD1uRXQgKxWd2OEbglXMge323HIBUj3yc
a2wJWACtxweyu3AgC+ZbZK35m8flGtozXvGMX/0o4mbbB1RUYTw39uGWIkrEm/OF
qkET6M0WwTRhEZh44RaFB4rBpD3c8v/9pOBJr4wqB+f+1zh1OpujQr3Wl7V5I4/b
TIRK/Jm7nveukdOR4wph83wYWKv/zp5YLW30RqeyhKUuzFTuKDRZC/ZCSQIjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUxpEu2DCOIijY1rBMcIA81MW2l/8wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE1MzExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdcn
MA0GCSqGSIb3DQEBCwUAA4IBAQBDbo/VxF4N26FUMvGeBp61V7bLkGe6maOzK9KI
6S3RPMyYMjOIbaNcNdqq6CPCDxHph31WNkphyva411L1fYVAdsEhDmWVIm1FSe8p
dSC5E4ZqeRy7B7jmh3kU9r0/zDC3AXY31Y6yAyuvjOHtF5jEjuS7eXInk98vYOtN
+waO2pqyeNJWKnZob82LEGKq73aTLjHdoQNgA9h+VE3MTCIn0aQPsItpgMmpXbMP
/YDSCaOYlXB5yaLWYcd1pOEzxFVNJKWWO/bmklUBzNJ3PHj1hY5Sp8SG7Xax4eTN
KNFMBOsTV4G4Go0LD313ucCCTxrR8BthVdiPrWy6WCASMjWu
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:08:25 2025 by rpki-client