Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211415.roa
File: AS211415.roa (raw, json)
Hash identifier: uUHQc2oQdk7oNxr0FDx7jnhBSnpsupvL5EgpsLCJv8I=
Subject key identifier: CE:8C:BC:EC:BE:C2:DB:79:AF:4C:63:4F:95:F2:89:D1:3F:63:0A:86
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3C15A3BF5CF9E73C942D37584886563357CAD869
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211415.roa
Signing time: Tue 08 Apr 2025 12:54:01 +0000
ROA not before: Tue 08 Apr 2025 12:49:01 +0000
ROA not after: Tue 07 Apr 2026 12:54:01 +0000
asID: 211415
IP address blocks: 45.154.105.0/24 maxlen: 24
185.155.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:15:a3:bf:5c:f9:e7:3c:94:2d:37:58:48:86:56:33:57:ca:d8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 8 12:49:01 2025 GMT
Not After : Apr 7 12:54:01 2026 GMT
Subject: CN=CE8CBCECBEC2DB79AF4C634F95F289D13F630A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3c:29:49:c1:cc:5d:a7:56:b2:d0:cf:30:02:
28:61:74:2c:80:6a:97:1b:d9:9e:30:63:05:d4:61:
8a:14:e4:85:06:83:4f:3d:55:56:ce:35:89:44:d7:
46:d5:8e:57:0f:33:9a:c6:ce:f2:fa:a4:c0:07:e8:
48:f1:23:17:92:52:40:d2:0d:a2:93:7c:e9:b1:5b:
6c:00:51:45:d6:f9:74:1d:64:ff:3e:90:f2:74:13:
2d:82:29:5c:40:4a:f9:a8:2f:7e:cc:16:4c:d5:e8:
d7:3f:28:6f:2a:43:dd:79:fc:03:3b:31:1a:eb:65:
3b:f7:05:01:8b:01:a1:6f:71:64:6a:6e:52:79:b6:
5c:b6:94:54:ef:6b:e2:06:58:6e:39:5f:1f:e8:28:
fa:c4:84:17:b3:ec:c3:b6:14:06:0e:c6:99:06:83:
b5:4b:57:11:53:50:32:99:d9:43:12:36:df:5d:42:
1d:fc:44:32:7f:b8:dc:7d:80:b9:18:eb:cb:2d:06:
a7:59:08:0b:08:36:93:a9:c4:b7:12:21:0e:84:df:
5e:a1:35:cb:59:2b:74:b6:0e:4e:1b:4c:da:7d:f6:
62:29:d3:21:fb:58:af:5b:e0:ed:c9:d9:ba:00:fb:
37:76:79:6c:35:d8:06:f4:15:37:1c:9c:b3:55:d9:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:BC:EC:BE:C2:DB:79:AF:4C:63:4F:95:F2:89:D1:3F:63:0A:86
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.105.0/24
185.155.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:64:35:4c:70:c6:2b:84:1d:f1:5a:4c:58:4e:96:0b:36:a1:
f9:82:22:f0:1a:d4:f8:28:ef:d8:ca:48:a1:17:77:0d:91:ab:
a4:b2:5b:a0:24:eb:bc:13:9a:c1:a5:64:60:23:72:1c:a9:3d:
44:1a:79:9e:cb:ba:41:bc:f6:71:93:bb:b2:3d:e2:6d:d3:9f:
96:12:07:e1:f1:13:40:18:ad:0c:9e:24:62:03:86:51:3c:a8:
22:70:ec:22:be:1f:e7:e8:aa:36:98:9d:35:8a:78:1e:28:ce:
18:b9:30:40:a1:ec:13:15:56:f0:3a:95:49:1c:17:8c:4a:0d:
80:62:28:83:ee:d7:57:11:01:dc:66:7c:7e:63:80:06:f9:1a:
93:48:35:78:c4:b7:36:8d:7e:58:1f:e6:40:cc:c5:de:5f:6f:
3e:a3:71:8c:6d:6b:0c:a4:6e:73:b7:25:31:9c:ec:05:d1:56:
3e:4a:ef:ad:1f:19:ce:fd:77:69:b4:5c:d4:46:b6:77:d2:80:
14:9a:61:33:96:34:37:93:ec:ca:35:a8:ed:eb:42:28:1c:66:
1d:7f:2d:a0:47:c2:b7:6d:b5:bb:5e:83:9f:dd:de:d2:f3:ed:
a9:84:f3:e0:84:f4:d3:06:1b:86:4f:b7:4a:0e:de:31:34:79:
b1:97:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:06:35 2025 by rpki-client