Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212027.roa
File: AS212027.roa (raw, json)
Hash identifier: Q0fHYwXFToGHp21H3gAr9wVKpdzKiTu+Q1KfouznXdA=
Subject key identifier: 31:E4:C8:81:B2:95:EA:7D:41:E6:52:EA:BB:5A:8F:49:22:D7:48:1A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1E2F1099F6E24A97F2B2F127916DC67B253637BB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212027.roa
Signing time: Wed 11 Jun 2025 11:11:37 +0000
ROA not before: Wed 11 Jun 2025 11:06:37 +0000
ROA not after: Wed 10 Jun 2026 11:11:37 +0000
asID: 212027
IP address blocks: 2a14:7580:ff60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2f:10:99:f6:e2:4a:97:f2:b2:f1:27:91:6d:c6:7b:25:36:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 11 11:06:37 2025 GMT
Not After : Jun 10 11:11:37 2026 GMT
Subject: CN=31E4C881B295EA7D41E652EABB5A8F4922D7481A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:73:42:9e:ce:3c:2d:87:d3:8e:5e:de:c4:74:
84:79:1c:7b:5b:8b:cb:a1:be:49:d5:76:69:d4:22:
00:61:19:b7:53:fb:43:07:f0:e2:46:ed:73:6d:fd:
01:dc:29:04:a1:66:1c:1c:76:e4:d0:8f:6a:01:b9:
75:cf:00:3c:18:59:7c:70:a2:09:aa:ed:ca:61:fc:
be:81:7f:ff:89:bb:e8:9e:98:cb:b9:85:34:71:17:
77:70:f9:f0:ff:36:ad:48:5e:a0:8b:ab:77:e0:fc:
55:9b:44:b7:5d:ef:0e:c9:de:ea:55:bf:1d:79:c9:
69:77:7d:c1:f8:f0:56:16:72:38:15:3b:9b:c2:fd:
74:21:1b:16:ef:f7:72:74:ff:a4:6e:20:c2:0c:b1:
f1:fd:1f:45:fc:da:83:09:71:ca:89:48:e7:e2:07:
b4:d0:c3:92:79:ea:3e:d9:11:19:f2:09:eb:fd:eb:
11:4f:a0:27:a9:f9:a7:4d:17:34:ee:95:05:ca:bd:
66:ae:dd:3b:bb:a7:d9:6c:f1:0d:cf:bd:db:e8:aa:
e6:3b:24:08:4a:5c:0f:05:24:45:af:15:40:02:67:
87:6b:43:27:48:4b:27:2a:b1:4b:fb:dc:30:80:7b:
84:79:83:77:bd:41:d5:a1:7e:38:31:0b:7e:cf:ee:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:C8:81:B2:95:EA:7D:41:E6:52:EA:BB:5A:8F:49:22:D7:48:1A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff60::/44
Signature Algorithm: sha256WithRSAEncryption
1a:f4:d6:7f:56:46:f3:70:16:cc:2e:b2:6c:c1:9f:d3:20:f8:
ad:63:9e:04:5d:d8:8f:90:21:ab:6f:06:25:5a:ed:87:ea:d2:
a5:c5:a0:1e:5d:66:7a:13:1b:9f:10:73:f0:32:f6:f3:ec:9d:
4b:1d:17:86:ba:61:0c:b8:5e:c2:65:60:f8:3c:22:54:bc:52:
c1:c1:15:85:e4:f9:9d:4f:51:b6:b6:42:61:4e:35:3a:88:a9:
ef:82:7d:f3:2c:04:e5:db:29:72:99:05:18:61:1d:89:c7:06:
98:71:2d:0d:b1:b1:c7:04:f8:07:64:79:2e:f0:11:61:f0:93:
f7:17:1a:17:f6:2b:d4:5f:a7:f4:99:8f:70:e5:78:13:ea:ce:
d0:95:c1:34:d7:91:ac:eb:fb:b2:c1:c5:ce:ff:f8:1f:83:02:
28:1d:91:19:87:cb:0d:0d:0b:1a:e9:b0:8f:4e:6b:c8:b7:79:
f4:d5:2a:5e:dd:a6:4d:3e:32:fe:10:e0:8c:a5:40:d6:fb:15:
7d:fa:ed:66:be:e2:7d:8c:92:53:b4:94:7f:8a:4b:02:48:8d:
d9:7c:c6:f7:fe:23:cb:f8:d8:cb:66:23:50:6d:31:e8:a2:1b:
16:cd:4d:03:73:4b:e5:94:ae:11:a5:6e:0c:26:18:33:9b:64:
d2:99:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:34:56 2025 by rpki-client