Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215049.roa
File: AS215049.roa (raw, json)
Hash identifier: 0Lb2QHELSSPW5HlhuZCgmvsyKrjBmj26eyZsB5AIX/k=
Subject key identifier: E9:88:79:DB:52:2C:FC:D9:7C:7F:3C:81:8A:9A:AF:E1:47:C5:57:A3
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 38009F9D931E0E39407066DE912FE099AC2679DA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215049.roa
Signing time: Thu 10 Apr 2025 22:54:01 +0000
ROA not before: Thu 10 Apr 2025 22:49:01 +0000
ROA not after: Thu 09 Apr 2026 22:54:01 +0000
asID: 215049
IP address blocks: 141.11.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:00:9f:9d:93:1e:0e:39:40:70:66:de:91:2f:e0:99:ac:26:79:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 10 22:49:01 2025 GMT
Not After : Apr 9 22:54:01 2026 GMT
Subject: CN=E98879DB522CFCD97C7F3C818A9AAFE147C557A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:fd:75:55:44:0f:d2:f9:49:22:9c:01:bd:
6b:b6:de:46:93:d8:71:9f:50:e8:68:ae:6e:e4:7f:
49:8a:a2:6f:90:f6:7b:33:bf:74:b7:f5:b1:c7:98:
0b:da:69:35:41:20:e0:c5:64:73:a7:30:72:63:a9:
6c:49:53:5e:0f:3a:e1:38:50:bf:29:51:b0:7b:7d:
56:87:ce:76:6e:28:95:58:15:3a:6a:44:8b:64:cc:
9d:60:ff:3e:60:bb:13:85:96:e5:e5:b1:0a:c3:e0:
36:b1:ee:74:c8:f8:61:65:0f:d3:ef:03:9e:89:05:
6f:f8:56:e3:ab:f1:dd:fa:46:fb:1b:97:05:50:c4:
04:41:6e:9f:ce:cf:65:fd:9f:f2:61:86:c1:aa:3c:
85:9b:7b:4f:76:d2:d3:eb:ef:32:95:d2:53:20:7d:
9b:e3:56:0c:3d:9b:8e:72:68:04:ea:54:1a:94:4e:
2b:7a:90:c6:01:4c:a2:e6:e9:68:64:fb:12:4c:bf:
b6:67:4f:8c:c0:76:2d:a6:f5:0d:67:ab:9e:6f:47:
4a:b0:fd:64:97:38:b0:54:91:35:7e:9d:fe:c9:9e:
97:2e:ee:63:7c:3d:3d:66:f5:e1:ae:83:b8:b7:e9:
05:7e:c3:60:85:8b:2c:a9:96:97:27:c2:45:8c:17:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:88:79:DB:52:2C:FC:D9:7C:7F:3C:81:8A:9A:AF:E1:47:C5:57:A3
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4d:de:a6:3a:7f:8d:7a:22:ec:5b:aa:4f:bb:d2:97:82:79:
21:4f:48:21:58:26:05:82:a1:54:ed:38:4b:8a:01:d6:c1:31:
fc:c9:e7:79:3b:78:80:a4:fa:ad:20:c7:2f:5d:88:dc:4d:87:
1e:4f:40:9a:fe:6f:5c:7f:60:6b:aa:d7:34:8d:a9:b0:da:aa:
f0:76:8a:ab:36:34:ed:e9:97:b8:99:ae:ba:4d:71:f3:84:32:
89:79:ca:c9:3c:2d:ce:33:d3:71:64:65:dc:99:71:a7:4a:eb:
00:72:df:78:40:76:81:2a:16:d8:30:b4:80:b0:cf:16:58:ba:
05:3e:ad:a9:57:6b:45:84:b2:c4:8f:1e:a9:24:46:f1:4b:50:
8e:a9:7e:94:5c:89:49:22:00:97:d4:c2:72:de:28:cd:8a:23:
2b:8c:6d:dd:46:9c:35:b7:cc:c9:cf:ae:26:8c:98:c5:8f:f1:
9c:97:3c:3b:cc:62:44:45:aa:e3:5f:7e:67:ce:91:94:36:a9:
3a:6a:a6:45:5d:80:08:fd:fb:90:51:e2:1d:60:94:58:ab:74:
1b:62:8a:90:ea:57:f9:43:10:6d:84:39:8f:ce:1c:da:1a:5a:
04:a4:ef:73:6c:ac:ae:f3:f4:f0:7b:b0:b0:4a:bf:a2:8f:ec:
d8:e8:aa:f0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUOACfnZMeDjlAcGbekS/gmawmedowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA0MTAyMjQ5MDFaFw0yNjA0MDkyMjU0MDFaMDMxMTAvBgNV
BAMTKEU5ODg3OURCNTIyQ0ZDRDk3QzdGM0M4MThBOUFBRkUxNDdDNTU3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzS/11VUQP0vlJIpwBvWu23kaT
2HGfUOhorm7kf0mKom+Q9nszv3S39bHHmAvaaTVBIODFZHOnMHJjqWxJU14POuE4
UL8pUbB7fVaHznZuKJVYFTpqRItkzJ1g/z5guxOFluXlsQrD4Dax7nTI+GFlD9Pv
A56JBW/4VuOr8d36RvsblwVQxARBbp/Oz2X9n/JhhsGqPIWbe0920tPr7zKV0lMg
fZvjVgw9m45yaATqVBqUTit6kMYBTKLm6Whk+xJMv7ZnT4zAdi2m9Q1nq55vR0qw
/WSXOLBUkTV+nf7Jnpcu7mN8PT1m9eGug7i36QV+w2CFiyyplpcnwkWMF0VpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU6Yh521Is/Nl8fzyBipqv4UfFV6MwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE1MDQ5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQt3
MA0GCSqGSIb3DQEBCwUAA4IBAQC0Td6mOn+NeiLsW6pPu9KXgnkhT0ghWCYFgqFU
7ThLigHWwTH8yed5O3iApPqtIMcvXYjcTYceT0Ca/m9cf2Brqtc0jamw2qrwdoqr
NjTt6Ze4ma66TXHzhDKJecrJPC3OM9NxZGXcmXGnSusAct94QHaBKhbYMLSAsM8W
WLoFPq2pV2tFhLLEjx6pJEbxS1COqX6UXIlJIgCX1MJy3ijNiiMrjG3dRpw1t8zJ
z64mjJjFj/Gclzw7zGJERarjX35nzpGUNqk6aqZFXYAI/fuQUeIdYJRYq3QbYoqQ
6lf5QxBthDmPzhzaGloEpO9zbKyu8/Twe7CwSr+ij+zY6Krw
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:17 2025 by rpki-client