Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS32613.roa
File: AS32613.roa (raw, json)
Hash identifier: p3I3mfwzdisz2oJ9kX1epCE1sL0XqOqLNFi2jRfMftY=
Subject key identifier: 64:C9:BD:20:14:22:3E:DE:62:DC:BC:C9:5C:B7:8B:D9:F6:85:14:E5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 276C353B456A52EDBF43195FC2E280A35DCAC03D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS32613.roa
Signing time: Thu 10 Apr 2025 18:54:01 +0000
ROA not before: Thu 10 Apr 2025 18:49:01 +0000
ROA not after: Thu 09 Apr 2026 18:54:01 +0000
asID: 32613
IP address blocks: 141.11.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6c:35:3b:45:6a:52:ed:bf:43:19:5f:c2:e2:80:a3:5d:ca:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 10 18:49:01 2025 GMT
Not After : Apr 9 18:54:01 2026 GMT
Subject: CN=64C9BD2014223EDE62DCBCC95CB78BD9F68514E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:50:9e:d6:85:d1:5b:3c:f4:cf:95:5c:5d:7a:
4d:46:81:77:01:f2:71:44:db:b9:f5:6a:a7:f9:31:
db:aa:33:fd:4b:2f:b3:7a:6d:40:0f:58:c0:98:23:
fd:a6:0c:82:99:01:a3:14:d5:11:c5:c6:e7:e7:c1:
28:8d:53:25:4c:3b:a3:20:93:6a:a0:af:f5:9e:5a:
d3:7c:c9:aa:c5:a9:61:bb:8c:b9:53:48:af:df:78:
df:07:aa:1e:be:14:dd:d5:32:9b:b7:13:d5:2f:49:
63:e1:fd:11:ee:ef:2c:16:0a:ba:cd:4b:52:4e:26:
27:65:b8:23:2e:89:53:9e:03:33:d7:7a:1b:ba:01:
32:ae:eb:d4:45:af:79:98:7f:17:12:81:4d:cd:26:
67:04:3f:d1:80:e9:c8:99:f2:15:49:f1:77:be:b9:
1e:49:f9:1f:c3:d5:02:52:69:cf:83:0a:f2:24:8b:
df:66:0b:ce:aa:b9:06:71:6f:cc:da:0a:81:9c:84:
57:cc:10:0a:07:a5:64:47:16:04:2c:61:7a:54:da:
9c:c7:d3:5e:18:35:bb:d7:44:56:76:cd:e3:71:0a:
1e:3e:8c:b5:dd:c3:41:80:12:ee:a1:6a:91:50:13:
90:03:df:dc:7f:09:e2:7d:6d:35:c7:95:55:13:85:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C9:BD:20:14:22:3E:DE:62:DC:BC:C9:5C:B7:8B:D9:F6:85:14:E5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS32613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e0:38:f7:8b:51:d9:61:e2:ff:18:38:c2:e5:88:17:f6:1d:
4f:e8:a0:49:41:77:12:4b:cd:10:3c:d9:56:90:b2:d9:3a:02:
59:4e:0c:d1:9a:80:43:cc:f8:9e:7c:2e:35:a8:bf:c8:25:c8:
98:d0:35:ac:a9:fe:b1:5e:8f:0b:53:24:8c:ca:e0:f0:eb:97:
8a:f1:bb:72:d3:a7:67:e5:57:2a:6e:ca:80:02:2c:d4:28:f1:
65:0b:42:92:77:14:c3:43:74:6a:1f:89:2a:7f:98:9c:e8:79:
f9:de:fe:98:16:28:ea:1b:fc:02:57:84:9a:8f:aa:02:e6:be:
cf:ab:7d:7d:d9:67:cf:1a:73:12:83:e4:84:f9:a7:57:d4:ff:
6d:e5:3d:62:b2:a5:b9:ef:3d:90:f4:bd:18:28:eb:89:96:8d:
52:82:c1:a4:4e:88:61:f5:b1:05:21:3a:5b:7e:34:c2:96:06:
ac:90:6e:63:7f:04:7d:5f:b6:06:fc:49:af:73:f2:b6:58:c7:
1b:3e:f8:fa:d9:7a:56:29:bc:17:04:f5:f6:31:20:3f:e3:2a:
b6:4d:77:b9:99:99:08:92:ca:1f:b1:7a:e1:b0:53:d5:75:88:
76:91:21:24:ff:e7:50:ae:05:c2:8b:55:f1:2a:94:b1:5f:8a:
fd:64:99:d3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJ2w1O0VqUu2/QxlfwuKAo13KwD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA0MTAxODQ5MDFaFw0yNjA0MDkxODU0MDFaMDMxMTAvBgNV
BAMTKDY0QzlCRDIwMTQyMjNFREU2MkRDQkNDOTVDQjc4QkQ5RjY4NTE0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5UJ7WhdFbPPTPlVxdek1GgXcB
8nFE27n1aqf5MduqM/1LL7N6bUAPWMCYI/2mDIKZAaMU1RHFxufnwSiNUyVMO6Mg
k2qgr/WeWtN8yarFqWG7jLlTSK/feN8Hqh6+FN3VMpu3E9UvSWPh/RHu7ywWCrrN
S1JOJidluCMuiVOeAzPXehu6ATKu69RFr3mYfxcSgU3NJmcEP9GA6ciZ8hVJ8Xe+
uR5J+R/D1QJSac+DCvIki99mC86quQZxb8zaCoGchFfMEAoHpWRHFgQsYXpU2pzH
014YNbvXRFZ2zeNxCh4+jLXdw0GAEu6hapFQE5AD39x/CeJ9bTXHlVUThRTBAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUZMm9IBQiPt5i3LzJXLeL2faFFOUwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzI2MTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC3Yw
DQYJKoZIhvcNAQELBQADggEBAK7gOPeLUdlh4v8YOMLliBf2HU/ooElBdxJLzRA8
2VaQstk6AllODNGagEPM+J58LjWov8glyJjQNayp/rFejwtTJIzK4PDrl4rxu3LT
p2flVypuyoACLNQo8WULQpJ3FMNDdGofiSp/mJzoefne/pgWKOob/AJXhJqPqgLm
vs+rfX3ZZ88acxKD5IT5p1fU/23lPWKypbnvPZD0vRgo64mWjVKCwaROiGH1sQUh
Olt+NMKWBqyQbmN/BH1ftgb8Sa9z8rZYxxs++PrZelYpvBcE9fYxID/jKrZNd7mZ
mQiSyh+xeuGwU9V1iHaRIST/51CuBcKLVfEqlLFfiv1kmdM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:20 2025 by rpki-client