Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213993.roa
File: AS213993.roa (raw, json)
Hash identifier: xE8968hwjkRcB9RQjHB6B529+lbQEYTrPQM5rUsHf8U=
Subject key identifier: 59:FC:66:F5:4B:F9:3B:40:7D:D6:0D:63:F2:74:3C:FE:9B:26:BA:ED
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 70D95EF877FA94C0396347071C1CE25D02BB1D1B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213993.roa
Signing time: Thu 22 May 2025 11:53:12 +0000
ROA not before: Thu 22 May 2025 11:48:12 +0000
ROA not after: Thu 21 May 2026 11:53:12 +0000
asID: 213993
IP address blocks: 91.124.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d9:5e:f8:77:fa:94:c0:39:63:47:07:1c:1c:e2:5d:02:bb:1d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 22 11:48:12 2025 GMT
Not After : May 21 11:53:12 2026 GMT
Subject: CN=59FC66F54BF93B407DD60D63F2743CFE9B26BAED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:8a:46:dd:f4:84:85:31:69:c1:d5:89:b0:
f1:16:fa:f4:ed:b9:d4:7a:4a:58:02:3f:38:ac:a0:
41:d6:c2:1e:dd:a0:4c:ac:03:a1:33:3b:5e:92:49:
cb:2c:80:76:4f:f5:f2:0d:6e:a9:6f:1e:b5:87:68:
ae:16:3f:5a:14:87:80:6b:10:e8:ad:90:5e:e1:ce:
a2:3e:41:f1:59:7c:0a:2e:e2:ba:db:56:da:5f:a2:
88:56:61:3d:4f:25:6a:99:32:2c:a7:74:14:78:99:
58:a7:d2:2a:b7:9b:29:ba:73:ed:bb:88:55:16:cc:
2d:fd:d9:f3:74:31:93:a4:9c:45:18:40:64:c9:a3:
df:34:bc:69:42:82:71:2c:86:44:6e:9b:7e:70:22:
57:af:56:a9:be:46:03:1c:dd:75:19:b5:75:b7:50:
c9:15:63:58:28:45:96:0a:dc:f1:1c:01:7b:aa:3d:
16:31:0a:29:09:52:b3:c0:be:1c:e7:9f:d0:c7:f1:
15:d6:b1:a2:4c:16:3c:23:e4:9b:5f:0c:bb:11:ab:
b4:64:3f:de:9b:10:2a:87:cf:a9:f6:40:bd:1b:92:
17:55:ab:2a:b0:8c:d4:48:25:1d:e1:ac:37:3c:c7:
dd:29:45:c0:bc:ae:c2:09:92:3e:3d:ed:d0:02:ec:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:66:F5:4B:F9:3B:40:7D:D6:0D:63:F2:74:3C:FE:9B:26:BA:ED
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.14.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a9:fd:da:e1:fe:5d:d0:ae:e0:11:55:5c:ed:b0:60:59:b3:
3d:ee:86:56:72:c0:6b:d6:67:9c:8c:5b:b6:a1:95:38:7c:8f:
82:9a:ce:8f:58:6b:85:2a:3c:ca:91:4f:3a:53:02:44:e8:14:
a6:2e:39:d7:e3:4f:6e:c0:d0:b0:e7:54:6c:95:24:67:74:13:
45:80:8d:a1:5b:44:92:57:44:7f:ab:ac:60:ed:3e:25:6a:12:
42:8d:23:75:09:8b:77:b0:00:2a:4b:91:69:e2:b5:0a:b5:b8:
25:91:a7:9b:b8:d6:7a:cf:fc:c3:97:6a:48:8b:ef:63:d6:27:
e3:54:06:06:2b:57:13:cb:28:aa:61:d1:c8:96:7d:d0:85:f7:
0b:a6:5c:83:2b:a6:60:3d:8c:5b:b8:e5:bf:76:5c:41:c3:c2:
44:c2:3b:51:80:74:b2:bb:5f:dd:8a:71:93:2f:52:a1:e1:19:
94:ca:c4:b1:74:14:9a:dc:49:36:f4:c0:2a:b8:c2:d8:38:9a:
65:7e:89:92:ba:6b:15:86:25:7d:e4:76:a3:f9:51:d8:0f:46:
8c:3f:80:06:34:56:79:46:ba:fd:51:90:8c:0c:96:f9:be:87:
fc:3d:ab:08:37:49:fc:1b:47:76:31:74:2b:7d:e3:ba:30:96:
a9:bf:70:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcNle+Hf6lMA5Y0cHHBziXQK7HRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA1MjIxMTQ4MTJaFw0yNjA1MjExMTUzMTJaMDMxMTAvBgNV
BAMTKDU5RkM2NkY1NEJGOTNCNDA3REQ2MEQ2M0YyNzQzQ0ZFOUIyNkJBRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7YpG3fSEhTFpwdWJsPEW+vTt
udR6SlgCPzisoEHWwh7doEysA6EzO16SScssgHZP9fINbqlvHrWHaK4WP1oUh4Br
EOitkF7hzqI+QfFZfAou4rrbVtpfoohWYT1PJWqZMiyndBR4mVin0iq3mym6c+27
iFUWzC392fN0MZOknEUYQGTJo980vGlCgnEshkRum35wIlevVqm+RgMc3XUZtXW3
UMkVY1goRZYK3PEcAXuqPRYxCikJUrPAvhznn9DH8RXWsaJMFjwj5JtfDLsRq7Rk
P96bECqHz6n2QL0bkhdVqyqwjNRIJR3hrDc8x90pRcC8rsIJkj497dAC7KJ/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUWfxm9Uv5O0B91g1j8nQ8/psmuu0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEzOTkzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3wO
MA0GCSqGSIb3DQEBCwUAA4IBAQCCqf3a4f5d0K7gEVVc7bBgWbM97oZWcsBr1mec
jFu2oZU4fI+Cms6PWGuFKjzKkU86UwJE6BSmLjnX409uwNCw51RslSRndBNFgI2h
W0SSV0R/q6xg7T4lahJCjSN1CYt3sAAqS5Fp4rUKtbglkaebuNZ6z/zDl2pIi+9j
1ifjVAYGK1cTyyiqYdHIln3QhfcLplyDK6ZgPYxbuOW/dlxBw8JEwjtRgHSyu1/d
inGTL1Kh4RmUysSxdBSa3Ek29MAquMLYOJplfomSumsVhiV95Haj+VHYD0aMP4AG
NFZ5Rrr9UZCMDJb5vof8PasIN0n8G0d2MXQrfeO6MJapv3AH
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:00 2025 by rpki-client