Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12874.roa
File: AS12874.roa (raw, json)
Hash identifier: L7H7KdR2E7/sEt61W4qZoAWMRAo+vvCB0nUHU5Px9nI=
Subject key identifier: D4:F3:3A:A1:A6:CF:57:49:0F:DF:A9:34:90:DF:51:25:40:00:7A:C8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 54985B8584FFA385919B9FEB884A3FD0B0502292
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12874.roa
Signing time: Thu 26 Jun 2025 19:50:32 +0000
ROA not before: Thu 26 Jun 2025 19:45:32 +0000
ROA not after: Thu 25 Jun 2026 19:50:32 +0000
asID: 12874
IP address blocks: 181.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 01:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:98:5b:85:84:ff:a3:85:91:9b:9f:eb:88:4a:3f:d0:b0:50:22:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 26 19:45:32 2025 GMT
Not After : Jun 25 19:50:32 2026 GMT
Subject: CN=D4F33AA1A6CF57490FDFA93490DF512540007AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:57:43:bc:86:b0:71:35:f8:99:4c:ee:0e:c0:
dc:d9:6b:64:6d:0b:96:8c:14:0f:46:7f:1e:b1:30:
5e:f0:e8:4e:d0:40:b5:ba:47:ae:65:34:11:1a:af:
e4:53:94:48:bc:5f:63:a6:b8:c2:63:f6:18:c5:97:
79:79:ae:94:06:ad:91:32:f3:15:67:03:29:e6:4c:
56:57:bf:8a:fc:b0:17:ea:ef:fe:68:36:6b:3e:b3:
b1:fc:6e:92:41:9a:bd:c6:66:c4:59:09:66:4b:a7:
0f:24:5a:2d:e8:01:7b:b5:9a:0e:f0:32:7b:a6:cb:
3d:c4:7b:1c:81:25:f8:23:9d:d1:bd:7a:1d:2a:5a:
1c:fa:e8:b4:41:15:9e:38:f2:90:b3:a0:89:f4:ef:
4f:e0:cb:38:c0:bc:f5:0a:80:1a:c9:37:64:e3:07:
25:fc:44:95:8c:b3:ae:c7:ef:0b:12:de:de:a1:12:
a6:c6:b8:5d:19:5f:a7:23:6c:d1:f3:62:7c:ca:26:
2a:ae:24:40:a1:9f:54:b8:da:1e:f2:45:75:a6:db:
29:5e:fa:b0:82:d9:e4:a1:d2:9f:69:57:73:53:f9:
58:18:df:48:01:1d:8f:2e:54:e9:81:07:f4:8e:f0:
79:db:b4:ad:7a:ba:a8:1d:97:98:91:b8:72:22:3b:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:3A:A1:A6:CF:57:49:0F:DF:A9:34:90:DF:51:25:40:00:7A:C8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
20:73:2d:75:68:68:5e:9c:e2:5e:58:ab:ae:8a:92:94:76:09:
85:e5:0e:ad:6c:0d:7a:3b:e5:06:a0:43:dc:4e:d6:59:85:e9:
0d:54:82:d2:42:75:9e:a7:99:1d:b2:20:9d:f8:06:e2:5d:ae:
67:e7:3c:2c:17:1b:41:30:7b:dd:6c:96:8b:1e:3c:67:a9:77:
63:61:05:a3:2d:82:b6:5b:86:41:fc:cf:cb:45:1a:f4:40:df:
69:52:3c:4d:21:54:0b:5e:eb:5c:78:f5:53:4c:83:34:47:0a:
25:29:83:38:d1:d6:a2:45:85:dd:20:f5:61:d0:bc:0e:28:ae:
88:7f:ee:48:e2:98:38:28:20:1e:df:74:ec:0c:8e:7a:a4:19:
35:38:c0:86:43:20:19:55:25:a9:7b:7f:04:5e:c0:12:23:22:
93:21:7f:a1:b0:1c:4e:55:16:c8:d9:b2:bb:39:1c:d4:fe:90:
60:26:a0:88:21:21:f1:95:4d:ed:59:12:ed:ed:23:74:3d:a6:
70:02:ae:27:ba:38:5b:0f:82:25:1c:44:82:21:94:4f:74:fe:
3f:4d:ce:db:ef:3b:7b:df:07:9b:a3:e1:43:ef:77:b3:fb:f2:
37:b3:b8:74:dd:45:52:a7:5f:4d:e2:6a:0a:9f:9e:d8:c4:fc:
c6:1b:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 14:04:33 2025 by rpki-client